Role Information
Details and metadata
4aa368ec-fba9-4e93-81ed-396b3d461cc5
Change History
Track all modifications to this role since 2025-12-15 01:08:16+00:00
Updated On
Event Type
Summary & Details
2025-12-14 23:49:13
Initial Scan
Show full JSON
{
"properties": {
"roleName": "Operator Nexus Compute Contributor Role (Preview)",
"type": "BuiltInRole",
"description": "(Preview) Manage and configure Azure Operator Nexus infrastructure resources. This role is in preview and subject to change.",
"assignableScopes": [
"/"
],
"permissions": [
{
"actions": [
"Microsoft.Authorization/classicAdministrators/operationstatuses/read",
"Microsoft.Authorization/classicAdministrators/read",
"Microsoft.Authorization/denyAssignments/read",
"Microsoft.Authorization/diagnosticSettings/read",
"Microsoft.Authorization/diagnosticSettingsCategories/read",
"Microsoft.Authorization/locks/read",
"Microsoft.Authorization/operations/read",
"Microsoft.Authorization/permissions/read",
"Microsoft.Authorization/policyAssignments/read",
"Microsoft.Authorization/policyAssignments/privateLinkAssociations/read",
"Microsoft.Authorization/policyAssignments/resourceManagementPrivateLinks/read",
"Microsoft.Authorization/policyAssignments/resourceManagementPrivateLinks/privateEndpointConnectionProxies/read",
"Microsoft.Authorization/policyAssignments/resourceManagementPrivateLinks/privateEndpointConnections/read",
"Microsoft.Authorization/policyDefinitions/read",
"Microsoft.Authorization/policyExemptions/read",
"Microsoft.Authorization/policySetDefinitions/read",
"Microsoft.Authorization/providerOperations/read",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleAssignmentScheduleInstances/read",
"Microsoft.Authorization/roleAssignmentScheduleRequests/read",
"Microsoft.Authorization/roleAssignmentSchedules/read",
"Microsoft.Authorization/roleDefinitions/read",
"Microsoft.Authorization/roleEligibilityScheduleInstances/read",
"Microsoft.Authorization/roleEligibilityScheduleRequests/read",
"Microsoft.Authorization/roleEligibilitySchedules/read",
"Microsoft.Authorization/roleManagementPolicies/read",
"Microsoft.Authorization/roleManagementPolicyAssignments/read",
"Microsoft.ExtendedLocation/customLocations/deploy/action",
"Microsoft.ExtendedLocation/customLocations/read",
"Microsoft.HybridCompute/machines/extensions/read",
"Microsoft.HybridCompute/machines/read",
"Microsoft.Insights/alertRules/activated/action",
"Microsoft.Insights/alertRules/delete",
"Microsoft.Insights/alertRules/incidents/read",
"Microsoft.Insights/alertRules/read",
"Microsoft.Insights/alertRules/resolved/action",
"Microsoft.Insights/alertRules/throttled/action",
"Microsoft.Insights/alertRules/write",
"Microsoft.Kubernetes/connectedClusters/read",
"Microsoft.KubernetesConfiguration/extensions/read",
"Microsoft.ManagedNetworkFabric/networkFabricControllers/join/action",
"Microsoft.ManagedNetworkFabric/networkFabrics/join/action",
"Microsoft.ManagedNetworkFabric/networkRacks/join/action",
"Microsoft.NetworkCloud/bareMetalMachines/cordon/action",
"Microsoft.NetworkCloud/bareMetalMachines/delete",
"Microsoft.NetworkCloud/bareMetalMachines/powerOff/action",
"Microsoft.NetworkCloud/bareMetalMachines/read",
"Microsoft.NetworkCloud/bareMetalMachines/reimage/action",
"Microsoft.NetworkCloud/bareMetalMachines/replace/action",
"Microsoft.NetworkCloud/bareMetalMachines/restart/action",
"Microsoft.NetworkCloud/bareMetalMachines/runDataExtracts/action",
"Microsoft.NetworkCloud/bareMetalMachines/runReadCommands/action",
"Microsoft.NetworkCloud/bareMetalMachines/start/action",
"Microsoft.NetworkCloud/bareMetalMachines/uncordon/action",
"Microsoft.NetworkCloud/bareMetalMachines/write",
"Microsoft.NetworkCloud/clusterManagers/delete",
"Microsoft.NetworkCloud/clusterManagers/read",
"Microsoft.NetworkCloud/clusterManagers/write",
"Microsoft.NetworkCloud/clusters/bareMetalMachineKeySets/read",
"Microsoft.NetworkCloud/clusters/bmcKeySets/read",
"Microsoft.NetworkCloud/clusters/continueUpdateVersion/action",
"Microsoft.NetworkCloud/clusters/delete",
"Microsoft.NetworkCloud/clusters/deploy/action",
"Microsoft.NetworkCloud/clusters/metricsConfigurations/delete",
"Microsoft.NetworkCloud/clusters/metricsConfigurations/read",
"Microsoft.NetworkCloud/clusters/metricsConfigurations/write",
"Microsoft.NetworkCloud/clusters/read",
"Microsoft.NetworkCloud/clusters/scanRuntime/action",
"Microsoft.NetworkCloud/clusters/updateVersion/action",
"Microsoft.NetworkCloud/clusters/write",
"Microsoft.NetworkCloud/locations/operationStatuses/read",
"Microsoft.NetworkCloud/operations/read",
"Microsoft.NetworkCloud/rackSkus/read",
"Microsoft.NetworkCloud/racks/delete",
"Microsoft.NetworkCloud/racks/join/action",
"Microsoft.NetworkCloud/racks/read",
"Microsoft.NetworkCloud/racks/write",
"Microsoft.NetworkCloud/register/action",
"Microsoft.NetworkCloud/registeredSubscriptions/read",
"Microsoft.NetworkCloud/storageAppliances/read",
"Microsoft.NetworkCloud/unregister/action",
"Microsoft.Resources/deployments/cancel/action",
"Microsoft.Resources/deployments/delete",
"Microsoft.Resources/deployments/exportTemplate/action",
"Microsoft.Resources/deployments/operations/read",
"Microsoft.Resources/deployments/operationstatuses/read",
"Microsoft.Resources/deployments/read",
"Microsoft.Resources/deployments/validate/action",
"Microsoft.Resources/deployments/whatIf/action",
"Microsoft.Resources/deployments/write",
"Microsoft.Resources/subscriptions/resourceGroups/read"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"createdOn": "2024-07-12T15:54:23.51Z",
"updatedOn": "2024-07-12T15:54:23.51Z",
"createdBy": null,
"updatedBy": null
},
"id": "/providers/Microsoft.Authorization/roleDefinitions/4aa368ec-fba9-4e93-81ed-396b3d461cc5",
"type": "Microsoft.Authorization/roleDefinitions",
"name": "4aa368ec-fba9-4e93-81ed-396b3d461cc5"
}
2025-12-14 23:49:13
Initial Scan
View details
{
"properties": {
"roleName": "Operator Nexus Compute Contributor Role (Preview)",
"type": "BuiltInRole",
"description": "(Preview) Manage and configure Azure Operator Nexus infrastructure resources. This role is in preview and subject to change.",
"assignableScopes": [
"/"
],
"permissions": [
{
"actions": [
"Microsoft.Authorization/classicAdministrators/operationstatuses/read",
"Microsoft.Authorization/classicAdministrators/read",
"Microsoft.Authorization/denyAssignments/read",
"Microsoft.Authorization/diagnosticSettings/read",
"Microsoft.Authorization/diagnosticSettingsCategories/read",
"Microsoft.Authorization/locks/read",
"Microsoft.Authorization/operations/read",
"Microsoft.Authorization/permissions/read",
"Microsoft.Authorization/policyAssignments/read",
"Microsoft.Authorization/policyAssignments/privateLinkAssociations/read",
"Microsoft.Authorization/policyAssignments/resourceManagementPrivateLinks/read",
"Microsoft.Authorization/policyAssignments/resourceManagementPrivateLinks/privateEndpointConnectionProxies/read",
"Microsoft.Authorization/policyAssignments/resourceManagementPrivateLinks/privateEndpointConnections/read",
"Microsoft.Authorization/policyDefinitions/read",
"Microsoft.Authorization/policyExemptions/read",
"Microsoft.Authorization/policySetDefinitions/read",
"Microsoft.Authorization/providerOperations/read",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleAssignmentScheduleInstances/read",
"Microsoft.Authorization/roleAssignmentScheduleRequests/read",
"Microsoft.Authorization/roleAssignmentSchedules/read",
"Microsoft.Authorization/roleDefinitions/read",
"Microsoft.Authorization/roleEligibilityScheduleInstances/read",
"Microsoft.Authorization/roleEligibilityScheduleRequests/read",
"Microsoft.Authorization/roleEligibilitySchedules/read",
"Microsoft.Authorization/roleManagementPolicies/read",
"Microsoft.Authorization/roleManagementPolicyAssignments/read",
"Microsoft.ExtendedLocation/customLocations/deploy/action",
"Microsoft.ExtendedLocation/customLocations/read",
"Microsoft.HybridCompute/machines/extensions/read",
"Microsoft.HybridCompute/machines/read",
"Microsoft.Insights/alertRules/activated/action",
"Microsoft.Insights/alertRules/delete",
"Microsoft.Insights/alertRules/incidents/read",
"Microsoft.Insights/alertRules/read",
"Microsoft.Insights/alertRules/resolved/action",
"Microsoft.Insights/alertRules/throttled/action",
"Microsoft.Insights/alertRules/write",
"Microsoft.Kubernetes/connectedClusters/read",
"Microsoft.KubernetesConfiguration/extensions/read",
"Microsoft.ManagedNetworkFabric/networkFabricControllers/join/action",
"Microsoft.ManagedNetworkFabric/networkFabrics/join/action",
"Microsoft.ManagedNetworkFabric/networkRacks/join/action",
"Microsoft.NetworkCloud/bareMetalMachines/cordon/action",
"Microsoft.NetworkCloud/bareMetalMachines/delete",
"Microsoft.NetworkCloud/bareMetalMachines/powerOff/action",
"Microsoft.NetworkCloud/bareMetalMachines/read",
"Microsoft.NetworkCloud/bareMetalMachines/reimage/action",
"Microsoft.NetworkCloud/bareMetalMachines/replace/action",
"Microsoft.NetworkCloud/bareMetalMachines/restart/action",
"Microsoft.NetworkCloud/bareMetalMachines/runDataExtracts/action",
"Microsoft.NetworkCloud/bareMetalMachines/runReadCommands/action",
"Microsoft.NetworkCloud/bareMetalMachines/start/action",
"Microsoft.NetworkCloud/bareMetalMachines/uncordon/action",
"Microsoft.NetworkCloud/bareMetalMachines/write",
"Microsoft.NetworkCloud/clusterManagers/delete",
"Microsoft.NetworkCloud/clusterManagers/read",
"Microsoft.NetworkCloud/clusterManagers/write",
"Microsoft.NetworkCloud/clusters/bareMetalMachineKeySets/read",
"Microsoft.NetworkCloud/clusters/bmcKeySets/read",
"Microsoft.NetworkCloud/clusters/continueUpdateVersion/action",
"Microsoft.NetworkCloud/clusters/delete",
"Microsoft.NetworkCloud/clusters/deploy/action",
"Microsoft.NetworkCloud/clusters/metricsConfigurations/delete",
"Microsoft.NetworkCloud/clusters/metricsConfigurations/read",
"Microsoft.NetworkCloud/clusters/metricsConfigurations/write",
"Microsoft.NetworkCloud/clusters/read",
"Microsoft.NetworkCloud/clusters/scanRuntime/action",
"Microsoft.NetworkCloud/clusters/updateVersion/action",
"Microsoft.NetworkCloud/clusters/write",
"Microsoft.NetworkCloud/locations/operationStatuses/read",
"Microsoft.NetworkCloud/operations/read",
"Microsoft.NetworkCloud/rackSkus/read",
"Microsoft.NetworkCloud/racks/delete",
"Microsoft.NetworkCloud/racks/join/action",
"Microsoft.NetworkCloud/racks/read",
"Microsoft.NetworkCloud/racks/write",
"Microsoft.NetworkCloud/register/action",
"Microsoft.NetworkCloud/registeredSubscriptions/read",
"Microsoft.NetworkCloud/storageAppliances/read",
"Microsoft.NetworkCloud/unregister/action",
"Microsoft.Resources/deployments/cancel/action",
"Microsoft.Resources/deployments/delete",
"Microsoft.Resources/deployments/exportTemplate/action",
"Microsoft.Resources/deployments/operations/read",
"Microsoft.Resources/deployments/operationstatuses/read",
"Microsoft.Resources/deployments/read",
"Microsoft.Resources/deployments/validate/action",
"Microsoft.Resources/deployments/whatIf/action",
"Microsoft.Resources/deployments/write",
"Microsoft.Resources/subscriptions/resourceGroups/read"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"createdOn": "2024-07-12T15:54:23.51Z",
"updatedOn": "2024-07-12T15:54:23.51Z",
"createdBy": null,
"updatedBy": null
},
"id": "/providers/Microsoft.Authorization/roleDefinitions/4aa368ec-fba9-4e93-81ed-396b3d461cc5",
"type": "Microsoft.Authorization/roleDefinitions",
"name": "4aa368ec-fba9-4e93-81ed-396b3d461cc5"
}
Latest Role JSON
Raw definition from Azure
{
"properties": {
"roleName": "Operator Nexus Compute Contributor Role (Preview)",
"type": "BuiltInRole",
"description": "(Preview) Manage and configure Azure Operator Nexus infrastructure resources. This role is in preview and subject to change.",
"assignableScopes": [
"/"
],
"permissions": [
{
"actions": [
"Microsoft.Authorization/classicAdministrators/operationstatuses/read",
"Microsoft.Authorization/classicAdministrators/read",
"Microsoft.Authorization/denyAssignments/read",
"Microsoft.Authorization/diagnosticSettings/read",
"Microsoft.Authorization/diagnosticSettingsCategories/read",
"Microsoft.Authorization/locks/read",
"Microsoft.Authorization/operations/read",
"Microsoft.Authorization/permissions/read",
"Microsoft.Authorization/policyAssignments/read",
"Microsoft.Authorization/policyAssignments/privateLinkAssociations/read",
"Microsoft.Authorization/policyAssignments/resourceManagementPrivateLinks/read",
"Microsoft.Authorization/policyAssignments/resourceManagementPrivateLinks/privateEndpointConnectionProxies/read",
"Microsoft.Authorization/policyAssignments/resourceManagementPrivateLinks/privateEndpointConnections/read",
"Microsoft.Authorization/policyDefinitions/read",
"Microsoft.Authorization/policyExemptions/read",
"Microsoft.Authorization/policySetDefinitions/read",
"Microsoft.Authorization/providerOperations/read",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleAssignmentScheduleInstances/read",
"Microsoft.Authorization/roleAssignmentScheduleRequests/read",
"Microsoft.Authorization/roleAssignmentSchedules/read",
"Microsoft.Authorization/roleDefinitions/read",
"Microsoft.Authorization/roleEligibilityScheduleInstances/read",
"Microsoft.Authorization/roleEligibilityScheduleRequests/read",
"Microsoft.Authorization/roleEligibilitySchedules/read",
"Microsoft.Authorization/roleManagementPolicies/read",
"Microsoft.Authorization/roleManagementPolicyAssignments/read",
"Microsoft.ExtendedLocation/customLocations/deploy/action",
"Microsoft.ExtendedLocation/customLocations/read",
"Microsoft.HybridCompute/machines/extensions/read",
"Microsoft.HybridCompute/machines/read",
"Microsoft.Insights/alertRules/activated/action",
"Microsoft.Insights/alertRules/delete",
"Microsoft.Insights/alertRules/incidents/read",
"Microsoft.Insights/alertRules/read",
"Microsoft.Insights/alertRules/resolved/action",
"Microsoft.Insights/alertRules/throttled/action",
"Microsoft.Insights/alertRules/write",
"Microsoft.Kubernetes/connectedClusters/read",
"Microsoft.KubernetesConfiguration/extensions/read",
"Microsoft.ManagedNetworkFabric/networkFabricControllers/join/action",
"Microsoft.ManagedNetworkFabric/networkFabrics/join/action",
"Microsoft.ManagedNetworkFabric/networkRacks/join/action",
"Microsoft.NetworkCloud/bareMetalMachines/cordon/action",
"Microsoft.NetworkCloud/bareMetalMachines/delete",
"Microsoft.NetworkCloud/bareMetalMachines/powerOff/action",
"Microsoft.NetworkCloud/bareMetalMachines/read",
"Microsoft.NetworkCloud/bareMetalMachines/reimage/action",
"Microsoft.NetworkCloud/bareMetalMachines/replace/action",
"Microsoft.NetworkCloud/bareMetalMachines/restart/action",
"Microsoft.NetworkCloud/bareMetalMachines/runDataExtracts/action",
"Microsoft.NetworkCloud/bareMetalMachines/runReadCommands/action",
"Microsoft.NetworkCloud/bareMetalMachines/start/action",
"Microsoft.NetworkCloud/bareMetalMachines/uncordon/action",
"Microsoft.NetworkCloud/bareMetalMachines/write",
"Microsoft.NetworkCloud/clusterManagers/delete",
"Microsoft.NetworkCloud/clusterManagers/read",
"Microsoft.NetworkCloud/clusterManagers/write",
"Microsoft.NetworkCloud/clusters/bareMetalMachineKeySets/read",
"Microsoft.NetworkCloud/clusters/bmcKeySets/read",
"Microsoft.NetworkCloud/clusters/continueUpdateVersion/action",
"Microsoft.NetworkCloud/clusters/delete",
"Microsoft.NetworkCloud/clusters/deploy/action",
"Microsoft.NetworkCloud/clusters/metricsConfigurations/delete",
"Microsoft.NetworkCloud/clusters/metricsConfigurations/read",
"Microsoft.NetworkCloud/clusters/metricsConfigurations/write",
"Microsoft.NetworkCloud/clusters/read",
"Microsoft.NetworkCloud/clusters/scanRuntime/action",
"Microsoft.NetworkCloud/clusters/updateVersion/action",
"Microsoft.NetworkCloud/clusters/write",
"Microsoft.NetworkCloud/locations/operationStatuses/read",
"Microsoft.NetworkCloud/operations/read",
"Microsoft.NetworkCloud/rackSkus/read",
"Microsoft.NetworkCloud/racks/delete",
"Microsoft.NetworkCloud/racks/join/action",
"Microsoft.NetworkCloud/racks/read",
"Microsoft.NetworkCloud/racks/write",
"Microsoft.NetworkCloud/register/action",
"Microsoft.NetworkCloud/registeredSubscriptions/read",
"Microsoft.NetworkCloud/storageAppliances/read",
"Microsoft.NetworkCloud/unregister/action",
"Microsoft.Resources/deployments/cancel/action",
"Microsoft.Resources/deployments/delete",
"Microsoft.Resources/deployments/exportTemplate/action",
"Microsoft.Resources/deployments/operations/read",
"Microsoft.Resources/deployments/operationstatuses/read",
"Microsoft.Resources/deployments/read",
"Microsoft.Resources/deployments/validate/action",
"Microsoft.Resources/deployments/whatIf/action",
"Microsoft.Resources/deployments/write",
"Microsoft.Resources/subscriptions/resourceGroups/read"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"createdOn": "2024-07-12T15:54:23.51Z",
"updatedOn": "2024-07-12T15:54:23.51Z",
"createdBy": null,
"updatedBy": null
},
"id": "/providers/Microsoft.Authorization/roleDefinitions/4aa368ec-fba9-4e93-81ed-396b3d461cc5",
"type": "Microsoft.Authorization/roleDefinitions",
"name": "4aa368ec-fba9-4e93-81ed-396b3d461cc5"
}
Effective Permissions
Operations granted by this role (83 total)
Control Plane Operations (83)
No matching operations
/ shown
Data Plane Operations (0)
No data plane operations granted