Role Information
Details and metadata
69b07be0-09bf-439a-b9a6-e73de851bd59
Change History
Track all modifications to this role
Updated On
Event Type
Summary & Details
2024-11-06 16:01:19
Created
Show full JSON diff
+ {
+ "properties": {
+ "roleName": "Container Registry Configuration Reader and Data Access Configuration Reader",
+ "type": "BuiltInRole",
+ "description": "Provides permissions to list container registries and registry configuration properties. Provides permissions to list data access configuration such as admin user credentials, scope maps, and tokens, which can be used to read, write or delete repositories and images. Does not provide direct permissions to read, list, or write registry contents including repositories and images. Does not provide permissions to modify data plane content such as imports, Artifact Cache or Sync, and Transfer Pipelines. Does not provide permissions for managing Tasks.",
+ "assignableScopes": [
+ "/"
+ ],
+ "permissions": [
+ {
+ "actions": [
+ "Microsoft.ContainerRegistry/registries/operationStatuses/read",
+ "Microsoft.ContainerRegistry/registries/read",
+ "Microsoft.ContainerRegistry/registries/privateEndpointConnections/read",
+ "Microsoft.ContainerRegistry/registries/privateEndpointConnections/operationStatuses/read",
+ "Microsoft.ContainerRegistry/registries/listCredentials/action",
+ "Microsoft.ContainerRegistry/registries/tokens/read",
+ "Microsoft.ContainerRegistry/registries/tokens/operationStatuses/read",
+ "Microsoft.ContainerRegistry/registries/scopeMaps/read",
+ "Microsoft.ContainerRegistry/registries/scopeMaps/operationStatuses/read",
+ "Microsoft.ContainerRegistry/registries/webhooks/read",
+ "Microsoft.ContainerRegistry/registries/webhooks/getCallbackConfig/action",
+ "Microsoft.ContainerRegistry/registries/webhooks/listEvents/action",
+ "Microsoft.ContainerRegistry/registries/webhooks/operationStatuses/read",
+ "Microsoft.ContainerRegistry/registries/replications/read",
+ "Microsoft.ContainerRegistry/registries/replications/operationStatuses/read",
+ "Microsoft.ContainerRegistry/registries/connectedRegistries/read",
+ "Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/diagnosticSettings/read",
+ "Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/diagnosticSettings/write",
+ "Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/logDefinitions/read",
+ "Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/metricDefinitions/read",
+ "Microsoft.Insights/AlertRules/Write",
+ "Microsoft.Insights/AlertRules/Delete",
+ "Microsoft.Insights/AlertRules/Read",
+ "Microsoft.Insights/AlertRules/Activated/Action",
+ "Microsoft.Insights/AlertRules/Resolved/Action",
+ "Microsoft.Insights/AlertRules/Throttled/Action",
+ "Microsoft.Insights/AlertRules/Incidents/Read"
+ ],
+ "notActions": [],
+ "dataActions": [],
+ "notDataActions": []
+ }
+ ],
+ "createdOn": "2024-11-06T16:01:19.813Z",
+ "updatedOn": "2024-11-06T16:01:19.813Z",
+ "createdBy": null,
+ "updatedBy": null
+ },
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/69b07be0-09bf-439a-b9a6-e73de851bd59",
+ "type": "Microsoft.Authorization/roleDefinitions",
+ "name": "69b07be0-09bf-439a-b9a6-e73de851bd59"
+ }
2024-11-06 16:01:19
Created
View details
+ {
+ "properties": {
+ "roleName": "Container Registry Configuration Reader and Data Access Configuration Reader",
+ "type": "BuiltInRole",
+ "description": "Provides permissions to list container registries and registry configuration properties. Provides permissions to list data access configuration such as admin user credentials, scope maps, and tokens, which can be used to read, write or delete repositories and images. Does not provide direct permissions to read, list, or write registry contents including repositories and images. Does not provide permissions to modify data plane content such as imports, Artifact Cache or Sync, and Transfer Pipelines. Does not provide permissions for managing Tasks.",
+ "assignableScopes": [
+ "/"
+ ],
+ "permissions": [
+ {
+ "actions": [
+ "Microsoft.ContainerRegistry/registries/operationStatuses/read",
+ "Microsoft.ContainerRegistry/registries/read",
+ "Microsoft.ContainerRegistry/registries/privateEndpointConnections/read",
+ "Microsoft.ContainerRegistry/registries/privateEndpointConnections/operationStatuses/read",
+ "Microsoft.ContainerRegistry/registries/listCredentials/action",
+ "Microsoft.ContainerRegistry/registries/tokens/read",
+ "Microsoft.ContainerRegistry/registries/tokens/operationStatuses/read",
+ "Microsoft.ContainerRegistry/registries/scopeMaps/read",
+ "Microsoft.ContainerRegistry/registries/scopeMaps/operationStatuses/read",
+ "Microsoft.ContainerRegistry/registries/webhooks/read",
+ "Microsoft.ContainerRegistry/registries/webhooks/getCallbackConfig/action",
+ "Microsoft.ContainerRegistry/registries/webhooks/listEvents/action",
+ "Microsoft.ContainerRegistry/registries/webhooks/operationStatuses/read",
+ "Microsoft.ContainerRegistry/registries/replications/read",
+ "Microsoft.ContainerRegistry/registries/replications/operationStatuses/read",
+ "Microsoft.ContainerRegistry/registries/connectedRegistries/read",
+ "Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/diagnosticSettings/read",
+ "Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/diagnosticSettings/write",
+ "Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/logDefinitions/read",
+ "Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/metricDefinitions/read",
+ "Microsoft.Insights/AlertRules/Write",
+ "Microsoft.Insights/AlertRules/Delete",
+ "Microsoft.Insights/AlertRules/Read",
+ "Microsoft.Insights/AlertRules/Activated/Action",
+ "Microsoft.Insights/AlertRules/Resolved/Action",
+ "Microsoft.Insights/AlertRules/Throttled/Action",
+ "Microsoft.Insights/AlertRules/Incidents/Read"
+ ],
+ "notActions": [],
+ "dataActions": [],
+ "notDataActions": []
+ }
+ ],
+ "createdOn": "2024-11-06T16:01:19.813Z",
+ "updatedOn": "2024-11-06T16:01:19.813Z",
+ "createdBy": null,
+ "updatedBy": null
+ },
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/69b07be0-09bf-439a-b9a6-e73de851bd59",
+ "type": "Microsoft.Authorization/roleDefinitions",
+ "name": "69b07be0-09bf-439a-b9a6-e73de851bd59"
+ }
Latest Role JSON
Raw definition from Azure
{
"properties": {
"roleName": "Container Registry Configuration Reader and Data Access Configuration Reader",
"type": "BuiltInRole",
"description": "Provides permissions to list container registries and registry configuration properties. Provides permissions to list data access configuration such as admin user credentials, scope maps, and tokens, which can be used to read, write or delete repositories and images. Does not provide direct permissions to read, list, or write registry contents including repositories and images. Does not provide permissions to modify data plane content such as imports, Artifact Cache or Sync, and Transfer Pipelines. Does not provide permissions for managing Tasks.",
"assignableScopes": [
"/"
],
"permissions": [
{
"actions": [
"Microsoft.ContainerRegistry/registries/operationStatuses/read",
"Microsoft.ContainerRegistry/registries/read",
"Microsoft.ContainerRegistry/registries/privateEndpointConnections/read",
"Microsoft.ContainerRegistry/registries/privateEndpointConnections/operationStatuses/read",
"Microsoft.ContainerRegistry/registries/listCredentials/action",
"Microsoft.ContainerRegistry/registries/tokens/read",
"Microsoft.ContainerRegistry/registries/tokens/operationStatuses/read",
"Microsoft.ContainerRegistry/registries/scopeMaps/read",
"Microsoft.ContainerRegistry/registries/scopeMaps/operationStatuses/read",
"Microsoft.ContainerRegistry/registries/webhooks/read",
"Microsoft.ContainerRegistry/registries/webhooks/getCallbackConfig/action",
"Microsoft.ContainerRegistry/registries/webhooks/listEvents/action",
"Microsoft.ContainerRegistry/registries/webhooks/operationStatuses/read",
"Microsoft.ContainerRegistry/registries/replications/read",
"Microsoft.ContainerRegistry/registries/replications/operationStatuses/read",
"Microsoft.ContainerRegistry/registries/connectedRegistries/read",
"Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/diagnosticSettings/read",
"Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/diagnosticSettings/write",
"Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/logDefinitions/read",
"Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/metricDefinitions/read",
"Microsoft.Insights/AlertRules/Write",
"Microsoft.Insights/AlertRules/Delete",
"Microsoft.Insights/AlertRules/Read",
"Microsoft.Insights/AlertRules/Activated/Action",
"Microsoft.Insights/AlertRules/Resolved/Action",
"Microsoft.Insights/AlertRules/Throttled/Action",
"Microsoft.Insights/AlertRules/Incidents/Read"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"createdOn": "2024-11-06T16:01:19.813Z",
"updatedOn": "2024-11-06T16:01:19.813Z",
"createdBy": null,
"updatedBy": null
},
"id": "/providers/Microsoft.Authorization/roleDefinitions/69b07be0-09bf-439a-b9a6-e73de851bd59",
"type": "Microsoft.Authorization/roleDefinitions",
"name": "69b07be0-09bf-439a-b9a6-e73de851bd59"
}