Edit

Azure built-in roles for Mixed reality

  • Article

This article lists the Azure built-in roles in the Mixed reality category.

Remote Rendering Administrator

Provides user with conversion, manage session, rendering and diagnostics capabilities for Azure Remote Rendering

Learn more

Actions Description
none
NotActions
none
DataActions
Microsoft.MixedReality/RemoteRenderingAccounts/convert/action Start asset conversion
Microsoft.MixedReality/RemoteRenderingAccounts/convert/read Get asset conversion properties
Microsoft.MixedReality/RemoteRenderingAccounts/convert/delete Stop asset conversion
Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/read Get session properties
Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/action Start sessions
Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/delete Stop sessions
Microsoft.MixedReality/RemoteRenderingAccounts/render/read Connect to a session
Microsoft.MixedReality/RemoteRenderingAccounts/diagnostic/read Connect to the Remote Rendering inspector
NotDataActions
none 
{
  "assignableScopes": [
    "/"
  ],
  "description": "Provides user with conversion, manage session, rendering and diagnostics capabilities for Azure Remote Rendering",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/3df8b902-2a6f-47c7-8cc5-360e9b272a7e",
  "name": "3df8b902-2a6f-47c7-8cc5-360e9b272a7e",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.MixedReality/RemoteRenderingAccounts/convert/action",
        "Microsoft.MixedReality/RemoteRenderingAccounts/convert/read",
        "Microsoft.MixedReality/RemoteRenderingAccounts/convert/delete",
        "Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/read",
        "Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/action",
        "Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/delete",
        "Microsoft.MixedReality/RemoteRenderingAccounts/render/read",
        "Microsoft.MixedReality/RemoteRenderingAccounts/diagnostic/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Remote Rendering Administrator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Remote Rendering Client

Provides user with manage session, rendering and diagnostics capabilities for Azure Remote Rendering.

Learn more

Actions Description
none
NotActions
none
DataActions
Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/read Get session properties
Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/action Start sessions
Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/delete Stop sessions
Microsoft.MixedReality/RemoteRenderingAccounts/render/read Connect to a session
Microsoft.MixedReality/RemoteRenderingAccounts/diagnostic/read Connect to the Remote Rendering inspector
NotDataActions
none 
{
  "assignableScopes": [
    "/"
  ],
  "description": "Provides user with manage session, rendering and diagnostics capabilities for Azure Remote Rendering.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/d39065c4-c120-43c9-ab0a-63eed9795f0a",
  "name": "d39065c4-c120-43c9-ab0a-63eed9795f0a",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/read",
        "Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/action",
        "Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/delete",
        "Microsoft.MixedReality/RemoteRenderingAccounts/render/read",
        "Microsoft.MixedReality/RemoteRenderingAccounts/diagnostic/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Remote Rendering Client",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Spatial Anchors Account Contributor

Lets you manage spatial anchors in your account, but not delete them

Learn more

Actions Description
none
NotActions
none
DataActions
Microsoft.MixedReality/SpatialAnchorsAccounts/create/action Create spatial anchors
Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read Discover nearby spatial anchors
Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read Get properties of spatial anchors
Microsoft.MixedReality/SpatialAnchorsAccounts/query/read Locate spatial anchors
Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read Submit diagnostics data to help improve the quality of the Azure Spatial Anchors service
Microsoft.MixedReality/SpatialAnchorsAccounts/write Update spatial anchors properties
NotDataActions
none 
{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you manage spatial anchors in your account, but not delete them",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/8bbe83f1-e2a6-4df7-8cb4-4e04d4e5c827",
  "name": "8bbe83f1-e2a6-4df7-8cb4-4e04d4e5c827",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.MixedReality/SpatialAnchorsAccounts/create/action",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/query/read",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/write"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Spatial Anchors Account Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Spatial Anchors Account Owner

Lets you manage spatial anchors in your account, including deleting them

Learn more

Actions Description
none
NotActions
none
DataActions
Microsoft.MixedReality/SpatialAnchorsAccounts/create/action Create spatial anchors
Microsoft.MixedReality/SpatialAnchorsAccounts/delete Delete spatial anchors
Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read Discover nearby spatial anchors
Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read Get properties of spatial anchors
Microsoft.MixedReality/SpatialAnchorsAccounts/query/read Locate spatial anchors
Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read Submit diagnostics data to help improve the quality of the Azure Spatial Anchors service
Microsoft.MixedReality/SpatialAnchorsAccounts/write Update spatial anchors properties
NotDataActions
none 
{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you manage spatial anchors in your account, including deleting them",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/70bbe301-9835-447d-afdd-19eb3167307c",
  "name": "70bbe301-9835-447d-afdd-19eb3167307c",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.MixedReality/SpatialAnchorsAccounts/create/action",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/delete",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/query/read",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/write"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Spatial Anchors Account Owner",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Spatial Anchors Account Reader

Lets you locate and read properties of spatial anchors in your account

Learn more

Actions Description
none
NotActions
none
DataActions
Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read Discover nearby spatial anchors
Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read Get properties of spatial anchors
Microsoft.MixedReality/SpatialAnchorsAccounts/query/read Locate spatial anchors
Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read Submit diagnostics data to help improve the quality of the Azure Spatial Anchors service
NotDataActions
none 
{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you locate and read properties of spatial anchors in your account",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/5d51204f-eb77-4b1c-b86a-2ec626c49413",
  "name": "5d51204f-eb77-4b1c-b86a-2ec626c49413",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/query/read",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Spatial Anchors Account Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Next steps