Azure built-in roles · security

Timelines and exceptions · All guidance changes

Azure · Official Microsoft guidance

No content change seen yet. Watched since today 08:30 UTC, last read today 08:30 UTC, next check 24 Oct 08:30 UTC. Microsoft's own edits are listed below.

Read the Microsoft source · Link to this observation · My radar

Timeline

From the capture of today 08:30 UTC

16 undated sections
12 with conditions

Settings and overrides named on this page

Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.

Role-Based

Requirements, exceptions and scope

App Compliance Automation ReaderException1 condition1 passage
Allows read-only access to App Compliance Automation tool for Microsoft 365…
Key Vault AdministratorRequirementExceptionScope1 condition1 passage
Perform all data plane operations on a key vault and all objects in it,…
Key Vault Certificate UserException1 condition1 passage
Key Vault Certificates OfficerException2 conditions1 passage
Key Vault ContributorException2 conditions1 passage
Role-Based
Key Vault Crypto OfficerException2 conditions1 passage
Key Vault Crypto Service Encryption UserException1 condition1 passage
Key Vault Crypto Service Release UserException1 condition1 passage
Key Vault Crypto UserException1 condition1 passage
Key Vault ReaderRequirementException1 condition1 passage
Key Vault Secrets OfficerException2 conditions1 passage
Key Vault Secrets UserException1 condition1 passage
Microsoft Sentinel ContributorScope1 passage
Microsoft Sentinel ReaderScope1 passage
Microsoft Sentinel ResponderScope1 passage
Security ReaderRequirement1 passage

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

Observed history and review priority

Captured today 08:30 UTC; extracted today 08:31 UTC. Extractor: microsoft-1/9/d9863eb412f92fa5ec3a8ca32e2dd7cfe8095530f456ecb1866608d1166a435d.

Review priority. Extracted assertions require review · Applicability or exceptions require review

0 date changes and 0 condition changes across 0 compared revisions. Suggested check interval: 24 hours.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Microsoft's edits

History on GitHub

Commits to the page's source in MicrosoftDocs/azure-docs, with Microsoft's own messages. Commit dates can be hours or days before Learn publishes the change. Read today 08:30 UTC.

1 Jul 12:38 UTC Address review feedback + July 1 refresh Served on LearnView diff
30 Jun 08:33 UTC [June refresh] Updated permissions for several roles and resource providers. View diff
20 Jun 20:53 UTC Update roles and permissions View diff
25 May 20:49 UTC Update roles and permissions View diff
9 Apr 17:35 UTC Microsoft.ClassicCompute permissions View diff
25 Feb 22:49 UTC Roles and permission for Feb 2026 View diff
2 Jan 19:05 UTC Roles and permission for Dec 2025 View diff
8 Sep 2025 21:24 UTC Updating author and ms.author metadata back to rolyon View diff
1 Jul 2025 20:33 UTC Updating metadata authors and manager View diff
28 May 2025 21:44 UTC Update security.md View diff
26 May 2025 19:45 UTC Roles and permissions for May View diff
18 May 2025 20:21 UTC Security Admin description update View diff
27 Apr 2025 20:08 UTC ms.topic: generated-reference View diff
27 Apr 2025 19:49 UTC Roles and permissions for April View diff
22 Mar 2025 23:42 UTC bulk update metadata manager View diff
11 Feb 2025 21:55 UTC Merge pull request #125455 from Iam-Manishkumar/Iam-Manishkumar/azure-docs View diff
11 Feb 2025 21:48 UTC Update articles/role-based-access-control/built-in-roles/security.md View diff
30 Jan 2025 06:20 UTC Update role descriptions with read permissions View diff
26 Jan 2025 21:13 UTC Roles and permissions for Jan View diff
3 Jan 2025 23:04 UTC Adding "Locks Contributor" Built-in role View diff

No related evidence found in this installation's recent collection. This does not establish that no announcement exists.

What changed

First observed 23 Oct 2026

No field changes are shown for this selection.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.