Microsoft.ContainerRegistry/registries/pull/read - Azure Operation

Operation Information

Details and metadata

Operation Name

Microsoft.ContainerRegistry/registries/pull/read

Display Name

Pull images from container registry.

Description

Pull or Get images from a container registry.

Operation Type

Control Plane

Provider

Microsoft ContainerRegistry

Resource Type

Registries

Roles Allowing This Operation

28 roles grant this permission

Role Name	Actions	Data Actions	Note
AcrPull 7f951dda-4ed3-4680-a7ca-43fe172d538d	1	0	—
AcrPush 8311e382-0749-4cb8-b61a-304f252e45ec	2	0	—
App Compliance Automation Administrator 0f37683f-2463-46b6-9ce7-9b788b988ba2	7,522	0	—
App Compliance Automation Reader ffc6bbe0-e443-4c3b-bf54-26581bb2f78e	7,484	0	—
Azure AI Administrator b78c5d69-af96-48a3-bf8d-a8b4d589de94	1,313	0	—
Azure Container Registry secure supply chain operator service role 96062cf7-95ca-4f89-9b9d-2a2aa47356af	3	6	—
Azure Resilience Management Drills Target Resource Administrator e4c7f620-39b8-4688-bba2-70dd82ef367b	7,489	0	—
Azure Resilience Management Drills Target Resource Contributor 82c6a823-ae9c-4b90-b5c5-bff581c45896	7,488	0	—
Container Registry Data Importer and Data Reader 577a9874-89fd-4f24-9dbd-b5034d0ad23a	3	3	—
Contributor b24988ac-6180-42a0-ab88-20f7382dd24c	17,503	0	—
Defender For Container Registries Operator c5c82243-e78e-43f9-8428-793bba85b28e	3	3	—
Log Analytics Contributor 92aaf0da-9dab-42b6-94a3-d43ce8d16293	7,582	0	—
Log Analytics Reader 73c42c96-874c-492b-b04d-ab87d138a893	7,492	0	—
Managed Application Contributor Role 641177b8-a67a-45b9-a033-47bc880bb21e	7,502	0	—
Managed Application Operator Role c7393b34-138c-406f-901b-d8cf2b17e6ae	7,491	0	—
Managed Application Publisher Operator b9331d33-8a36-4f8c-b097-4f54124fdb44	7,492	0	—
Monitoring Contributor 749f88d5-cbae-40b8-bcfc-e573ddc772fa	7,635	0	—
Monitoring Policy Contributor 47be4a87-7950-4631-9daf-b664a405f074	7,641	0	—
Monitoring Reader 43d0d8ad-25c7-4714-9337-8ba259a9fe05	7,491	0	—
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635	17,549	0	—
Reader acdd72a7-3385-48ef-bd42-f606fba81ae7	7,484	0	—
Resource Policy Contributor 36243c78-bf99-498c-9df9-86d9f8d28608	7,533	0	—
Role Based Access Control Administrator f58310d9-a9f6-439a-9e8d-f62e7b41a168	7,492	0	—
Service Group Administrator 4e50c84c-c78e-4e37-b47e-e60ffea0a775	17,547	0	—
Service Group Contributor 32e6a4ec-6095-4e37-b54b-12aa350ba81f	17,547	0	—
Service Group Reader de754d53-652d-4c75-a67f-1e48d8b49c97	7,484	0	—
User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9	7,538	0	—
UserAccessAdministrator for AzureJIT 5a966030-d6b2-4d2c-ba61-dbcf2f426586	7,487	0	—

Note: This list includes roles where the operation is allowed by the role's actions or dataActions patterns, excluding any patterns in notActions or notDataActions. Wildcard patterns (like */read or *) are expanded to match this specific operation.