Back to Operation

API Management Service Workspace API Product Manager

Azure Built-in Role

Role Information

Details and metadata

Role ID
d59a3e9c-6d52-4a5a-aeed-6bf3cf0e31da
Type
BuiltInRole
Last Updated (Azure)
2024-09-02 15:07:10

Change History

Track all modifications to this role since 2025-12-15 01:08:16+00:00

2024-09-02 15:07:10 Initial Scan
View details
{
  "properties": {
    "roleName": "API Management Service Workspace API Product Manager",
    "type": "BuiltInRole",
    "description": "Has the same access as API Management Service Workspace API Developer as well as read access to users and write access to allow assigning users to groups. This role should be assigned on the service scope.",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.ApiManagement/service/users/read",
          "Microsoft.ApiManagement/service/tags/read",
          "Microsoft.ApiManagement/service/tags/apiLinks/*",
          "Microsoft.ApiManagement/service/tags/operationLinks/*",
          "Microsoft.ApiManagement/service/tags/productLinks/*",
          "Microsoft.ApiManagement/service/products/read",
          "Microsoft.ApiManagement/service/products/apiLinks/*",
          "Microsoft.ApiManagement/service/groups/read",
          "Microsoft.ApiManagement/service/groups/users/*",
          "Microsoft.ApiManagement/service/read",
          "Microsoft.ApiManagement/service/authorizationServers/read",
          "Microsoft.Authorization/*/read"
        ],
        "notActions": [],
        "dataActions": [],
        "notDataActions": []
      }
    ],
    "createdOn": "2023-03-23T15:30:17.9Z",
    "updatedOn": "2024-09-02T15:07:10.546Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/d59a3e9c-6d52-4a5a-aeed-6bf3cf0e31da",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "d59a3e9c-6d52-4a5a-aeed-6bf3cf0e31da"
}

Latest Role JSON

Raw definition from Azure

{
  "properties": {
    "roleName": "API Management Service Workspace API Product Manager",
    "type": "BuiltInRole",
    "description": "Has the same access as API Management Service Workspace API Developer as well as read access to users and write access to allow assigning users to groups. This role should be assigned on the service scope.",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.ApiManagement/service/users/read",
          "Microsoft.ApiManagement/service/tags/read",
          "Microsoft.ApiManagement/service/tags/apiLinks/*",
          "Microsoft.ApiManagement/service/tags/operationLinks/*",
          "Microsoft.ApiManagement/service/tags/productLinks/*",
          "Microsoft.ApiManagement/service/products/read",
          "Microsoft.ApiManagement/service/products/apiLinks/*",
          "Microsoft.ApiManagement/service/groups/read",
          "Microsoft.ApiManagement/service/groups/users/*",
          "Microsoft.ApiManagement/service/read",
          "Microsoft.ApiManagement/service/authorizationServers/read",
          "Microsoft.Authorization/*/read"
        ],
        "notActions": [],
        "dataActions": [],
        "notDataActions": []
      }
    ],
    "createdOn": "2023-03-23T15:30:17.9Z",
    "updatedOn": "2024-09-02T15:07:10.546Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/d59a3e9c-6d52-4a5a-aeed-6bf3cf0e31da",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "d59a3e9c-6d52-4a5a-aeed-6bf3cf0e31da"
}

Effective Permissions

Operations granted by this role (52 total)

Permission Patterns (from role definition)

Actions 12 patterns
Microsoft.ApiManagement/service/users/read Microsoft.ApiManagement/service/tags/read Microsoft.ApiManagement/service/tags/apiLinks/* Microsoft.ApiManagement/service/tags/operationLinks/* Microsoft.ApiManagement/service/tags/productLinks/* Microsoft.ApiManagement/service/products/read Microsoft.ApiManagement/service/products/apiLinks/* Microsoft.ApiManagement/service/groups/read Microsoft.ApiManagement/service/groups/users/* Microsoft.ApiManagement/service/read Microsoft.ApiManagement/service/authorizationServers/read Microsoft.Authorization/*/read

Control Plane Operations (52)

Data Plane Operations (0)

No data plane operations granted