Backup Contributor

{
  "properties": {
    "roleName": "Backup Contributor",
    "type": "BuiltInRole",
    "description": "Lets you manage backups, but can't delete vaults and give access to others",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.Authorization/*/read",
          "Microsoft.Network/virtualNetworks/read",
          "Microsoft.RecoveryServices/locations/*",
          "Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/*",
          "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/*",
          "Microsoft.RecoveryServices/Vaults/backupFabrics/refreshContainers/action",
          "Microsoft.RecoveryServices/Vaults/backupJobs/*",
          "Microsoft.RecoveryServices/Vaults/backupJobsExport/action",
          "Microsoft.RecoveryServices/Vaults/backupOperationResults/*",
          "Microsoft.RecoveryServices/Vaults/backupPolicies/*",
          "Microsoft.RecoveryServices/Vaults/backupProtectableItems/*",
          "Microsoft.RecoveryServices/Vaults/backupProtectedItems/*",
          "Microsoft.RecoveryServices/Vaults/backupProtectionContainers/*",
          "Microsoft.RecoveryServices/Vaults/backupSecurityPIN/*",
          "Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read",
          "Microsoft.RecoveryServices/Vaults/certificates/*",
          "Microsoft.RecoveryServices/Vaults/extendedInformation/*",
          "Microsoft.RecoveryServices/Vaults/monitoringAlerts/read",
          "Microsoft.RecoveryServices/Vaults/monitoringConfigurations/*",
          "Microsoft.RecoveryServices/Vaults/read",
          "Microsoft.RecoveryServices/Vaults/registeredIdentities/*",
          "Microsoft.RecoveryServices/Vaults/usages/*",
          "Microsoft.Resources/deployments/*",
          "Microsoft.Resources/subscriptions/resourceGroups/read",
          "Microsoft.Storage/storageAccounts/read",
          "Microsoft.RecoveryServices/Vaults/backupstorageconfig/*",
          "Microsoft.RecoveryServices/Vaults/backupconfig/*",
          "Microsoft.RecoveryServices/Vaults/backupValidateOperation/action",
          "Microsoft.RecoveryServices/Vaults/write",
          "Microsoft.RecoveryServices/Vaults/backupOperations/read",
          "Microsoft.RecoveryServices/Vaults/backupEngines/read",
          "Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/*",
          "Microsoft.RecoveryServices/Vaults/backupFabrics/protectableContainers/read",
          "Microsoft.RecoveryServices/vaults/operationStatus/read",
          "Microsoft.RecoveryServices/vaults/operationResults/read",
          "Microsoft.RecoveryServices/locations/backupStatus/action",
          "Microsoft.RecoveryServices/locations/backupPreValidateProtection/action",
          "Microsoft.RecoveryServices/locations/backupValidateFeatures/action",
          "Microsoft.RecoveryServices/Vaults/monitoringAlerts/write",
          "Microsoft.RecoveryServices/operations/read",
          "Microsoft.RecoveryServices/locations/operationStatus/read",
          "Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read",
          "Microsoft.Support/*",
          "Microsoft.DataProtection/locations/getBackupStatus/action",
          "Microsoft.DataProtection/backupVaults/backupInstances/write",
          "Microsoft.DataProtection/backupVaults/backupInstances/delete",
          "Microsoft.DataProtection/backupVaults/backupInstances/read",
          "Microsoft.DataProtection/backupVaults/backupInstances/read",
          "Microsoft.DataProtection/backupVaults/deletedBackupInstances/read",
          "Microsoft.DataProtection/backupVaults/deletedBackupInstances/undelete/action",
          "Microsoft.DataProtection/backupVaults/backupInstances/backup/action",
          "Microsoft.DataProtection/backupVaults/backupInstances/validateRestore/action",
          "Microsoft.DataProtection/backupVaults/backupInstances/restore/action",
          "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/crossRegionRestore/action",
          "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/validateCrossRegionRestore/action",
          "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/fetchCrossRegionRestoreJobs/action",
          "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/fetchCrossRegionRestoreJob/action",
          "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/fetchSecondaryRecoveryPoints/action",
          "Microsoft.DataProtection/backupVaults/backupPolicies/write",
          "Microsoft.DataProtection/backupVaults/backupPolicies/delete",
          "Microsoft.DataProtection/backupVaults/backupPolicies/read",
          "Microsoft.DataProtection/backupVaults/backupPolicies/read",
          "Microsoft.DataProtection/backupVaults/backupInstances/recoveryPoints/read",
          "Microsoft.DataProtection/backupVaults/backupInstances/recoveryPoints/read",
          "Microsoft.DataProtection/backupVaults/backupInstances/findRestorableTimeRanges/action",
          "Microsoft.DataProtection/backupVaults/backupInstances/operationResults/read",
          "Microsoft.DataProtection/backupVaults/write",
          "Microsoft.DataProtection/backupVaults/read",
          "Microsoft.DataProtection/backupVaults/operationResults/read",
          "Microsoft.DataProtection/backupVaults/operationStatus/read",
          "Microsoft.DataProtection/locations/checkNameAvailability/action",
          "Microsoft.DataProtection/locations/checkFeatureSupport/action",
          "Microsoft.DataProtection/backupVaults/read",
          "Microsoft.DataProtection/backupVaults/read",
          "Microsoft.DataProtection/locations/operationStatus/read",
          "Microsoft.DataProtection/locations/operationResults/read",
          "Microsoft.DataProtection/backupVaults/validateForBackup/action",
          "Microsoft.DataProtection/operations/read",
          "Microsoft.RecoveryServices/Vaults/backupResourceGuardProxies/delete",
          "Microsoft.RecoveryServices/Vaults/backupResourceGuardProxies/read",
          "Microsoft.RecoveryServices/Vaults/backupResourceGuardProxies/unlockDelete/action",
          "Microsoft.RecoveryServices/Vaults/backupResourceGuardProxies/write",
          "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/read",
          "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/write",
          "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/delete",
          "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/unlockDelete/action",
          "Microsoft.DataProtection/backupVaults/backupInstances/validateForModifyBackup/action",
          "Microsoft.DataProtection/backupVaults/backupInstances/SuspendBackups/action",
          "Microsoft.DataProtection/backupVaults/backupInstances/resumeProtection/action"
        ],
        "notActions": [],
        "dataActions": [],
        "notDataActions": []
      }
    ],
    "createdOn": "2017-01-03T13:12:15.732Z",
    "updatedOn": "2025-10-30T15:20:27.16Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "5e467623-bb1f-42f4-a55d-6e525e11384b"
}