Back to Operation

Container Registry Data Importer and Data Reader

Azure Built-in Role

Role Information

Details and metadata

Role ID
577a9874-89fd-4f24-9dbd-b5034d0ad23a
Type
BuiltInRole
Last Updated (Azure)
2025-04-29 15:23:34

Change History

Track all modifications to this role

2025-04-29 15:23:34 Initial Scan
View details
{
  "properties": {
    "roleName": "Container Registry Data Importer and Data Reader",
    "type": "BuiltInRole",
    "description": "Provides the ability to import images into a registry through the registry import operation. Provides the ability to list repositories, view images and tags, get manifests, and pull images. Does not provide permissions for importing images through configuring registry transfer pipelines such as import and export pipelines. Does not provide permissions for importing through configuring Artifact Cache or Sync rules.",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.ContainerRegistry/registries/importImage/action",
          "Microsoft.ContainerRegistry/registries/read",
          "Microsoft.ContainerRegistry/registries/pull/read"
        ],
        "notActions": [],
        "dataActions": [
          "Microsoft.ContainerRegistry/registries/repositories/content/read",
          "Microsoft.ContainerRegistry/registries/repositories/metadata/read",
          "Microsoft.ContainerRegistry/registries/catalog/read"
        ],
        "notDataActions": []
      }
    ],
    "createdOn": "2024-09-23T15:05:08.384Z",
    "updatedOn": "2025-04-29T15:23:34.555Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/577a9874-89fd-4f24-9dbd-b5034d0ad23a",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "577a9874-89fd-4f24-9dbd-b5034d0ad23a"
}

Latest Role JSON

Raw definition from Azure

{
  "properties": {
    "roleName": "Container Registry Data Importer and Data Reader",
    "type": "BuiltInRole",
    "description": "Provides the ability to import images into a registry through the registry import operation. Provides the ability to list repositories, view images and tags, get manifests, and pull images. Does not provide permissions for importing images through configuring registry transfer pipelines such as import and export pipelines. Does not provide permissions for importing through configuring Artifact Cache or Sync rules.",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.ContainerRegistry/registries/importImage/action",
          "Microsoft.ContainerRegistry/registries/read",
          "Microsoft.ContainerRegistry/registries/pull/read"
        ],
        "notActions": [],
        "dataActions": [
          "Microsoft.ContainerRegistry/registries/repositories/content/read",
          "Microsoft.ContainerRegistry/registries/repositories/metadata/read",
          "Microsoft.ContainerRegistry/registries/catalog/read"
        ],
        "notDataActions": []
      }
    ],
    "createdOn": "2024-09-23T15:05:08.384Z",
    "updatedOn": "2025-04-29T15:23:34.555Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/577a9874-89fd-4f24-9dbd-b5034d0ad23a",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "577a9874-89fd-4f24-9dbd-b5034d0ad23a"
}

Effective Permissions

Operations granted by this role (6 total)

Control Plane Operations (3)

Data Plane Operations (3)