Role Information
Details and metadata
c2a970b4-16a7-4a51-8c84-8a8ea6ee0bb8
Change History
Track all modifications to this role
Updated On
Event Type
Summary & Details
2024-03-12 15:09:02
Created
Show full JSON diff
+ {
+ "properties": {
+ "roleName": "Backup MUA Admin",
+ "type": "BuiltInRole",
+ "description": "Backup MultiUser-Authorization. Can create/delete ResourceGuard ",
+ "assignableScopes": [
+ "/"
+ ],
+ "permissions": [
+ {
+ "actions": [
+ "Microsoft.DataProtection/*/read",
+ "Microsoft.DataProtection/*/resourceGuards/write",
+ "Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/write",
+ "Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/delete",
+ "Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/read",
+ "Microsoft.DataProtection/locations/operationResults/read",
+ "Microsoft.DataProtection/locations/operationStatus/read",
+ "Microsoft.DataProtection/locations/getBackupStatus/action",
+ "Microsoft.DataProtection/locations/checkFeatureSupport/action",
+ "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/operationStatus/read",
+ "Microsoft.Authorization/*/read",
+ "Microsoft.Features/features/read",
+ "Microsoft.Features/providers/features/read",
+ "Microsoft.ResourceHealth/availabilityStatuses/read",
+ "Microsoft.Resources/deployments/operations/read",
+ "Microsoft.Resources/subscriptions/operationresults/read",
+ "Microsoft.Resources/subscriptions/read",
+ "Microsoft.Resources/subscriptions/resourcegroups/deployments/*",
+ "Microsoft.Resources/subscriptions/resourceGroups/read",
+ "Microsoft.Resources/deployments/*",
+ "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/read",
+ "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/write",
+ "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/delete",
+ "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/unlockDelete/action",
+ "Microsoft.DataProtection/subscriptions/providers/resourceGuards/read",
+ "Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/{operationName}/read"
+ ],
+ "notActions": [],
+ "dataActions": [],
+ "notDataActions": []
+ }
+ ],
+ "createdOn": "2024-03-12T15:09:02.376Z",
+ "updatedOn": "2024-03-12T15:09:02.376Z",
+ "createdBy": null,
+ "updatedBy": null
+ },
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/c2a970b4-16a7-4a51-8c84-8a8ea6ee0bb8",
+ "type": "Microsoft.Authorization/roleDefinitions",
+ "name": "c2a970b4-16a7-4a51-8c84-8a8ea6ee0bb8"
+ }
2024-03-12 15:09:02
Created
View details
+ {
+ "properties": {
+ "roleName": "Backup MUA Admin",
+ "type": "BuiltInRole",
+ "description": "Backup MultiUser-Authorization. Can create/delete ResourceGuard ",
+ "assignableScopes": [
+ "/"
+ ],
+ "permissions": [
+ {
+ "actions": [
+ "Microsoft.DataProtection/*/read",
+ "Microsoft.DataProtection/*/resourceGuards/write",
+ "Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/write",
+ "Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/delete",
+ "Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/read",
+ "Microsoft.DataProtection/locations/operationResults/read",
+ "Microsoft.DataProtection/locations/operationStatus/read",
+ "Microsoft.DataProtection/locations/getBackupStatus/action",
+ "Microsoft.DataProtection/locations/checkFeatureSupport/action",
+ "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/operationStatus/read",
+ "Microsoft.Authorization/*/read",
+ "Microsoft.Features/features/read",
+ "Microsoft.Features/providers/features/read",
+ "Microsoft.ResourceHealth/availabilityStatuses/read",
+ "Microsoft.Resources/deployments/operations/read",
+ "Microsoft.Resources/subscriptions/operationresults/read",
+ "Microsoft.Resources/subscriptions/read",
+ "Microsoft.Resources/subscriptions/resourcegroups/deployments/*",
+ "Microsoft.Resources/subscriptions/resourceGroups/read",
+ "Microsoft.Resources/deployments/*",
+ "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/read",
+ "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/write",
+ "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/delete",
+ "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/unlockDelete/action",
+ "Microsoft.DataProtection/subscriptions/providers/resourceGuards/read",
+ "Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/{operationName}/read"
+ ],
+ "notActions": [],
+ "dataActions": [],
+ "notDataActions": []
+ }
+ ],
+ "createdOn": "2024-03-12T15:09:02.376Z",
+ "updatedOn": "2024-03-12T15:09:02.376Z",
+ "createdBy": null,
+ "updatedBy": null
+ },
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/c2a970b4-16a7-4a51-8c84-8a8ea6ee0bb8",
+ "type": "Microsoft.Authorization/roleDefinitions",
+ "name": "c2a970b4-16a7-4a51-8c84-8a8ea6ee0bb8"
+ }
Latest Role JSON
Raw definition from Azure
{
"properties": {
"roleName": "Backup MUA Admin",
"type": "BuiltInRole",
"description": "Backup MultiUser-Authorization. Can create/delete ResourceGuard ",
"assignableScopes": [
"/"
],
"permissions": [
{
"actions": [
"Microsoft.DataProtection/*/read",
"Microsoft.DataProtection/*/resourceGuards/write",
"Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/write",
"Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/delete",
"Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/read",
"Microsoft.DataProtection/locations/operationResults/read",
"Microsoft.DataProtection/locations/operationStatus/read",
"Microsoft.DataProtection/locations/getBackupStatus/action",
"Microsoft.DataProtection/locations/checkFeatureSupport/action",
"Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/operationStatus/read",
"Microsoft.Authorization/*/read",
"Microsoft.Features/features/read",
"Microsoft.Features/providers/features/read",
"Microsoft.ResourceHealth/availabilityStatuses/read",
"Microsoft.Resources/deployments/operations/read",
"Microsoft.Resources/subscriptions/operationresults/read",
"Microsoft.Resources/subscriptions/read",
"Microsoft.Resources/subscriptions/resourcegroups/deployments/*",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.Resources/deployments/*",
"Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/read",
"Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/write",
"Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/delete",
"Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/unlockDelete/action",
"Microsoft.DataProtection/subscriptions/providers/resourceGuards/read",
"Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/{operationName}/read"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"createdOn": "2024-03-12T15:09:02.376Z",
"updatedOn": "2024-03-12T15:09:02.376Z",
"createdBy": null,
"updatedBy": null
},
"id": "/providers/Microsoft.Authorization/roleDefinitions/c2a970b4-16a7-4a51-8c84-8a8ea6ee0bb8",
"type": "Microsoft.Authorization/roleDefinitions",
"name": "c2a970b4-16a7-4a51-8c84-8a8ea6ee0bb8"
}
Effective Permissions
Operations granted by this role (75 total)
Permission Patterns (from role definition)
Actions
26 patterns
Microsoft.DataProtection/*/read
Microsoft.DataProtection/*/resourceGuards/write
Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/write
Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/delete
Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/read
Microsoft.DataProtection/locations/operationResults/read
Microsoft.DataProtection/locations/operationStatus/read
Microsoft.DataProtection/locations/getBackupStatus/action
Microsoft.DataProtection/locations/checkFeatureSupport/action
Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/operationStatus/read
Microsoft.Authorization/*/read
Microsoft.Features/features/read
Microsoft.Features/providers/features/read
Microsoft.ResourceHealth/availabilityStatuses/read
Microsoft.Resources/deployments/operations/read
Microsoft.Resources/subscriptions/operationresults/read
Microsoft.Resources/subscriptions/read
Microsoft.Resources/subscriptions/resourcegroups/deployments/*
Microsoft.Resources/subscriptions/resourceGroups/read
Microsoft.Resources/deployments/*
Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/read
Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/write
Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/delete
Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/unlockDelete/action
Microsoft.DataProtection/subscriptions/providers/resourceGuards/read
Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/{operationName}/read
Control Plane Operations (75)
No matching operations
/ shown
Data Plane Operations (0)
No data plane operations granted