Back to Dashboard

Container Registry Configuration Reader and Data Access Configuration Reader

Azure Built-in Role

Role Information

Details and metadata

Role ID
69b07be0-09bf-439a-b9a6-e73de851bd59
Type
BuiltInRole
Last Updated (Azure)
2024-11-06 16:01:19

Change History

Track all modifications to this role since 2025-12-15 01:08:16+00:00

2024-11-06 16:01:19 Created
View details
+ {
+ "properties": {
+ "roleName": "Container Registry Configuration Reader and Data Access Configuration Reader",
+ "type": "BuiltInRole",
+ "description": "Provides permissions to list container registries and registry configuration properties. Provides permissions to list data access configuration such as admin user credentials, scope maps, and tokens, which can be used to read, write or delete repositories and images. Does not provide direct permissions to read, list, or write registry contents including repositories and images. Does not provide permissions to modify data plane content such as imports, Artifact Cache or Sync, and Transfer Pipelines. Does not provide permissions for managing Tasks.",
+ "assignableScopes": [
+ "/"
+ ],
+ "permissions": [
+ {
+ "actions": [
+ "Microsoft.ContainerRegistry/registries/operationStatuses/read",
+ "Microsoft.ContainerRegistry/registries/read",
+ "Microsoft.ContainerRegistry/registries/privateEndpointConnections/read",
+ "Microsoft.ContainerRegistry/registries/privateEndpointConnections/operationStatuses/read",
+ "Microsoft.ContainerRegistry/registries/listCredentials/action",
+ "Microsoft.ContainerRegistry/registries/tokens/read",
+ "Microsoft.ContainerRegistry/registries/tokens/operationStatuses/read",
+ "Microsoft.ContainerRegistry/registries/scopeMaps/read",
+ "Microsoft.ContainerRegistry/registries/scopeMaps/operationStatuses/read",
+ "Microsoft.ContainerRegistry/registries/webhooks/read",
+ "Microsoft.ContainerRegistry/registries/webhooks/getCallbackConfig/action",
+ "Microsoft.ContainerRegistry/registries/webhooks/listEvents/action",
+ "Microsoft.ContainerRegistry/registries/webhooks/operationStatuses/read",
+ "Microsoft.ContainerRegistry/registries/replications/read",
+ "Microsoft.ContainerRegistry/registries/replications/operationStatuses/read",
+ "Microsoft.ContainerRegistry/registries/connectedRegistries/read",
+ "Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/diagnosticSettings/read",
+ "Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/diagnosticSettings/write",
+ "Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/logDefinitions/read",
+ "Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/metricDefinitions/read",
+ "Microsoft.Insights/AlertRules/Write",
+ "Microsoft.Insights/AlertRules/Delete",
+ "Microsoft.Insights/AlertRules/Read",
+ "Microsoft.Insights/AlertRules/Activated/Action",
+ "Microsoft.Insights/AlertRules/Resolved/Action",
+ "Microsoft.Insights/AlertRules/Throttled/Action",
+ "Microsoft.Insights/AlertRules/Incidents/Read"
+ ],
+ "notActions": [],
+ "dataActions": [],
+ "notDataActions": []
+ }
+ ],
+ "createdOn": "2024-11-06T16:01:19.813Z",
+ "updatedOn": "2024-11-06T16:01:19.813Z",
+ "createdBy": null,
+ "updatedBy": null
+ },
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/69b07be0-09bf-439a-b9a6-e73de851bd59",
+ "type": "Microsoft.Authorization/roleDefinitions",
+ "name": "69b07be0-09bf-439a-b9a6-e73de851bd59"
+ }

Latest Role JSON

Raw definition from Azure

{
  "properties": {
    "roleName": "Container Registry Configuration Reader and Data Access Configuration Reader",
    "type": "BuiltInRole",
    "description": "Provides permissions to list container registries and registry configuration properties. Provides permissions to list data access configuration such as admin user credentials, scope maps, and tokens, which can be used to read, write or delete repositories and images. Does not provide direct permissions to read, list, or write registry contents including repositories and images. Does not provide permissions to modify data plane content such as imports, Artifact Cache or Sync, and Transfer Pipelines. Does not provide permissions for managing Tasks.",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.ContainerRegistry/registries/operationStatuses/read",
          "Microsoft.ContainerRegistry/registries/read",
          "Microsoft.ContainerRegistry/registries/privateEndpointConnections/read",
          "Microsoft.ContainerRegistry/registries/privateEndpointConnections/operationStatuses/read",
          "Microsoft.ContainerRegistry/registries/listCredentials/action",
          "Microsoft.ContainerRegistry/registries/tokens/read",
          "Microsoft.ContainerRegistry/registries/tokens/operationStatuses/read",
          "Microsoft.ContainerRegistry/registries/scopeMaps/read",
          "Microsoft.ContainerRegistry/registries/scopeMaps/operationStatuses/read",
          "Microsoft.ContainerRegistry/registries/webhooks/read",
          "Microsoft.ContainerRegistry/registries/webhooks/getCallbackConfig/action",
          "Microsoft.ContainerRegistry/registries/webhooks/listEvents/action",
          "Microsoft.ContainerRegistry/registries/webhooks/operationStatuses/read",
          "Microsoft.ContainerRegistry/registries/replications/read",
          "Microsoft.ContainerRegistry/registries/replications/operationStatuses/read",
          "Microsoft.ContainerRegistry/registries/connectedRegistries/read",
          "Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/diagnosticSettings/read",
          "Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/diagnosticSettings/write",
          "Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/logDefinitions/read",
          "Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/metricDefinitions/read",
          "Microsoft.Insights/AlertRules/Write",
          "Microsoft.Insights/AlertRules/Delete",
          "Microsoft.Insights/AlertRules/Read",
          "Microsoft.Insights/AlertRules/Activated/Action",
          "Microsoft.Insights/AlertRules/Resolved/Action",
          "Microsoft.Insights/AlertRules/Throttled/Action",
          "Microsoft.Insights/AlertRules/Incidents/Read"
        ],
        "notActions": [],
        "dataActions": [],
        "notDataActions": []
      }
    ],
    "createdOn": "2024-11-06T16:01:19.813Z",
    "updatedOn": "2024-11-06T16:01:19.813Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/69b07be0-09bf-439a-b9a6-e73de851bd59",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "69b07be0-09bf-439a-b9a6-e73de851bd59"
}

Effective Permissions

Operations granted by this role (27 total)

Control Plane Operations (27)

Data Plane Operations (0)

No data plane operations granted