Back to Operation

Azure Bot Service Contributor Role

Azure Built-in Role

Role Information

Details and metadata

Role ID
9fc6112f-f48e-4e27-8b09-72a5c94e4ae9
Type
BuiltInRole
Last Updated (Azure)
2025-02-03 16:08:28

Change History

Track all modifications to this role

2025-02-03 16:08:28 Initial Scan
View details
{
  "properties": {
    "roleName": "Azure Bot Service Contributor Role",
    "type": "BuiltInRole",
    "description": "To perform actions on the bots by copilot studio platform and extensibility team",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.BotService/listAuthServiceProviders/action",
          "Microsoft.BotService/listauthserviceproviders/providers/Microsoft.Insights/diagnosticSettings/write",
          "Microsoft.BotService/botServices/read",
          "Microsoft.BotService/botServices/write",
          "Microsoft.BotService/botServices/delete",
          "Microsoft.BotService/botServices/channels/write",
          "Microsoft.BotService/botServices/channels/read",
          "Microsoft.BotService/botServices/channels/listchannelwithkeys/action",
          "Microsoft.BotService/botServices/channels/delete",
          "Microsoft.BotService/botServices/channels/providers/Microsoft.Insights/diagnosticSettings/write",
          "Microsoft.BotService/botServices/connections/read",
          "Microsoft.BotService/botServices/connections/write",
          "Microsoft.BotService/botServices/connections/delete",
          "Microsoft.BotService/botServices/connections/listwithsecrets/write",
          "Microsoft.BotService/botServices/connections/providers/Microsoft.Insights/diagnosticSettings/write",
          "Microsoft.BotService/botServices/createemailsigninurl/action",
          "Microsoft.BotService/botServices/privateEndpointConnectionsApproval/action",
          "Microsoft.BotService/botServices/joinPerimeter/action",
          "Microsoft.BotService/botServices/providers/Microsoft.Insights/diagnosticSettings/write",
          "Microsoft.BotService/checknameavailability/providers/Microsoft.Insights/diagnosticSettings/write",
          "Microsoft.BotService/hostsettings/providers/Microsoft.Insights/diagnosticSettings/write",
          "Microsoft.BotService/botServices/privateEndpointConnectionProxies/write",
          "Microsoft.BotService/botServices/privateEndpointConnectionProxies/delete",
          "Microsoft.BotService/botServices/privateEndpointConnectionProxies/validate/action",
          "Microsoft.BotService/botServices/privateEndpointConnections/write",
          "Microsoft.BotService/botServices/privateEndpointConnections/delete",
          "Microsoft.BotService/listqnamakerendpointkeys/providers/Microsoft.Insights/diagnosticSettings/write",
          "Microsoft.BotService/botServices/networkSecurityPerimeterConfigurations/reconcile/action",
          "Microsoft.BotService/botServices/networkSecurityPerimeterAssociationProxies/write",
          "Microsoft.BotService/botServices/networkSecurityPerimeterAssociationProxies/delete",
          "Microsoft.BotService/locations/notifyNetworkSecurityPerimeterUpdatesAvailable/action",
          "Microsoft.Authorization/*/read",
          "Microsoft.Insights/alertRules/*",
          "Microsoft.Resources/deployments/*",
          "Microsoft.Resources/subscriptions/resourceGroups/read",
          "Microsoft.BotService/botServices/channels/regeneratekeys/action",
          "Microsoft.BotService/botServices/Connections/listWithSecrets/action"
        ],
        "notActions": [],
        "dataActions": [],
        "notDataActions": []
      }
    ],
    "createdOn": "2024-09-16T15:00:47.794Z",
    "updatedOn": "2025-02-03T16:08:28.662Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/9fc6112f-f48e-4e27-8b09-72a5c94e4ae9",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "9fc6112f-f48e-4e27-8b09-72a5c94e4ae9"
}

Latest Role JSON

Raw definition from Azure

{
  "properties": {
    "roleName": "Azure Bot Service Contributor Role",
    "type": "BuiltInRole",
    "description": "To perform actions on the bots by copilot studio platform and extensibility team",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.BotService/listAuthServiceProviders/action",
          "Microsoft.BotService/listauthserviceproviders/providers/Microsoft.Insights/diagnosticSettings/write",
          "Microsoft.BotService/botServices/read",
          "Microsoft.BotService/botServices/write",
          "Microsoft.BotService/botServices/delete",
          "Microsoft.BotService/botServices/channels/write",
          "Microsoft.BotService/botServices/channels/read",
          "Microsoft.BotService/botServices/channels/listchannelwithkeys/action",
          "Microsoft.BotService/botServices/channels/delete",
          "Microsoft.BotService/botServices/channels/providers/Microsoft.Insights/diagnosticSettings/write",
          "Microsoft.BotService/botServices/connections/read",
          "Microsoft.BotService/botServices/connections/write",
          "Microsoft.BotService/botServices/connections/delete",
          "Microsoft.BotService/botServices/connections/listwithsecrets/write",
          "Microsoft.BotService/botServices/connections/providers/Microsoft.Insights/diagnosticSettings/write",
          "Microsoft.BotService/botServices/createemailsigninurl/action",
          "Microsoft.BotService/botServices/privateEndpointConnectionsApproval/action",
          "Microsoft.BotService/botServices/joinPerimeter/action",
          "Microsoft.BotService/botServices/providers/Microsoft.Insights/diagnosticSettings/write",
          "Microsoft.BotService/checknameavailability/providers/Microsoft.Insights/diagnosticSettings/write",
          "Microsoft.BotService/hostsettings/providers/Microsoft.Insights/diagnosticSettings/write",
          "Microsoft.BotService/botServices/privateEndpointConnectionProxies/write",
          "Microsoft.BotService/botServices/privateEndpointConnectionProxies/delete",
          "Microsoft.BotService/botServices/privateEndpointConnectionProxies/validate/action",
          "Microsoft.BotService/botServices/privateEndpointConnections/write",
          "Microsoft.BotService/botServices/privateEndpointConnections/delete",
          "Microsoft.BotService/listqnamakerendpointkeys/providers/Microsoft.Insights/diagnosticSettings/write",
          "Microsoft.BotService/botServices/networkSecurityPerimeterConfigurations/reconcile/action",
          "Microsoft.BotService/botServices/networkSecurityPerimeterAssociationProxies/write",
          "Microsoft.BotService/botServices/networkSecurityPerimeterAssociationProxies/delete",
          "Microsoft.BotService/locations/notifyNetworkSecurityPerimeterUpdatesAvailable/action",
          "Microsoft.Authorization/*/read",
          "Microsoft.Insights/alertRules/*",
          "Microsoft.Resources/deployments/*",
          "Microsoft.Resources/subscriptions/resourceGroups/read",
          "Microsoft.BotService/botServices/channels/regeneratekeys/action",
          "Microsoft.BotService/botServices/Connections/listWithSecrets/action"
        ],
        "notActions": [],
        "dataActions": [],
        "notDataActions": []
      }
    ],
    "createdOn": "2024-09-16T15:00:47.794Z",
    "updatedOn": "2025-02-03T16:08:28.662Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/9fc6112f-f48e-4e27-8b09-72a5c94e4ae9",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "9fc6112f-f48e-4e27-8b09-72a5c94e4ae9"
}

Effective Permissions

Operations granted by this role (79 total)

Permission Patterns (from role definition)

Actions 37 patterns
Microsoft.BotService/listAuthServiceProviders/action Microsoft.BotService/listauthserviceproviders/providers/Microsoft.Insights/diagnosticSettings/write Microsoft.BotService/botServices/read Microsoft.BotService/botServices/write Microsoft.BotService/botServices/delete Microsoft.BotService/botServices/channels/write Microsoft.BotService/botServices/channels/read Microsoft.BotService/botServices/channels/listchannelwithkeys/action Microsoft.BotService/botServices/channels/delete Microsoft.BotService/botServices/channels/providers/Microsoft.Insights/diagnosticSettings/write Microsoft.BotService/botServices/connections/read Microsoft.BotService/botServices/connections/write Microsoft.BotService/botServices/connections/delete Microsoft.BotService/botServices/connections/listwithsecrets/write Microsoft.BotService/botServices/connections/providers/Microsoft.Insights/diagnosticSettings/write Microsoft.BotService/botServices/createemailsigninurl/action Microsoft.BotService/botServices/privateEndpointConnectionsApproval/action Microsoft.BotService/botServices/joinPerimeter/action Microsoft.BotService/botServices/providers/Microsoft.Insights/diagnosticSettings/write Microsoft.BotService/checknameavailability/providers/Microsoft.Insights/diagnosticSettings/write Microsoft.BotService/hostsettings/providers/Microsoft.Insights/diagnosticSettings/write Microsoft.BotService/botServices/privateEndpointConnectionProxies/write Microsoft.BotService/botServices/privateEndpointConnectionProxies/delete Microsoft.BotService/botServices/privateEndpointConnectionProxies/validate/action Microsoft.BotService/botServices/privateEndpointConnections/write Microsoft.BotService/botServices/privateEndpointConnections/delete Microsoft.BotService/listqnamakerendpointkeys/providers/Microsoft.Insights/diagnosticSettings/write Microsoft.BotService/botServices/networkSecurityPerimeterConfigurations/reconcile/action Microsoft.BotService/botServices/networkSecurityPerimeterAssociationProxies/write Microsoft.BotService/botServices/networkSecurityPerimeterAssociationProxies/delete Microsoft.BotService/locations/notifyNetworkSecurityPerimeterUpdatesAvailable/action Microsoft.Authorization/*/read Microsoft.Insights/alertRules/* Microsoft.Resources/deployments/* Microsoft.Resources/subscriptions/resourceGroups/read Microsoft.BotService/botServices/channels/regeneratekeys/action Microsoft.BotService/botServices/Connections/listWithSecrets/action

Control Plane Operations (79)

Data Plane Operations (0)

No data plane operations granted