Azure Kubernetes Fleet Manager RBAC Writer for Member Clusters

{
  "properties": {
    "roleName": "Azure Kubernetes Fleet Manager RBAC Writer for Member Clusters",
    "type": "BuiltInRole",
    "description": "Allows\u00a0read/write\u00a0access\u00a0to\u00a0most\u00a0objects\u00a0in\u00a0a\u00a0namespace.\u00a0This\u00a0role\u00a0does\u00a0not\u00a0allow\u00a0viewing\u00a0or\u00a0modifying\u00a0roles\u00a0or\u00a0role\u00a0bindings.\u00a0However,\u00a0this\u00a0role\u00a0allows\u00a0accessing\u00a0Secrets\u00a0and\u00a0running\u00a0Pods\u00a0as\u00a0any\u00a0ServiceAccount\u00a0in\u00a0the\u00a0namespace,\u00a0so\u00a0it\u00a0can\u00a0be\u00a0used\u00a0to\u00a0gain\u00a0the\u00a0API\u00a0access\u00a0levels\u00a0of\u00a0any\u00a0ServiceAccount\u00a0in\u00a0the\u00a0namespace.\u00a0\u00a0Applying\u00a0this\u00a0role\u00a0at\u00a0cluster\u00a0scope\u00a0will\u00a0give\u00a0access\u00a0across\u00a0all\u00a0namespaces.",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.Authorization/*/read",
          "Microsoft.Resources/subscriptions/operationresults/read",
          "Microsoft.Resources/subscriptions/read",
          "Microsoft.Resources/subscriptions/resourceGroups/read"
        ],
        "notActions": [],
        "dataActions": [
          "Microsoft.ContainerService/fleets/members/apps/controllerrevisions/read",
          "Microsoft.ContainerService/fleets/members/apps/daemonsets/*",
          "Microsoft.ContainerService/fleets/members/apps/deployments/*",
          "Microsoft.ContainerService/fleets/members/apps/replicasets/*",
          "Microsoft.ContainerService/fleets/members/apps/statefulsets/*",
          "Microsoft.ContainerService/fleets/members/autoscaling/horizontalpodautoscalers/*",
          "Microsoft.ContainerService/fleets/members/batch/cronjobs/*",
          "Microsoft.ContainerService/fleets/members/coordination.k8s.io/leases/read",
          "Microsoft.ContainerService/fleets/members/coordination.k8s.io/leases/write",
          "Microsoft.ContainerService/fleets/members/coordination.k8s.io/leases/delete",
          "Microsoft.ContainerService/fleets/members/discovery.k8s.io/endpointslices/read",
          "Microsoft.ContainerService/fleets/members/batch/jobs/*",
          "Microsoft.ContainerService/fleets/members/configmaps/*",
          "Microsoft.ContainerService/fleets/members/endpoints/*",
          "Microsoft.ContainerService/fleets/members/events.k8s.io/events/read",
          "Microsoft.ContainerService/fleets/members/events/*",
          "Microsoft.ContainerService/fleets/members/extensions/daemonsets/*",
          "Microsoft.ContainerService/fleets/members/extensions/deployments/*",
          "Microsoft.ContainerService/fleets/members/extensions/ingresses/*",
          "Microsoft.ContainerService/fleets/members/extensions/networkpolicies/*",
          "Microsoft.ContainerService/fleets/members/extensions/replicasets/*",
          "Microsoft.ContainerService/fleets/members/limitranges/read",
          "Microsoft.ContainerService/fleets/members/metrics.k8s.io/pods/read",
          "Microsoft.ContainerService/fleets/members/metrics.k8s.io/nodes/read",
          "Microsoft.ContainerService/fleets/members/namespaces/read",
          "Microsoft.ContainerService/fleets/members/networking.k8s.io/ingresses/*",
          "Microsoft.ContainerService/fleets/members/networking.k8s.io/networkpolicies/*",
          "Microsoft.ContainerService/fleets/members/persistentvolumeclaims/*",
          "Microsoft.ContainerService/fleets/members/pods/*",
          "Microsoft.ContainerService/fleets/members/policy/poddisruptionbudgets/*",
          "Microsoft.ContainerService/fleets/members/replicationcontrollers/*",
          "Microsoft.ContainerService/fleets/members/resourcequotas/read",
          "Microsoft.ContainerService/fleets/members/secrets/*",
          "Microsoft.ContainerService/fleets/members/serviceaccounts/*",
          "Microsoft.ContainerService/fleets/members/services/*"
        ],
        "notDataActions": []
      }
    ],
    "createdOn": "2025-10-24T18:48:33.767Z",
    "updatedOn": "2025-10-24T18:48:33.767Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/50346970-0998-40f2-b47d-f3b8809840f8",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "50346970-0998-40f2-b47d-f3b8809840f8"
}