Backup Reader

{
  "properties": {
    "roleName": "Backup Reader",
    "type": "BuiltInRole",
    "description": "Can view backup services, but can't make changes",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.Authorization/*/read",
          "Microsoft.RecoveryServices/locations/allocatedStamp/read",
          "Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/read",
          "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/operationResults/read",
          "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationResults/read",
          "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationsStatus/read",
          "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read",
          "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/read",
          "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/read",
          "Microsoft.RecoveryServices/Vaults/backupJobs/operationResults/read",
          "Microsoft.RecoveryServices/Vaults/backupJobs/read",
          "Microsoft.RecoveryServices/Vaults/backupJobsExport/action",
          "Microsoft.RecoveryServices/Vaults/backupOperationResults/read",
          "Microsoft.RecoveryServices/Vaults/backupPolicies/operationResults/read",
          "Microsoft.RecoveryServices/Vaults/backupPolicies/read",
          "Microsoft.RecoveryServices/Vaults/backupProtectedItems/read",
          "Microsoft.RecoveryServices/Vaults/backupProtectionContainers/read",
          "Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read",
          "Microsoft.RecoveryServices/Vaults/extendedInformation/read",
          "Microsoft.RecoveryServices/Vaults/monitoringAlerts/read",
          "Microsoft.RecoveryServices/Vaults/read",
          "Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read",
          "Microsoft.RecoveryServices/Vaults/registeredIdentities/read",
          "Microsoft.RecoveryServices/Vaults/backupstorageconfig/read",
          "Microsoft.RecoveryServices/Vaults/backupconfig/read",
          "Microsoft.RecoveryServices/Vaults/backupOperations/read",
          "Microsoft.RecoveryServices/Vaults/backupPolicies/operations/read",
          "Microsoft.RecoveryServices/Vaults/backupEngines/read",
          "Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/read",
          "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/items/read",
          "Microsoft.RecoveryServices/locations/backupStatus/action",
          "Microsoft.RecoveryServices/Vaults/monitoringConfigurations/*",
          "Microsoft.RecoveryServices/Vaults/monitoringAlerts/write",
          "Microsoft.RecoveryServices/operations/read",
          "Microsoft.RecoveryServices/locations/operationStatus/read",
          "Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read",
          "Microsoft.RecoveryServices/Vaults/usages/read",
          "Microsoft.RecoveryServices/locations/backupValidateFeatures/action",
          "Microsoft.RecoveryServices/locations/backupCrrJobs/action",
          "Microsoft.RecoveryServices/locations/backupCrrJob/action",
          "Microsoft.RecoveryServices/locations/backupCrrOperationResults/read",
          "Microsoft.RecoveryServices/locations/backupCrrOperationsStatus/read",
          "Microsoft.DataProtection/locations/getBackupStatus/action",
          "Microsoft.DataProtection/backupVaults/backupInstances/read",
          "Microsoft.DataProtection/backupVaults/deletedBackupInstances/read",
          "Microsoft.DataProtection/backupVaults/backupPolicies/read",
          "Microsoft.DataProtection/backupVaults/backupPolicies/read",
          "Microsoft.DataProtection/backupVaults/backupInstances/recoveryPoints/read",
          "Microsoft.DataProtection/backupVaults/backupInstances/recoveryPoints/read",
          "Microsoft.DataProtection/backupVaults/backupInstances/operationResults/read",
          "Microsoft.DataProtection/backupVaults/backupInstances/findRestorableTimeRanges/action",
          "Microsoft.DataProtection/backupVaults/read",
          "Microsoft.DataProtection/backupVaults/operationResults/read",
          "Microsoft.DataProtection/backupVaults/operationStatus/read",
          "Microsoft.DataProtection/backupVaults/read",
          "Microsoft.DataProtection/backupVaults/read",
          "Microsoft.DataProtection/locations/operationStatus/read",
          "Microsoft.DataProtection/locations/operationResults/read",
          "Microsoft.DataProtection/operations/read",
          "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/fetchCrossRegionRestoreJobs/action",
          "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/fetchCrossRegionRestoreJob/action",
          "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/fetchSecondaryRecoveryPoints/action",
          "Microsoft.DataProtection/locations/checkFeatureSupport/action"
        ],
        "notActions": [],
        "dataActions": [],
        "notDataActions": []
      }
    ],
    "createdOn": "2017-01-03T13:18:41.389Z",
    "updatedOn": "2025-09-11T15:45:12.484Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/a795c7a0-d4a2-40c1-ae25-d81f01202912",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "a795c7a0-d4a2-40c1-ae25-d81f01202912"
}