Supported resource types and role assignments for Chaos Studio

The following table lists the supported resource types for faults, the target types, and suggested roles to use when you give an experiment permission to a resource of that type.

More information about role assignments can be found on the Azure built-in roles page.

Resource type	Target name/type	Suggested role assignment
Microsoft.Cache/Redis (service-direct)	Microsoft-AzureCacheForRedis	Redis Cache Contributor
Microsoft.ClassicCompute/domainNames (service-direct)	Microsoft-DomainNames	Classic Virtual Machine Contributor
Microsoft.Compute/virtualMachines (agent-based)	Microsoft-Agent	Reader
Microsoft.Compute/virtualMachineScaleSets (agent-based)	Microsoft-Agent	Reader
Microsoft.Compute/virtualMachines (service-direct)	Microsoft-VirtualMachine	Virtual Machine Contributor
Microsoft.Compute/virtualMachineScaleSets (service-direct)	Microsoft-VirtualMachineScaleSet	Virtual Machine Contributor
Microsoft.ContainerService/managedClusters (service-direct)	Microsoft-AzureKubernetesServiceChaosMesh	Azure Kubernetes Service Cluster Admin Role
Microsoft.DocumentDb/databaseAccounts (Cosmos DB, service-direct)	Microsoft-Cosmos DB	Azure Cosmos DB Operator
Microsoft.Insights/autoscalesettings (service-direct)	Microsoft-AutoScaleSettings	Web Plan Contributor
Microsoft.KeyVault/vaults (service-direct)	Microsoft-KeyVault	Azure Key Vault Contributor
Microsoft.Network/networkSecurityGroups (service-direct)	Microsoft-NetworkSecurityGroup	Network Contributor
Microsoft.Web/sites (service-direct)	Microsoft-AppService	Website Contributor
Microsoft.ServiceBus/namespaces (service-direct)	Microsoft-ServiceBus	Azure Service Bus Data Owner
Microsoft.EventHub/namespaces (service-direct)	Microsoft-EventHub	Azure Event Hubs Data Owner