Back to Operation

Migrate Arc Discovery Reader - Preview

Azure Built-in Role

Role Information

Details and metadata

Role ID
5d5dddae-e124-4753-972d-aae60b37deb4
Type
BuiltInRole
Last Updated (Azure)
2025-10-13 15:11:16

Change History

Track all modifications to this role

2025-10-13 15:11:16 Created
View details
+ {
+ "properties": {
+ "roleName": "Migrate Arc Discovery Reader - Preview",
+ "type": "BuiltInRole",
+ "description": "Read metadata of Azure Arc enabled server resources and metadata, performance and migration suitability of Arc enabled SQL server resources. Users creating Azure Migrate project that uses Arc resource discovery require this role on Arc scope of the project. To enable periodic sync, Azure Migrate project managed identity must be assigned this role. This role is in preview and subject to change.",
+ "assignableScopes": [
+ "/"
+ ],
+ "permissions": [
+ {
+ "actions": [
+ "Microsoft.Resources/subscriptions/resourceGroups/read",
+ "Microsoft.AzureArcData/sqlServerInstances/read",
+ "Microsoft.AzureArcData/sqlServerInstances/databases/read",
+ "Microsoft.AzureArcData/sqlServerInstances/availabilityGroups/read",
+ "Microsoft.AzureArcData/sqlServerInstances/getTelemetry/action",
+ "Microsoft.AzureArcData/sqlServerInstances/availabilityGroups/getDetailView/action",
+ "Microsoft.HybridCompute/machines/read",
+ "Microsoft.HybridCompute/machines/extensions/read"
+ ],
+ "notActions": [],
+ "dataActions": [],
+ "notDataActions": []
+ }
+ ],
+ "createdOn": "2025-10-13T15:11:16.331Z",
+ "updatedOn": "2025-10-13T15:11:16.331Z",
+ "createdBy": null,
+ "updatedBy": null
+ },
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/5d5dddae-e124-4753-972d-aae60b37deb4",
+ "type": "Microsoft.Authorization/roleDefinitions",
+ "name": "5d5dddae-e124-4753-972d-aae60b37deb4"
+ }

Latest Role JSON

Raw definition from Azure

{
  "properties": {
    "roleName": "Migrate Arc Discovery Reader - Preview",
    "type": "BuiltInRole",
    "description": "Read metadata of Azure Arc enabled server resources and metadata, performance and migration suitability of Arc enabled SQL server resources. Users creating Azure Migrate project that uses Arc resource discovery require this role on Arc scope of the project. To enable periodic sync, Azure Migrate project managed identity must be assigned this role. This role is in preview and subject to change.",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.Resources/subscriptions/resourceGroups/read",
          "Microsoft.AzureArcData/sqlServerInstances/read",
          "Microsoft.AzureArcData/sqlServerInstances/databases/read",
          "Microsoft.AzureArcData/sqlServerInstances/availabilityGroups/read",
          "Microsoft.AzureArcData/sqlServerInstances/getTelemetry/action",
          "Microsoft.AzureArcData/sqlServerInstances/availabilityGroups/getDetailView/action",
          "Microsoft.HybridCompute/machines/read",
          "Microsoft.HybridCompute/machines/extensions/read"
        ],
        "notActions": [],
        "dataActions": [],
        "notDataActions": []
      }
    ],
    "createdOn": "2025-10-13T15:11:16.331Z",
    "updatedOn": "2025-10-13T15:11:16.331Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/5d5dddae-e124-4753-972d-aae60b37deb4",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "5d5dddae-e124-4753-972d-aae60b37deb4"
}

Effective Permissions

Operations granted by this role (8 total)

Control Plane Operations (8)

Data Plane Operations (0)

No data plane operations granted