Back to Operation

Azure Center for SAP solutions administrator

Azure Built-in Role

Role Information

Details and metadata

Role ID
7b0c7e81-271f-4c71-90bf-e30bdfdbc2f7
Type
BuiltInRole
Last Updated (Azure)
2023-06-23 15:54:15

Change History

Track all modifications to this role

2025-12-14 23:49:13 Initial Scan
View details
{
  "properties": {
    "roleName": "Azure Center for SAP solutions administrator",
    "type": "BuiltInRole",
    "description": "This role provides read and write access to all capabilities of Azure Center for SAP solutions.",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.Advisor/configurations/read",
          "Microsoft.Advisor/recommendations/read",
          "Microsoft.Workloads/sapvirtualInstances/*/read",
          "Microsoft.Workloads/sapVirtualInstances/*/write",
          "Microsoft.Workloads/sapVirtualInstances/*/delete",
          "Microsoft.Workloads/Locations/*/action",
          "Microsoft.Workloads/Locations/*/read",
          "Microsoft.Workloads/sapVirtualInstances/*/start/action",
          "Microsoft.Workloads/sapVirtualInstances/*/stop/action",
          "Microsoft.Workloads/connectors/*/read",
          "Microsoft.Workloads/connectors/*/write",
          "Microsoft.Workloads/connectors/*/delete",
          "Microsoft.Resources/subscriptions/resourceGroups/read",
          "Microsoft.Insights/alertRules/*",
          "Microsoft.Insights/metrics/read",
          "Microsoft.Insights/metricDefinitions/read",
          "Microsoft.Resources/deployments/*",
          "Microsoft.Authorization/*/read",
          "Microsoft.Resources/subscriptions/read",
          "Microsoft.Resources/subscriptions/resourceGroups/write",
          "Microsoft.Resources/subscriptions/resourcegroups/deployments/*",
          "Microsoft.ResourceHealth/availabilityStatuses/read",
          "Microsoft.Network/virtualNetworks/read",
          "Microsoft.Network/virtualNetworks/providers/Microsoft.Insights/metricDefinitions/read",
          "Microsoft.Network/virtualNetworks/subnets/read",
          "Microsoft.Network/virtualNetworks/subnets/write",
          "Microsoft.Network/virtualNetworks/subnets/virtualMachines/read",
          "Microsoft.Network/networkInterfaces/read",
          "Microsoft.Network/networkInterfaces/ipconfigurations/read",
          "Microsoft.Network/networkInterfaces/loadBalancers/read",
          "Microsoft.Network/networkInterfaces/providers/Microsoft.Insights/metricDefinitions/read",
          "Microsoft.Network/loadBalancers/read",
          "Microsoft.Network/loadBalancers/backendAddressPools/read",
          "Microsoft.Network/loadBalancers/frontendIPConfigurations/read",
          "Microsoft.Network/loadBalancers/loadBalancingRules/read",
          "Microsoft.Network/loadBalancers/inboundNatRules/read",
          "Microsoft.Network/loadBalancers/providers/Microsoft.Insights/logDefinitions/read",
          "Microsoft.Network/loadBalancers/networkInterfaces/read",
          "Microsoft.Network/loadBalancers/outboundRules/read",
          "Microsoft.Network/loadBalancers/virtualMachines/read",
          "Microsoft.Network/loadBalancers/providers/Microsoft.Insights/metricDefinitions/read",
          "Microsoft.Network/privateEndpoints/read",
          "Microsoft.Network/networkSecurityGroups/join/action",
          "Microsoft.Network/routeTables/join/action",
          "Microsoft.Storage/storageAccounts/read",
          "Microsoft.Storage/storageAccounts/blobServices/read",
          "Microsoft.Storage/storageAccounts/blobServices/containers/read",
          "Microsoft.Storage/storageAccounts/fileServices/read",
          "Microsoft.Storage/storageAccounts/fileServices/shares/read",
          "Microsoft.Compute/virtualMachines/read",
          "Microsoft.Compute/availabilitySets/read",
          "Microsoft.Compute/sshPublicKeys/read",
          "Microsoft.Compute/sshPublicKeys/write",
          "Microsoft.Compute/sshPublicKeys/*/generateKeyPair/action",
          "Microsoft.Compute/virtualMachines/extensions/read",
          "Microsoft.Compute/virtualMachines/extensions/delete",
          "Microsoft.Compute/disks/read"
        ],
        "notActions": [],
        "dataActions": [
          "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read"
        ],
        "notDataActions": []
      }
    ],
    "createdOn": "2022-10-04T15:12:06.473Z",
    "updatedOn": "2023-06-23T15:54:15.61Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/7b0c7e81-271f-4c71-90bf-e30bdfdbc2f7",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "7b0c7e81-271f-4c71-90bf-e30bdfdbc2f7"
}

Latest Role JSON

Raw definition from Azure

{
  "properties": {
    "roleName": "Azure Center for SAP solutions administrator",
    "type": "BuiltInRole",
    "description": "This role provides read and write access to all capabilities of Azure Center for SAP solutions.",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.Advisor/configurations/read",
          "Microsoft.Advisor/recommendations/read",
          "Microsoft.Workloads/sapvirtualInstances/*/read",
          "Microsoft.Workloads/sapVirtualInstances/*/write",
          "Microsoft.Workloads/sapVirtualInstances/*/delete",
          "Microsoft.Workloads/Locations/*/action",
          "Microsoft.Workloads/Locations/*/read",
          "Microsoft.Workloads/sapVirtualInstances/*/start/action",
          "Microsoft.Workloads/sapVirtualInstances/*/stop/action",
          "Microsoft.Workloads/connectors/*/read",
          "Microsoft.Workloads/connectors/*/write",
          "Microsoft.Workloads/connectors/*/delete",
          "Microsoft.Resources/subscriptions/resourceGroups/read",
          "Microsoft.Insights/alertRules/*",
          "Microsoft.Insights/metrics/read",
          "Microsoft.Insights/metricDefinitions/read",
          "Microsoft.Resources/deployments/*",
          "Microsoft.Authorization/*/read",
          "Microsoft.Resources/subscriptions/read",
          "Microsoft.Resources/subscriptions/resourceGroups/write",
          "Microsoft.Resources/subscriptions/resourcegroups/deployments/*",
          "Microsoft.ResourceHealth/availabilityStatuses/read",
          "Microsoft.Network/virtualNetworks/read",
          "Microsoft.Network/virtualNetworks/providers/Microsoft.Insights/metricDefinitions/read",
          "Microsoft.Network/virtualNetworks/subnets/read",
          "Microsoft.Network/virtualNetworks/subnets/write",
          "Microsoft.Network/virtualNetworks/subnets/virtualMachines/read",
          "Microsoft.Network/networkInterfaces/read",
          "Microsoft.Network/networkInterfaces/ipconfigurations/read",
          "Microsoft.Network/networkInterfaces/loadBalancers/read",
          "Microsoft.Network/networkInterfaces/providers/Microsoft.Insights/metricDefinitions/read",
          "Microsoft.Network/loadBalancers/read",
          "Microsoft.Network/loadBalancers/backendAddressPools/read",
          "Microsoft.Network/loadBalancers/frontendIPConfigurations/read",
          "Microsoft.Network/loadBalancers/loadBalancingRules/read",
          "Microsoft.Network/loadBalancers/inboundNatRules/read",
          "Microsoft.Network/loadBalancers/providers/Microsoft.Insights/logDefinitions/read",
          "Microsoft.Network/loadBalancers/networkInterfaces/read",
          "Microsoft.Network/loadBalancers/outboundRules/read",
          "Microsoft.Network/loadBalancers/virtualMachines/read",
          "Microsoft.Network/loadBalancers/providers/Microsoft.Insights/metricDefinitions/read",
          "Microsoft.Network/privateEndpoints/read",
          "Microsoft.Network/networkSecurityGroups/join/action",
          "Microsoft.Network/routeTables/join/action",
          "Microsoft.Storage/storageAccounts/read",
          "Microsoft.Storage/storageAccounts/blobServices/read",
          "Microsoft.Storage/storageAccounts/blobServices/containers/read",
          "Microsoft.Storage/storageAccounts/fileServices/read",
          "Microsoft.Storage/storageAccounts/fileServices/shares/read",
          "Microsoft.Compute/virtualMachines/read",
          "Microsoft.Compute/availabilitySets/read",
          "Microsoft.Compute/sshPublicKeys/read",
          "Microsoft.Compute/sshPublicKeys/write",
          "Microsoft.Compute/sshPublicKeys/*/generateKeyPair/action",
          "Microsoft.Compute/virtualMachines/extensions/read",
          "Microsoft.Compute/virtualMachines/extensions/delete",
          "Microsoft.Compute/disks/read"
        ],
        "notActions": [],
        "dataActions": [
          "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read"
        ],
        "notDataActions": []
      }
    ],
    "createdOn": "2022-10-04T15:12:06.473Z",
    "updatedOn": "2023-06-23T15:54:15.61Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/7b0c7e81-271f-4c71-90bf-e30bdfdbc2f7",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "7b0c7e81-271f-4c71-90bf-e30bdfdbc2f7"
}

Effective Permissions

Operations granted by this role (117 total)

Permission Patterns (from role definition)

Actions 57 patterns
Microsoft.Advisor/configurations/read Microsoft.Advisor/recommendations/read Microsoft.Workloads/sapvirtualInstances/*/read Microsoft.Workloads/sapVirtualInstances/*/write Microsoft.Workloads/sapVirtualInstances/*/delete Microsoft.Workloads/Locations/*/action Microsoft.Workloads/Locations/*/read Microsoft.Workloads/sapVirtualInstances/*/start/action Microsoft.Workloads/sapVirtualInstances/*/stop/action Microsoft.Workloads/connectors/*/read Microsoft.Workloads/connectors/*/write Microsoft.Workloads/connectors/*/delete Microsoft.Resources/subscriptions/resourceGroups/read Microsoft.Insights/alertRules/* Microsoft.Insights/metrics/read Microsoft.Insights/metricDefinitions/read Microsoft.Resources/deployments/* Microsoft.Authorization/*/read Microsoft.Resources/subscriptions/read Microsoft.Resources/subscriptions/resourceGroups/write Microsoft.Resources/subscriptions/resourcegroups/deployments/* Microsoft.ResourceHealth/availabilityStatuses/read Microsoft.Network/virtualNetworks/read Microsoft.Network/virtualNetworks/providers/Microsoft.Insights/metricDefinitions/read Microsoft.Network/virtualNetworks/subnets/read Microsoft.Network/virtualNetworks/subnets/write Microsoft.Network/virtualNetworks/subnets/virtualMachines/read Microsoft.Network/networkInterfaces/read Microsoft.Network/networkInterfaces/ipconfigurations/read Microsoft.Network/networkInterfaces/loadBalancers/read Microsoft.Network/networkInterfaces/providers/Microsoft.Insights/metricDefinitions/read Microsoft.Network/loadBalancers/read Microsoft.Network/loadBalancers/backendAddressPools/read Microsoft.Network/loadBalancers/frontendIPConfigurations/read Microsoft.Network/loadBalancers/loadBalancingRules/read Microsoft.Network/loadBalancers/inboundNatRules/read Microsoft.Network/loadBalancers/providers/Microsoft.Insights/logDefinitions/read Microsoft.Network/loadBalancers/networkInterfaces/read Microsoft.Network/loadBalancers/outboundRules/read Microsoft.Network/loadBalancers/virtualMachines/read Microsoft.Network/loadBalancers/providers/Microsoft.Insights/metricDefinitions/read Microsoft.Network/privateEndpoints/read Microsoft.Network/networkSecurityGroups/join/action Microsoft.Network/routeTables/join/action Microsoft.Storage/storageAccounts/read Microsoft.Storage/storageAccounts/blobServices/read Microsoft.Storage/storageAccounts/blobServices/containers/read Microsoft.Storage/storageAccounts/fileServices/read Microsoft.Storage/storageAccounts/fileServices/shares/read Microsoft.Compute/virtualMachines/read Microsoft.Compute/availabilitySets/read Microsoft.Compute/sshPublicKeys/read Microsoft.Compute/sshPublicKeys/write Microsoft.Compute/sshPublicKeys/*/generateKeyPair/action Microsoft.Compute/virtualMachines/extensions/read Microsoft.Compute/virtualMachines/extensions/delete Microsoft.Compute/disks/read
Data Actions 1 pattern
Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read

Control Plane Operations (116)

Data Plane Operations (1)