Role Information
Details and metadata
8fe6e843-6d9e-417b-9073-106b048f50bb
Change History
Track all modifications to this role since 2025-12-15 01:08:16+00:00
Updated On
Event Type
Summary & Details
2023-10-10 15:19:11
Created
Show full JSON diff
+ {
+ "properties": {
+ "roleName": "Landing Zone Management Reader",
+ "type": "BuiltInRole",
+ "description": "Microsoft.Sovereign Landing Zone Management Reader allowing to review Landing Zone Configurations and corresponding Registrations without the ability to modify. Also enables read-access to policies and management groups for enabling the full user experience of the Sovereign Services RP in the Azure Portal (as otherwise some elements might not be accessible to end users).",
+ "assignableScopes": [
+ "/"
+ ],
+ "permissions": [
+ {
+ "actions": [
+ "Microsoft.Sovereign/landingZoneConfigurations/read",
+ "Microsoft.Sovereign/landingZoneRegistrations/read"
+ ],
+ "notActions": [],
+ "dataActions": [],
+ "notDataActions": []
+ }
+ ],
+ "createdOn": "2023-10-10T15:19:11.646Z",
+ "updatedOn": "2023-10-10T15:19:11.646Z",
+ "createdBy": null,
+ "updatedBy": null
+ },
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/8fe6e843-6d9e-417b-9073-106b048f50bb",
+ "type": "Microsoft.Authorization/roleDefinitions",
+ "name": "8fe6e843-6d9e-417b-9073-106b048f50bb"
+ }
2023-10-10 15:19:11
Created
View details
+ {
+ "properties": {
+ "roleName": "Landing Zone Management Reader",
+ "type": "BuiltInRole",
+ "description": "Microsoft.Sovereign Landing Zone Management Reader allowing to review Landing Zone Configurations and corresponding Registrations without the ability to modify. Also enables read-access to policies and management groups for enabling the full user experience of the Sovereign Services RP in the Azure Portal (as otherwise some elements might not be accessible to end users).",
+ "assignableScopes": [
+ "/"
+ ],
+ "permissions": [
+ {
+ "actions": [
+ "Microsoft.Sovereign/landingZoneConfigurations/read",
+ "Microsoft.Sovereign/landingZoneRegistrations/read"
+ ],
+ "notActions": [],
+ "dataActions": [],
+ "notDataActions": []
+ }
+ ],
+ "createdOn": "2023-10-10T15:19:11.646Z",
+ "updatedOn": "2023-10-10T15:19:11.646Z",
+ "createdBy": null,
+ "updatedBy": null
+ },
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/8fe6e843-6d9e-417b-9073-106b048f50bb",
+ "type": "Microsoft.Authorization/roleDefinitions",
+ "name": "8fe6e843-6d9e-417b-9073-106b048f50bb"
+ }
Latest Role JSON
Raw definition from Azure
{
"properties": {
"roleName": "Landing Zone Management Reader",
"type": "BuiltInRole",
"description": "Microsoft.Sovereign Landing Zone Management Reader allowing to review Landing Zone Configurations and corresponding Registrations without the ability to modify. Also enables read-access to policies and management groups for enabling the full user experience of the Sovereign Services RP in the Azure Portal (as otherwise some elements might not be accessible to end users).",
"assignableScopes": [
"/"
],
"permissions": [
{
"actions": [
"Microsoft.Sovereign/landingZoneConfigurations/read",
"Microsoft.Sovereign/landingZoneRegistrations/read"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"createdOn": "2023-10-10T15:19:11.646Z",
"updatedOn": "2023-10-10T15:19:11.646Z",
"createdBy": null,
"updatedBy": null
},
"id": "/providers/Microsoft.Authorization/roleDefinitions/8fe6e843-6d9e-417b-9073-106b048f50bb",
"type": "Microsoft.Authorization/roleDefinitions",
"name": "8fe6e843-6d9e-417b-9073-106b048f50bb"
}
Effective Permissions
Operations granted by this role (0 total)
Control Plane Operations (0)
No control plane operations granted
Data Plane Operations (0)
No data plane operations granted