Back to Dashboard

Data Operator for Managed Disks

Azure Built-in Role

Role Information

Details and metadata

Role ID
959f8984-c045-4866-89c7-12bf9737be2e
Type
BuiltInRole
Last Updated (Azure)
2022-03-01 01:28:16

Change History

Track all modifications to this role

2022-03-01 01:28:16 Created
View details
+ {
+ "properties": {
+ "roleName": "Data Operator for Managed Disks",
+ "type": "BuiltInRole",
+ "description": "Provides permissions to upload data to empty managed disks, read, or export data of managed disks (not attached to running VMs) and snapshots using SAS URIs and Azure AD authentication.",
+ "assignableScopes": [
+ "/"
+ ],
+ "permissions": [
+ {
+ "actions": [],
+ "notActions": [],
+ "dataActions": [
+ "Microsoft.Compute/disks/download/action",
+ "Microsoft.Compute/disks/upload/action",
+ "Microsoft.Compute/snapshots/download/action",
+ "Microsoft.Compute/snapshots/upload/action"
+ ],
+ "notDataActions": []
+ }
+ ],
+ "createdOn": "2022-03-01T01:28:16.086Z",
+ "updatedOn": "2022-03-01T01:28:16.086Z",
+ "createdBy": null,
+ "updatedBy": null
+ },
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/959f8984-c045-4866-89c7-12bf9737be2e",
+ "type": "Microsoft.Authorization/roleDefinitions",
+ "name": "959f8984-c045-4866-89c7-12bf9737be2e"
+ }

Latest Role JSON

Raw definition from Azure

{
  "properties": {
    "roleName": "Data Operator for Managed Disks",
    "type": "BuiltInRole",
    "description": "Provides permissions to upload data to empty managed disks, read, or export data of managed disks (not attached to running VMs) and snapshots using SAS URIs and Azure AD authentication.",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [],
        "notActions": [],
        "dataActions": [
          "Microsoft.Compute/disks/download/action",
          "Microsoft.Compute/disks/upload/action",
          "Microsoft.Compute/snapshots/download/action",
          "Microsoft.Compute/snapshots/upload/action"
        ],
        "notDataActions": []
      }
    ],
    "createdOn": "2022-03-01T01:28:16.086Z",
    "updatedOn": "2022-03-01T01:28:16.086Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/959f8984-c045-4866-89c7-12bf9737be2e",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "959f8984-c045-4866-89c7-12bf9737be2e"
}

Effective Permissions

Operations granted by this role (4 total)

Control Plane Operations (0)

No control plane operations granted

Data Plane Operations (4)