Back to Operation

Site Recovery Operator

Azure Built-in Role

Role Information

Details and metadata

Role ID
494ae006-db33-4328-bf46-533a6560a3ca
Type
BuiltInRole
Last Updated (Azure)
2021-11-11 20:13:52

Change History

Track all modifications to this role

2021-11-11 20:13:52 Initial Scan
View details
{
  "properties": {
    "roleName": "Site Recovery Operator",
    "type": "BuiltInRole",
    "description": "Lets you failover and failback but not perform other Site Recovery management operations",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.Authorization/*/read",
          "Microsoft.Insights/alertRules/*",
          "Microsoft.Network/virtualNetworks/read",
          "Microsoft.RecoveryServices/locations/allocatedStamp/read",
          "Microsoft.RecoveryServices/locations/allocateStamp/action",
          "Microsoft.RecoveryServices/Vaults/extendedInformation/read",
          "Microsoft.RecoveryServices/Vaults/read",
          "Microsoft.RecoveryServices/Vaults/refreshContainers/read",
          "Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read",
          "Microsoft.RecoveryServices/Vaults/registeredIdentities/read",
          "Microsoft.RecoveryServices/vaults/replicationAlertSettings/read",
          "Microsoft.RecoveryServices/vaults/replicationEvents/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/checkConsistency/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/reassociateGateway/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/renewcertificate/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/replicationNetworkMappings/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectableItems/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/applyRecoveryPoint/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/failoverCommit/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/plannedFailover/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/recoveryPoints/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/repairReplication/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/reProtect/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/switchprotection/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/testFailover/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/testFailoverCleanup/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/unplannedFailover/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/updateMobilityService/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/refreshProvider/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/replicationStorageClassificationMappings/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationvCenters/read",
          "Microsoft.RecoveryServices/vaults/replicationJobs/*",
          "Microsoft.RecoveryServices/vaults/replicationPolicies/read",
          "Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/failoverCommit/action",
          "Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/plannedFailover/action",
          "Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/read",
          "Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/reProtect/action",
          "Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/testFailover/action",
          "Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/testFailoverCleanup/action",
          "Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/unplannedFailover/action",
          "Microsoft.RecoveryServices/vaults/replicationVaultSettings/read",
          "Microsoft.RecoveryServices/Vaults/monitoringAlerts/*",
          "Microsoft.RecoveryServices/Vaults/monitoringConfigurations/notificationConfiguration/read",
          "Microsoft.RecoveryServices/Vaults/storageConfig/read",
          "Microsoft.RecoveryServices/Vaults/tokenInfo/read",
          "Microsoft.RecoveryServices/Vaults/usages/read",
          "Microsoft.RecoveryServices/Vaults/vaultTokens/read",
          "Microsoft.ResourceHealth/availabilityStatuses/read",
          "Microsoft.Resources/deployments/*",
          "Microsoft.Resources/subscriptions/resourceGroups/read",
          "Microsoft.Storage/storageAccounts/read",
          "Microsoft.Support/*"
        ],
        "notActions": [],
        "dataActions": [],
        "notDataActions": []
      }
    ],
    "createdOn": "2017-05-19T13:47:50.134Z",
    "updatedOn": "2021-11-11T20:13:52.626Z",
    "createdBy": null,
    "updatedBy": ""
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/494ae006-db33-4328-bf46-533a6560a3ca",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "494ae006-db33-4328-bf46-533a6560a3ca"
}

Latest Role JSON

Raw definition from Azure

{
  "properties": {
    "roleName": "Site Recovery Operator",
    "type": "BuiltInRole",
    "description": "Lets you failover and failback but not perform other Site Recovery management operations",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.Authorization/*/read",
          "Microsoft.Insights/alertRules/*",
          "Microsoft.Network/virtualNetworks/read",
          "Microsoft.RecoveryServices/locations/allocatedStamp/read",
          "Microsoft.RecoveryServices/locations/allocateStamp/action",
          "Microsoft.RecoveryServices/Vaults/extendedInformation/read",
          "Microsoft.RecoveryServices/Vaults/read",
          "Microsoft.RecoveryServices/Vaults/refreshContainers/read",
          "Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read",
          "Microsoft.RecoveryServices/Vaults/registeredIdentities/read",
          "Microsoft.RecoveryServices/vaults/replicationAlertSettings/read",
          "Microsoft.RecoveryServices/vaults/replicationEvents/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/checkConsistency/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/reassociateGateway/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/renewcertificate/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/replicationNetworkMappings/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectableItems/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/applyRecoveryPoint/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/failoverCommit/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/plannedFailover/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/recoveryPoints/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/repairReplication/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/reProtect/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/switchprotection/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/testFailover/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/testFailoverCleanup/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/unplannedFailover/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/updateMobilityService/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/refreshProvider/action",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/replicationStorageClassificationMappings/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationvCenters/read",
          "Microsoft.RecoveryServices/vaults/replicationJobs/*",
          "Microsoft.RecoveryServices/vaults/replicationPolicies/read",
          "Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/failoverCommit/action",
          "Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/plannedFailover/action",
          "Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/read",
          "Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/reProtect/action",
          "Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/testFailover/action",
          "Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/testFailoverCleanup/action",
          "Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/unplannedFailover/action",
          "Microsoft.RecoveryServices/vaults/replicationVaultSettings/read",
          "Microsoft.RecoveryServices/Vaults/monitoringAlerts/*",
          "Microsoft.RecoveryServices/Vaults/monitoringConfigurations/notificationConfiguration/read",
          "Microsoft.RecoveryServices/Vaults/storageConfig/read",
          "Microsoft.RecoveryServices/Vaults/tokenInfo/read",
          "Microsoft.RecoveryServices/Vaults/usages/read",
          "Microsoft.RecoveryServices/Vaults/vaultTokens/read",
          "Microsoft.ResourceHealth/availabilityStatuses/read",
          "Microsoft.Resources/deployments/*",
          "Microsoft.Resources/subscriptions/resourceGroups/read",
          "Microsoft.Storage/storageAccounts/read",
          "Microsoft.Support/*"
        ],
        "notActions": [],
        "dataActions": [],
        "notDataActions": []
      }
    ],
    "createdOn": "2017-05-19T13:47:50.134Z",
    "updatedOn": "2021-11-11T20:13:52.626Z",
    "createdBy": null,
    "updatedBy": ""
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/494ae006-db33-4328-bf46-533a6560a3ca",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "494ae006-db33-4328-bf46-533a6560a3ca"
}

Effective Permissions

Operations granted by this role (114 total)

Permission Patterns (from role definition)

Actions 59 patterns
Microsoft.Authorization/*/read Microsoft.Insights/alertRules/* Microsoft.Network/virtualNetworks/read Microsoft.RecoveryServices/locations/allocatedStamp/read Microsoft.RecoveryServices/locations/allocateStamp/action Microsoft.RecoveryServices/Vaults/extendedInformation/read Microsoft.RecoveryServices/Vaults/read Microsoft.RecoveryServices/Vaults/refreshContainers/read Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read Microsoft.RecoveryServices/Vaults/registeredIdentities/read Microsoft.RecoveryServices/vaults/replicationAlertSettings/read Microsoft.RecoveryServices/vaults/replicationEvents/read Microsoft.RecoveryServices/vaults/replicationFabrics/checkConsistency/action Microsoft.RecoveryServices/vaults/replicationFabrics/read Microsoft.RecoveryServices/vaults/replicationFabrics/reassociateGateway/action Microsoft.RecoveryServices/vaults/replicationFabrics/renewcertificate/action Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/read Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/replicationNetworkMappings/read Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/read Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectableItems/read Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/applyRecoveryPoint/action Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/failoverCommit/action Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/plannedFailover/action Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/read Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/recoveryPoints/read Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/repairReplication/action Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/reProtect/action Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/switchprotection/action Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/testFailover/action Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/testFailoverCleanup/action Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/unplannedFailover/action Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/updateMobilityService/action Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings/read Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/read Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/refreshProvider/action Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/read Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/replicationStorageClassificationMappings/read Microsoft.RecoveryServices/vaults/replicationFabrics/replicationvCenters/read Microsoft.RecoveryServices/vaults/replicationJobs/* Microsoft.RecoveryServices/vaults/replicationPolicies/read Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/failoverCommit/action Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/plannedFailover/action Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/read Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/reProtect/action Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/testFailover/action Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/testFailoverCleanup/action Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/unplannedFailover/action Microsoft.RecoveryServices/vaults/replicationVaultSettings/read Microsoft.RecoveryServices/Vaults/monitoringAlerts/* Microsoft.RecoveryServices/Vaults/monitoringConfigurations/notificationConfiguration/read Microsoft.RecoveryServices/Vaults/storageConfig/read Microsoft.RecoveryServices/Vaults/tokenInfo/read Microsoft.RecoveryServices/Vaults/usages/read Microsoft.RecoveryServices/Vaults/vaultTokens/read Microsoft.ResourceHealth/availabilityStatuses/read Microsoft.Resources/deployments/* Microsoft.Resources/subscriptions/resourceGroups/read Microsoft.Storage/storageAccounts/read Microsoft.Support/*

Control Plane Operations (114)

Data Plane Operations (0)

No data plane operations granted