Role Information
Details and metadata
5d5dddae-e124-4753-972d-aae60b37deb4
Change History
Track all modifications to this role since 2025-12-15 01:08:16+00:00
Updated On
Event Type
Summary & Details
2025-10-13 15:11:16
Created
Show full JSON diff
+ {
+ "properties": {
+ "roleName": "Migrate Arc Discovery Reader - Preview",
+ "type": "BuiltInRole",
+ "description": "Read metadata of Azure Arc enabled server resources and metadata, performance and migration suitability of Arc enabled SQL server resources. Users creating Azure Migrate project that uses Arc resource discovery require this role on Arc scope of the project. To enable periodic sync, Azure Migrate project managed identity must be assigned this role. This role is in preview and subject to change.",
+ "assignableScopes": [
+ "/"
+ ],
+ "permissions": [
+ {
+ "actions": [
+ "Microsoft.Resources/subscriptions/resourceGroups/read",
+ "Microsoft.AzureArcData/sqlServerInstances/read",
+ "Microsoft.AzureArcData/sqlServerInstances/databases/read",
+ "Microsoft.AzureArcData/sqlServerInstances/availabilityGroups/read",
+ "Microsoft.AzureArcData/sqlServerInstances/getTelemetry/action",
+ "Microsoft.AzureArcData/sqlServerInstances/availabilityGroups/getDetailView/action",
+ "Microsoft.HybridCompute/machines/read",
+ "Microsoft.HybridCompute/machines/extensions/read"
+ ],
+ "notActions": [],
+ "dataActions": [],
+ "notDataActions": []
+ }
+ ],
+ "createdOn": "2025-10-13T15:11:16.331Z",
+ "updatedOn": "2025-10-13T15:11:16.331Z",
+ "createdBy": null,
+ "updatedBy": null
+ },
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/5d5dddae-e124-4753-972d-aae60b37deb4",
+ "type": "Microsoft.Authorization/roleDefinitions",
+ "name": "5d5dddae-e124-4753-972d-aae60b37deb4"
+ }
2025-10-13 15:11:16
Created
View details
+ {
+ "properties": {
+ "roleName": "Migrate Arc Discovery Reader - Preview",
+ "type": "BuiltInRole",
+ "description": "Read metadata of Azure Arc enabled server resources and metadata, performance and migration suitability of Arc enabled SQL server resources. Users creating Azure Migrate project that uses Arc resource discovery require this role on Arc scope of the project. To enable periodic sync, Azure Migrate project managed identity must be assigned this role. This role is in preview and subject to change.",
+ "assignableScopes": [
+ "/"
+ ],
+ "permissions": [
+ {
+ "actions": [
+ "Microsoft.Resources/subscriptions/resourceGroups/read",
+ "Microsoft.AzureArcData/sqlServerInstances/read",
+ "Microsoft.AzureArcData/sqlServerInstances/databases/read",
+ "Microsoft.AzureArcData/sqlServerInstances/availabilityGroups/read",
+ "Microsoft.AzureArcData/sqlServerInstances/getTelemetry/action",
+ "Microsoft.AzureArcData/sqlServerInstances/availabilityGroups/getDetailView/action",
+ "Microsoft.HybridCompute/machines/read",
+ "Microsoft.HybridCompute/machines/extensions/read"
+ ],
+ "notActions": [],
+ "dataActions": [],
+ "notDataActions": []
+ }
+ ],
+ "createdOn": "2025-10-13T15:11:16.331Z",
+ "updatedOn": "2025-10-13T15:11:16.331Z",
+ "createdBy": null,
+ "updatedBy": null
+ },
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/5d5dddae-e124-4753-972d-aae60b37deb4",
+ "type": "Microsoft.Authorization/roleDefinitions",
+ "name": "5d5dddae-e124-4753-972d-aae60b37deb4"
+ }
Latest Role JSON
Raw definition from Azure
{
"properties": {
"roleName": "Migrate Arc Discovery Reader - Preview",
"type": "BuiltInRole",
"description": "Read metadata of Azure Arc enabled server resources and metadata, performance and migration suitability of Arc enabled SQL server resources. Users creating Azure Migrate project that uses Arc resource discovery require this role on Arc scope of the project. To enable periodic sync, Azure Migrate project managed identity must be assigned this role. This role is in preview and subject to change.",
"assignableScopes": [
"/"
],
"permissions": [
{
"actions": [
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.AzureArcData/sqlServerInstances/read",
"Microsoft.AzureArcData/sqlServerInstances/databases/read",
"Microsoft.AzureArcData/sqlServerInstances/availabilityGroups/read",
"Microsoft.AzureArcData/sqlServerInstances/getTelemetry/action",
"Microsoft.AzureArcData/sqlServerInstances/availabilityGroups/getDetailView/action",
"Microsoft.HybridCompute/machines/read",
"Microsoft.HybridCompute/machines/extensions/read"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"createdOn": "2025-10-13T15:11:16.331Z",
"updatedOn": "2025-10-13T15:11:16.331Z",
"createdBy": null,
"updatedBy": null
},
"id": "/providers/Microsoft.Authorization/roleDefinitions/5d5dddae-e124-4753-972d-aae60b37deb4",
"type": "Microsoft.Authorization/roleDefinitions",
"name": "5d5dddae-e124-4753-972d-aae60b37deb4"
}
Effective Permissions
Operations granted by this role (8 total)
Control Plane Operations (8)
No matching operations
/ shown
Data Plane Operations (0)
No data plane operations granted