Supported resource types and role assignments for Chaos Studio

The following are the supported resource types for faults, the target types, and suggested roles to use when giving an experiment permission to a resource of that type.

Resource Type Target name/type Suggested role assignment
Microsoft.Cache/Redis (service-direct) Microsoft-AzureCacheForRedis Redis Cache Contributor
Microsoft.ClassicCompute/domainNames (service-direct) Microsoft-DomainNames Classic Virtual Machine Contributor
Microsoft.Compute/virtualMachines (agent-based) Microsoft-Agent Reader
Microsoft.Compute/virtualMachineScaleSets (agent-based) Microsoft-Agent Reader
Microsoft.Compute/virtualMachines (service-direct) Microsoft-VirtualMachine Virtual Machine Contributor
Microsoft.Compute/virtualMachineScaleSets (service-direct) Microsoft-VirtualMachineScaleSet Virtual Machine Contributor
Microsoft.ContainerService/managedClusters (service-direct) Microsoft-AzureKubernetesServiceChaosMesh Azure Kubernetes Service Cluster Admin Role
Microsoft.DocumentDb/databaseAccounts (CosmosDB, service-direct) Microsoft-CosmosDB Cosmos DB Operator
Microsoft.KeyVault/vaults (service-direct) Microsoft-KeyVault Key Vault Contributor
Microsoft.Network/networkSecurityGroups (service-direct) Microsoft-NetworkSecurityGroup Network Contributor