Role Information
Details and metadata
d59a3e9c-6d52-4a5a-aeed-6bf3cf0e31da
Change History
Track all modifications to this role
Updated On
Event Type
Summary & Details
2024-09-02 15:07:10
Initial Scan
Show full JSON
{
"properties": {
"roleName": "API Management Service Workspace API Product Manager",
"type": "BuiltInRole",
"description": "Has the same access as API Management Service Workspace API Developer as well as read access to users and write access to allow assigning users to groups. This role should be assigned on the service scope.",
"assignableScopes": [
"/"
],
"permissions": [
{
"actions": [
"Microsoft.ApiManagement/service/users/read",
"Microsoft.ApiManagement/service/tags/read",
"Microsoft.ApiManagement/service/tags/apiLinks/*",
"Microsoft.ApiManagement/service/tags/operationLinks/*",
"Microsoft.ApiManagement/service/tags/productLinks/*",
"Microsoft.ApiManagement/service/products/read",
"Microsoft.ApiManagement/service/products/apiLinks/*",
"Microsoft.ApiManagement/service/groups/read",
"Microsoft.ApiManagement/service/groups/users/*",
"Microsoft.ApiManagement/service/read",
"Microsoft.ApiManagement/service/authorizationServers/read",
"Microsoft.Authorization/*/read"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"createdOn": "2023-03-23T15:30:17.9Z",
"updatedOn": "2024-09-02T15:07:10.546Z",
"createdBy": null,
"updatedBy": null
},
"id": "/providers/Microsoft.Authorization/roleDefinitions/d59a3e9c-6d52-4a5a-aeed-6bf3cf0e31da",
"type": "Microsoft.Authorization/roleDefinitions",
"name": "d59a3e9c-6d52-4a5a-aeed-6bf3cf0e31da"
}
2024-09-02 15:07:10
Initial Scan
View details
{
"properties": {
"roleName": "API Management Service Workspace API Product Manager",
"type": "BuiltInRole",
"description": "Has the same access as API Management Service Workspace API Developer as well as read access to users and write access to allow assigning users to groups. This role should be assigned on the service scope.",
"assignableScopes": [
"/"
],
"permissions": [
{
"actions": [
"Microsoft.ApiManagement/service/users/read",
"Microsoft.ApiManagement/service/tags/read",
"Microsoft.ApiManagement/service/tags/apiLinks/*",
"Microsoft.ApiManagement/service/tags/operationLinks/*",
"Microsoft.ApiManagement/service/tags/productLinks/*",
"Microsoft.ApiManagement/service/products/read",
"Microsoft.ApiManagement/service/products/apiLinks/*",
"Microsoft.ApiManagement/service/groups/read",
"Microsoft.ApiManagement/service/groups/users/*",
"Microsoft.ApiManagement/service/read",
"Microsoft.ApiManagement/service/authorizationServers/read",
"Microsoft.Authorization/*/read"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"createdOn": "2023-03-23T15:30:17.9Z",
"updatedOn": "2024-09-02T15:07:10.546Z",
"createdBy": null,
"updatedBy": null
},
"id": "/providers/Microsoft.Authorization/roleDefinitions/d59a3e9c-6d52-4a5a-aeed-6bf3cf0e31da",
"type": "Microsoft.Authorization/roleDefinitions",
"name": "d59a3e9c-6d52-4a5a-aeed-6bf3cf0e31da"
}
Latest Role JSON
Raw definition from Azure
{
"properties": {
"roleName": "API Management Service Workspace API Product Manager",
"type": "BuiltInRole",
"description": "Has the same access as API Management Service Workspace API Developer as well as read access to users and write access to allow assigning users to groups. This role should be assigned on the service scope.",
"assignableScopes": [
"/"
],
"permissions": [
{
"actions": [
"Microsoft.ApiManagement/service/users/read",
"Microsoft.ApiManagement/service/tags/read",
"Microsoft.ApiManagement/service/tags/apiLinks/*",
"Microsoft.ApiManagement/service/tags/operationLinks/*",
"Microsoft.ApiManagement/service/tags/productLinks/*",
"Microsoft.ApiManagement/service/products/read",
"Microsoft.ApiManagement/service/products/apiLinks/*",
"Microsoft.ApiManagement/service/groups/read",
"Microsoft.ApiManagement/service/groups/users/*",
"Microsoft.ApiManagement/service/read",
"Microsoft.ApiManagement/service/authorizationServers/read",
"Microsoft.Authorization/*/read"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"createdOn": "2023-03-23T15:30:17.9Z",
"updatedOn": "2024-09-02T15:07:10.546Z",
"createdBy": null,
"updatedBy": null
},
"id": "/providers/Microsoft.Authorization/roleDefinitions/d59a3e9c-6d52-4a5a-aeed-6bf3cf0e31da",
"type": "Microsoft.Authorization/roleDefinitions",
"name": "d59a3e9c-6d52-4a5a-aeed-6bf3cf0e31da"
}
Effective Permissions
Operations granted by this role (52 total)
Permission Patterns (from role definition)
Actions
12 patterns
Microsoft.ApiManagement/service/users/read
Microsoft.ApiManagement/service/tags/read
Microsoft.ApiManagement/service/tags/apiLinks/*
Microsoft.ApiManagement/service/tags/operationLinks/*
Microsoft.ApiManagement/service/tags/productLinks/*
Microsoft.ApiManagement/service/products/read
Microsoft.ApiManagement/service/products/apiLinks/*
Microsoft.ApiManagement/service/groups/read
Microsoft.ApiManagement/service/groups/users/*
Microsoft.ApiManagement/service/read
Microsoft.ApiManagement/service/authorizationServers/read
Microsoft.Authorization/*/read