Defender Unified RBAC Reader

{
  "properties": {
    "roleName": "Defender Unified RBAC Reader",
    "type": "BuiltInRole",
    "description": "Defender Unified RBAC Reader. This role is managed and assigned automatically by the Defender Unified RBAC system. Manual assignment of this role is not recommended, as the Defender Unified RBAC system may modify or remove it at any time based on system requirements.",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.SecurityInsights/*/read",
          "Microsoft.SecurityInsights/dataConnectorsCheckRequirements/action",
          "Microsoft.SecurityInsights/threatIntelligence/indicators/query/action",
          "Microsoft.SecurityInsights/threatIntelligence/queryIndicators/action",
          "Microsoft.OperationalInsights/workspaces/analytics/query/action",
          "Microsoft.OperationalInsights/workspaces/*/read",
          "Microsoft.OperationalInsights/workspaces/LinkedServices/read",
          "Microsoft.OperationalInsights/workspaces/savedSearches/read",
          "Microsoft.OperationsManagement/solutions/read",
          "Microsoft.OperationalInsights/workspaces/query/read",
          "Microsoft.OperationalInsights/workspaces/query/*/read",
          "Microsoft.OperationalInsights/querypacks/*/read",
          "Microsoft.OperationalInsights/workspaces/dataSources/read",
          "Microsoft.OperationalInsights/workspaces/read",
          "Microsoft.Insights/workbooks/read",
          "Microsoft.Authorization/*/read"
        ],
        "notActions": [
          "Microsoft.SecurityInsights/ConfidentialWatchlists/*",
          "Microsoft.OperationalInsights/workspaces/query/ConfidentialWatchlist/*"
        ],
        "dataActions": [
          "Microsoft.OperationalInsights/workspaces/tables/data/read"
        ],
        "notDataActions": []
      }
    ],
    "createdOn": "2025-09-02T15:09:18.274Z",
    "updatedOn": "2025-09-15T15:09:07.354Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/78b7345a-1e1b-483a-ac62-62228c6ea89d",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "78b7345a-1e1b-483a-ac62-62228c6ea89d"
}