Back to Operation

Site Recovery Reader

Azure Built-in Role

Role Information

Details and metadata

Role ID
dbaa88c4-0c30-4179-9fb3-46319faa6149
Type
BuiltInRole
Last Updated (Azure)
2021-11-11 20:13:52

Change History

Track all modifications to this role since 2025-12-15 01:08:16+00:00

2021-11-11 20:13:52 Initial Scan
View details
{
  "properties": {
    "roleName": "Site Recovery Reader",
    "type": "BuiltInRole",
    "description": "Lets you view Site Recovery status but not perform other management operations",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.Authorization/*/read",
          "Microsoft.RecoveryServices/locations/allocatedStamp/read",
          "Microsoft.RecoveryServices/Vaults/extendedInformation/read",
          "Microsoft.RecoveryServices/Vaults/monitoringAlerts/read",
          "Microsoft.RecoveryServices/Vaults/monitoringConfigurations/notificationConfiguration/read",
          "Microsoft.RecoveryServices/Vaults/read",
          "Microsoft.RecoveryServices/Vaults/refreshContainers/read",
          "Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read",
          "Microsoft.RecoveryServices/Vaults/registeredIdentities/read",
          "Microsoft.RecoveryServices/vaults/replicationAlertSettings/read",
          "Microsoft.RecoveryServices/vaults/replicationEvents/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/replicationNetworkMappings/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectableItems/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/recoveryPoints/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/replicationStorageClassificationMappings/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationvCenters/read",
          "Microsoft.RecoveryServices/vaults/replicationJobs/read",
          "Microsoft.RecoveryServices/vaults/replicationPolicies/read",
          "Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/read",
          "Microsoft.RecoveryServices/vaults/replicationVaultSettings/read",
          "Microsoft.RecoveryServices/Vaults/storageConfig/read",
          "Microsoft.RecoveryServices/Vaults/tokenInfo/read",
          "Microsoft.RecoveryServices/Vaults/usages/read",
          "Microsoft.RecoveryServices/Vaults/vaultTokens/read",
          "Microsoft.Support/*"
        ],
        "notActions": [],
        "dataActions": [],
        "notDataActions": []
      }
    ],
    "createdOn": "2017-05-19T13:35:40.009Z",
    "updatedOn": "2021-11-11T20:13:52.976Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/dbaa88c4-0c30-4179-9fb3-46319faa6149",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "dbaa88c4-0c30-4179-9fb3-46319faa6149"
}

Latest Role JSON

Raw definition from Azure

{
  "properties": {
    "roleName": "Site Recovery Reader",
    "type": "BuiltInRole",
    "description": "Lets you view Site Recovery status but not perform other management operations",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.Authorization/*/read",
          "Microsoft.RecoveryServices/locations/allocatedStamp/read",
          "Microsoft.RecoveryServices/Vaults/extendedInformation/read",
          "Microsoft.RecoveryServices/Vaults/monitoringAlerts/read",
          "Microsoft.RecoveryServices/Vaults/monitoringConfigurations/notificationConfiguration/read",
          "Microsoft.RecoveryServices/Vaults/read",
          "Microsoft.RecoveryServices/Vaults/refreshContainers/read",
          "Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read",
          "Microsoft.RecoveryServices/Vaults/registeredIdentities/read",
          "Microsoft.RecoveryServices/vaults/replicationAlertSettings/read",
          "Microsoft.RecoveryServices/vaults/replicationEvents/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/replicationNetworkMappings/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectableItems/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/recoveryPoints/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/replicationStorageClassificationMappings/read",
          "Microsoft.RecoveryServices/vaults/replicationFabrics/replicationvCenters/read",
          "Microsoft.RecoveryServices/vaults/replicationJobs/read",
          "Microsoft.RecoveryServices/vaults/replicationPolicies/read",
          "Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/read",
          "Microsoft.RecoveryServices/vaults/replicationVaultSettings/read",
          "Microsoft.RecoveryServices/Vaults/storageConfig/read",
          "Microsoft.RecoveryServices/Vaults/tokenInfo/read",
          "Microsoft.RecoveryServices/Vaults/usages/read",
          "Microsoft.RecoveryServices/Vaults/vaultTokens/read",
          "Microsoft.Support/*"
        ],
        "notActions": [],
        "dataActions": [],
        "notDataActions": []
      }
    ],
    "createdOn": "2017-05-19T13:35:40.009Z",
    "updatedOn": "2021-11-11T20:13:52.976Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/dbaa88c4-0c30-4179-9fb3-46319faa6149",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "dbaa88c4-0c30-4179-9fb3-46319faa6149"
}

Effective Permissions

Operations granted by this role (69 total)

Permission Patterns (from role definition)

Actions 32 patterns
Microsoft.Authorization/*/read Microsoft.RecoveryServices/locations/allocatedStamp/read Microsoft.RecoveryServices/Vaults/extendedInformation/read Microsoft.RecoveryServices/Vaults/monitoringAlerts/read Microsoft.RecoveryServices/Vaults/monitoringConfigurations/notificationConfiguration/read Microsoft.RecoveryServices/Vaults/read Microsoft.RecoveryServices/Vaults/refreshContainers/read Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read Microsoft.RecoveryServices/Vaults/registeredIdentities/read Microsoft.RecoveryServices/vaults/replicationAlertSettings/read Microsoft.RecoveryServices/vaults/replicationEvents/read Microsoft.RecoveryServices/vaults/replicationFabrics/read Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/read Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/replicationNetworkMappings/read Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/read Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectableItems/read Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/read Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/recoveryPoints/read Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings/read Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/read Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/read Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/replicationStorageClassificationMappings/read Microsoft.RecoveryServices/vaults/replicationFabrics/replicationvCenters/read Microsoft.RecoveryServices/vaults/replicationJobs/read Microsoft.RecoveryServices/vaults/replicationPolicies/read Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/read Microsoft.RecoveryServices/vaults/replicationVaultSettings/read Microsoft.RecoveryServices/Vaults/storageConfig/read Microsoft.RecoveryServices/Vaults/tokenInfo/read Microsoft.RecoveryServices/Vaults/usages/read Microsoft.RecoveryServices/Vaults/vaultTokens/read Microsoft.Support/*

Control Plane Operations (69)

Data Plane Operations (0)

No data plane operations granted