Back to Dashboard

Landing Zone Account Reader

Azure Built-in Role

Role Information

Details and metadata

Role ID
2718b1f7-eb07-424e-8868-0137541392a1
Type
BuiltInRole
Last Updated (Azure)
2024-10-16 15:31:49

Change History

Track all modifications to this role since 2025-12-15 01:08:16+00:00

2024-10-16 15:31:49 Created
View details
+ {
+ "properties": {
+ "roleName": "Landing Zone Account Reader",
+ "type": "BuiltInRole",
+ "description": "Microsoft.Sovereign Landing Zone Account Reader allowing to read Landing Zone Account, Landing Zone Configurations and Landing Zone Registrations. Also enables read-access to policies and management groups for enabling the full user experience of the Sovereign Services RP in the Azure Portal (as otherwise some elements might not be accessible to end users).",
+ "assignableScopes": [
+ "/"
+ ],
+ "permissions": [
+ {
+ "actions": [
+ "Microsoft.Sovereign/landingZoneAccounts/*/read"
+ ],
+ "notActions": [],
+ "dataActions": [],
+ "notDataActions": []
+ }
+ ],
+ "createdOn": "2024-10-16T15:31:49.799Z",
+ "updatedOn": "2024-10-16T15:31:49.799Z",
+ "createdBy": null,
+ "updatedBy": null
+ },
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/2718b1f7-eb07-424e-8868-0137541392a1",
+ "type": "Microsoft.Authorization/roleDefinitions",
+ "name": "2718b1f7-eb07-424e-8868-0137541392a1"
+ }

Latest Role JSON

Raw definition from Azure

{
  "properties": {
    "roleName": "Landing Zone Account Reader",
    "type": "BuiltInRole",
    "description": "Microsoft.Sovereign Landing Zone Account Reader allowing to read Landing Zone Account, Landing Zone Configurations and Landing Zone Registrations. Also enables read-access to policies and management groups for enabling the full user experience of the Sovereign Services RP in the Azure Portal (as otherwise some elements might not be accessible to end users).",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.Sovereign/landingZoneAccounts/*/read"
        ],
        "notActions": [],
        "dataActions": [],
        "notDataActions": []
      }
    ],
    "createdOn": "2024-10-16T15:31:49.799Z",
    "updatedOn": "2024-10-16T15:31:49.799Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/2718b1f7-eb07-424e-8868-0137541392a1",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "2718b1f7-eb07-424e-8868-0137541392a1"
}

Effective Permissions

Operations granted by this role (2 total)

Permission Patterns (from role definition)

Actions 1 pattern
Microsoft.Sovereign/landingZoneAccounts/*/read

Control Plane Operations (2)

Data Plane Operations (0)

No data plane operations granted