Peran bawaan Azure untuk AI + pembelajaran mesin
Artikel ini mencantumkan peran bawaan Azure dalam kategori AI + pembelajaran mesin.
Pengembang Azure AI
Dapat melakukan semua tindakan dalam sumber daya Azure AI selain mengelola sumber daya itu sendiri.
| Tindakan | Deskripsi |
|---|---|
| Microsoft.MachineLearningServices/workspaces/*/read | |
| Microsoft.MachineLearningServices/workspaces/*/action | |
| Microsoft.MachineLearningServices/workspaces/*/delete | |
| Microsoft.MachineLearningServices/workspaces/*/write | |
| Microsoft.MachineLearningServices/locations/*/read | |
| Microsoft.Authorization/*/baca | Membaca peran dan penetapan peran |
| Microsoft.Resources/penyebaran/* | Membuat dan mengelola penyebaran |
| NotActions | |
| Microsoft.MachineLearningServices/workspaces/delete | Menghapus Ruang Kerja Layanan Pembelajaran Mesin |
| Microsoft.MachineLearningServices/workspaces/write | Membuat atau memperbarui Ruang Kerja Layanan Pembelajaran Mesin |
| Microsoft.MachineLearningServices/workspaces/listKeys/action | Membuat daftar rahasia untuk Ruang Kerja Layanan Pembelajaran Mesin |
| Microsoft.MachineLearningServices/workspaces/hubs/write | Membuat atau memperbarui Ruang Kerja Hub Layanan Pembelajaran Mesin |
| Microsoft.MachineLearningServices/workspaces/hubs/delete | Menghapus Ruang Kerja Pembelajaran Mesin Services Hub |
| Microsoft.MachineLearningServices/workspaces/featurestores/write | Membuat atau Memperbarui Pembelajaran Mesin Services FeatureStore |
| Microsoft.MachineLearningServices/workspaces/featurestores/delete | Menghapus Pembelajaran Mesin Services FeatureStore |
| DataActions | |
| Microsoft.CognitiveServices/accounts/OpenAI/* | |
| Microsoft.CognitiveServices/accounts/SpeechServices/* | |
| Microsoft.CognitiveServices/accounts/ContentSafety/* | |
| NotDataActions | |
| Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Can perform all actions within an Azure AI resource besides managing the resource itself.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/64702f94-c441-49e6-a78b-ef80e0188fee",
"name": "64702f94-c441-49e6-a78b-ef80e0188fee",
"permissions": [
{
"actions": [
"Microsoft.MachineLearningServices/workspaces/*/read",
"Microsoft.MachineLearningServices/workspaces/*/action",
"Microsoft.MachineLearningServices/workspaces/*/delete",
"Microsoft.MachineLearningServices/workspaces/*/write",
"Microsoft.MachineLearningServices/locations/*/read",
"Microsoft.Authorization/*/read",
"Microsoft.Resources/deployments/*"
],
"notActions": [
"Microsoft.MachineLearningServices/workspaces/delete",
"Microsoft.MachineLearningServices/workspaces/write",
"Microsoft.MachineLearningServices/workspaces/listKeys/action",
"Microsoft.MachineLearningServices/workspaces/hubs/write",
"Microsoft.MachineLearningServices/workspaces/hubs/delete",
"Microsoft.MachineLearningServices/workspaces/featurestores/write",
"Microsoft.MachineLearningServices/workspaces/featurestores/delete"
],
"dataActions": [
"Microsoft.CognitiveServices/accounts/OpenAI/*",
"Microsoft.CognitiveServices/accounts/SpeechServices/*",
"Microsoft.CognitiveServices/accounts/ContentSafety/*"
],
"notDataActions": []
}
],
"roleName": "Azure AI Developer",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Pemberi Izin Koneksi Jaringan Azure AI Enterprise
Dapat menyetujui koneksi titik akhir privat ke sumber daya dependensi umum Azure AI
| Tindakan | Deskripsi |
|---|---|
| Microsoft.ContainerRegistry/registries/privateEndpointConnectionsApproval/action | Menyetujui Koneksi Titik Akhir Privat Secara Otomatis |
| Microsoft.ContainerRegistry/registries/privateEndpointConnections/read | Mendapatkan properti koneksi titik akhir privat atau daftar semua koneksi titik akhir privat untuk registri kontainer yang ditentukan |
| Microsoft.ContainerRegistry/registries/privateEndpointConnections/write | Menyetujui/Menolak koneksi titik akhir privat |
| Microsoft.Cache/redis/read | Melihat pengaturan dan konfigurasi Azure Cache for Redis di portal manajemen |
| Microsoft.Cache/redis/privateEndpointConnections/read | Membaca koneksi titik akhir privat |
| Microsoft.Cache/redis/privateEndpointConnections/write | Menulis koneksi titik akhir privat |
| Microsoft.Cache/redis/privateLinkResources/read | Membaca 'groupId' dari subresource redis yang dapat disambungkan dengan tautan privat |
| Microsoft.Cache/redis/privateEndpointConnectionsApproval/action | Menyetujui Koneksi Titik Akhir Privat |
| Microsoft.Cache/redisEnterprise/read | Melihat pengaturan dan konfigurasi cache Perusahaan Redis di portal manajemen |
| Microsoft.Cache/redisEnterprise/privateEndpointConnections/read | Membaca koneksi titik akhir privat |
| Microsoft.Cache/redisEnterprise/privateEndpointConnections/write | Menulis koneksi titik akhir privat |
| Microsoft.Cache/redisEnterprise/privateLinkResources/read | Membaca 'groupId' dari subresource redis yang dapat disambungkan dengan tautan privat |
| Microsoft.Cache/redisEnterprise/privateEndpointConnectionsApproval/action | Menyetujui Koneksi Titik Akhir Privat |
| Microsoft.CognitiveServices/accounts/read | Membaca akun API. |
| Microsoft.CognitiveServices/accounts/privateEndpointConnections/read | Membaca koneksi titik akhir privat. |
| Microsoft.CognitiveServices/accounts/privateEndpointConnections/write | Menulis koneksi titik akhir privat. |
| Microsoft.CognitiveServices/accounts/privateLinkResources/read | Membaca sumber tautan privat untuk sebuah akun. |
| Microsoft.DocumentDB/databaseAccounts/privateEndpointConnectionsApproval/action | Mengelola koneksi titik akhir privat Akun Database |
| Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections/read | Membaca koneksi titik akhir privat atau daftar semua koneksi titik akhir privat dari Akun Database |
| Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections/write | Membuat atau memperbarui koneksi titik akhir privat dari Akun Database |
| Microsoft.DocumentDB/databaseAccounts/privateLinkResources/read | Membaca sumber tautan privat atau daftar semua sumber tautan privat dari Akun Database |
| Microsoft.DocumentDB/databaseAccounts/read | Membuat akun database. |
| Microsoft.KeyVault/vaults/privateEndpointConnectionsApproval/action | Setujui atau tolak koneksi ke sumber daya Titik Akhir Privat penyedia Microsoft.Network |
| Microsoft.KeyVault/vaults/privateEndpointConnections/read | Lihat status koneksi ke sumber daya Titik Akhir Privat penyedia Microsoft.Network |
| Microsoft.KeyVault/vaults/privateEndpointConnections/write | Ubah status koneksi ke sumber daya Titik Akhir Privat penyedia Microsoft.Network |
| Microsoft.KeyVault/vaults/privateLinkResources/read | Dapatkan sumber daya tautan privat yang tersedia untuk contoh Kunci Vault yang ditentukan |
| Microsoft.KeyVault/vaults/read | Melihat properti brankas kunci |
| Microsoft.MachineLearningServices/workspaces/privateEndpointConnectionsApproval/action | Setujui atau tolak koneksi ke sumber daya Titik Akhir Privat penyedia Microsoft.Network |
| Microsoft.MachineLearningServices/workspaces/privateEndpointConnections/read | Lihat status koneksi ke sumber daya Titik Akhir Privat penyedia Microsoft.Network |
| Microsoft.MachineLearningServices/workspaces/privateEndpointConnections/write | Ubah status koneksi ke sumber daya Titik Akhir Privat penyedia Microsoft.Network |
| Microsoft.MachineLearningServices/workspaces/privateLinkResources/read | Mendapatkan sumber daya tautan privat yang tersedia untuk contoh yang ditentukan dari Ruang Kerja Layanan Pembelajaran Mesin |
| Microsoft.MachineLearningServices/workspaces/read | Mendapatkan Ruang Kerja Layanan Pembelajaran Mesin |
| Microsoft.Storage/storageAccounts/privateEndpointConnections/read | Mendapatkan Koneksi Titik Akhir Privat |
| Microsoft.Storage/storageAccounts/privateEndpointConnections/write | Menempatkan Koneksi Titik Akhir Privat |
| Microsoft.Storage/storageAccounts/privateLinkResources/read | Mendapatkan groupids StorageAccount |
| Microsoft.Storage/storageAccounts/baca | Mengembalikan daftar akun penyimpanan atau mendapatkan properti untuk akun penyimpanan tertentu. |
| Microsoft.Sql/servers/privateEndpointConnectionsApproval/action | Menentukan apakah pengguna diizinkan untuk menyetujui koneksi titik akhir privat |
| Microsoft.Sql/servers/privateEndpointConnections/read | Mengembalikan daftar koneksi titik akhir privat atau mendapatkan properti untuk koneksi titik akhir privat yang ditentukan. |
| Microsoft.Sql/servers/privateEndpointConnections/write | Menyetujui atau menolak koneksi titik akhir privat yang sudah ada |
| Microsoft.Sql/servers/privateLinkResources/read | Mendapatkan sumber tautan privat untuk server sql yang sesuai |
| Microsoft.Sql/servers/baca | Mengembalikan daftar server atau mendapatkan properti untuk server yang ditentukan. |
| NotActions | |
| Tidak ada | |
| DataActions | |
| Tidak ada | |
| NotDataActions | |
| Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Can approve private endpoint connections to Azure AI common dependency resources",
"id": "/providers/Microsoft.Authorization/roleDefinitions/b556d68e-0be0-4f35-a333-ad7ee1ce17ea",
"name": "b556d68e-0be0-4f35-a333-ad7ee1ce17ea",
"permissions": [
{
"actions": [
"Microsoft.ContainerRegistry/registries/privateEndpointConnectionsApproval/action",
"Microsoft.ContainerRegistry/registries/privateEndpointConnections/read",
"Microsoft.ContainerRegistry/registries/privateEndpointConnections/write",
"Microsoft.Cache/redis/read",
"Microsoft.Cache/redis/privateEndpointConnections/read",
"Microsoft.Cache/redis/privateEndpointConnections/write",
"Microsoft.Cache/redis/privateLinkResources/read",
"Microsoft.Cache/redis/privateEndpointConnectionsApproval/action",
"Microsoft.Cache/redisEnterprise/read",
"Microsoft.Cache/redisEnterprise/privateEndpointConnections/read",
"Microsoft.Cache/redisEnterprise/privateEndpointConnections/write",
"Microsoft.Cache/redisEnterprise/privateLinkResources/read",
"Microsoft.Cache/redisEnterprise/privateEndpointConnectionsApproval/action",
"Microsoft.CognitiveServices/accounts/read",
"Microsoft.CognitiveServices/accounts/privateEndpointConnections/read",
"Microsoft.CognitiveServices/accounts/privateEndpointConnections/write",
"Microsoft.CognitiveServices/accounts/privateLinkResources/read",
"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnectionsApproval/action",
"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections/read",
"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections/write",
"Microsoft.DocumentDB/databaseAccounts/privateLinkResources/read",
"Microsoft.DocumentDB/databaseAccounts/read",
"Microsoft.KeyVault/vaults/privateEndpointConnectionsApproval/action",
"Microsoft.KeyVault/vaults/privateEndpointConnections/read",
"Microsoft.KeyVault/vaults/privateEndpointConnections/write",
"Microsoft.KeyVault/vaults/privateLinkResources/read",
"Microsoft.KeyVault/vaults/read",
"Microsoft.MachineLearningServices/workspaces/privateEndpointConnectionsApproval/action",
"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections/read",
"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections/write",
"Microsoft.MachineLearningServices/workspaces/privateLinkResources/read",
"Microsoft.MachineLearningServices/workspaces/read",
"Microsoft.Storage/storageAccounts/privateEndpointConnections/read",
"Microsoft.Storage/storageAccounts/privateEndpointConnections/write",
"Microsoft.Storage/storageAccounts/privateLinkResources/read",
"Microsoft.Storage/storageAccounts/read",
"Microsoft.Sql/servers/privateEndpointConnectionsApproval/action",
"Microsoft.Sql/servers/privateEndpointConnections/read",
"Microsoft.Sql/servers/privateEndpointConnections/write",
"Microsoft.Sql/servers/privateLinkResources/read",
"Microsoft.Sql/servers/read"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "Azure AI Enterprise Network Connection Approver",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Operator Penyebaran Inferensi Azure AI
Dapat melakukan semua tindakan yang diperlukan untuk membuat penyebaran sumber daya dalam grup sumber daya.
| Tindakan | Deskripsi |
|---|---|
| Microsoft.Authorization/*/baca | Membaca peran dan penetapan peran |
| Microsoft.Resources/penyebaran/* | Membuat dan mengelola penyebaran |
| Microsoft.Insights/AutoscaleSettings/write | Membuat atau memperbarui pengaturan penskalaan otomatis |
| NotActions | |
| Tidak ada | |
| DataActions | |
| Tidak ada | |
| NotDataActions | |
| Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Can perform all actions required to create a resource deployment within a resource group.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/3afb7f49-54cb-416e-8c09-6dc049efa503",
"name": "3afb7f49-54cb-416e-8c09-6dc049efa503",
"permissions": [
{
"actions": [
"Microsoft.Authorization/*/read",
"Microsoft.Resources/deployments/*",
"Microsoft.Insights/AutoscaleSettings/write"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "Azure AI Inference Deployment Operator",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Operator Komputasi AzureML
Dapat mengakses dan melakukan operasi CRUD pada sumber daya komputasi terkelola Layanan Pembelajaran Mesin (termasuk VM Notebook).
| Tindakan | Deskripsi |
|---|---|
| Microsoft.MachineLearningServices/workspaces/computes/* | |
| Microsoft.MachineLearningServices/workspaces/notebooks/vm/* | |
| NotActions | |
| Tidak ada | |
| DataActions | |
| Tidak ada | |
| NotDataActions | |
| Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Can access and perform CRUD operations on Machine Learning Services managed compute resources (including Notebook VMs).",
"id": "/providers/Microsoft.Authorization/roleDefinitions/e503ece1-11d0-4e8e-8e2c-7a6c3bf38815",
"name": "e503ece1-11d0-4e8e-8e2c-7a6c3bf38815",
"permissions": [
{
"actions": [
"Microsoft.MachineLearningServices/workspaces/computes/*",
"Microsoft.MachineLearningServices/workspaces/notebooks/vm/*"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "AzureML Compute Operator",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Ilmuwan Data AzureML
Dapat melakukan semua tindakan dalam ruang kerja Azure Machine Learning, kecuali untuk membuat atau menghapus sumber daya komputasi dan memodifikasi ruang kerja itu sendiri.
| Tindakan | Deskripsi |
|---|---|
| Microsoft.MachineLearningServices/workspaces/*/read | |
| Microsoft.MachineLearningServices/workspaces/*/action | |
| Microsoft.MachineLearningServices/workspaces/*/delete | |
| Microsoft.MachineLearningServices/workspaces/*/write | |
| NotActions | |
| Microsoft.MachineLearningServices/workspaces/delete | Menghapus Ruang Kerja Layanan Pembelajaran Mesin |
| Microsoft.MachineLearningServices/workspaces/write | Membuat atau memperbarui Ruang Kerja Layanan Pembelajaran Mesin |
| Microsoft.MachineLearningServices/workspaces/computes/*/write | |
| Microsoft.MachineLearningServices/workspaces/computes/*/delete | |
| Microsoft.MachineLearningServices/workspaces/computes/listKeys/action | Membuat daftar rahasia untuk sumber daya komputasi di Ruang Kerja Layanan Pembelajaran Mesin |
| Microsoft.MachineLearningServices/workspaces/listKeys/action | Membuat daftar rahasia untuk Ruang Kerja Layanan Pembelajaran Mesin |
| Microsoft.MachineLearningServices/workspaces/hubs/write | Membuat atau memperbarui Ruang Kerja Hub Layanan Pembelajaran Mesin |
| Microsoft.MachineLearningServices/workspaces/hubs/delete | Menghapus Ruang Kerja Pembelajaran Mesin Services Hub |
| Microsoft.MachineLearningServices/workspaces/featurestores/write | Membuat atau Memperbarui Pembelajaran Mesin Services FeatureStore |
| Microsoft.MachineLearningServices/workspaces/featurestores/delete | Menghapus Pembelajaran Mesin Services FeatureStore |
| DataActions | |
| Tidak ada | |
| NotDataActions | |
| Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Can perform all actions within an Azure Machine Learning workspace, except for creating or deleting compute resources and modifying the workspace itself.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/f6c7c914-8db3-469d-8ca1-694a8f32e121",
"name": "f6c7c914-8db3-469d-8ca1-694a8f32e121",
"permissions": [
{
"actions": [
"Microsoft.MachineLearningServices/workspaces/*/read",
"Microsoft.MachineLearningServices/workspaces/*/action",
"Microsoft.MachineLearningServices/workspaces/*/delete",
"Microsoft.MachineLearningServices/workspaces/*/write"
],
"notActions": [
"Microsoft.MachineLearningServices/workspaces/delete",
"Microsoft.MachineLearningServices/workspaces/write",
"Microsoft.MachineLearningServices/workspaces/computes/*/write",
"Microsoft.MachineLearningServices/workspaces/computes/*/delete",
"Microsoft.MachineLearningServices/workspaces/computes/listKeys/action",
"Microsoft.MachineLearningServices/workspaces/listKeys/action",
"Microsoft.MachineLearningServices/workspaces/hubs/write",
"Microsoft.MachineLearningServices/workspaces/hubs/delete",
"Microsoft.MachineLearningServices/workspaces/featurestores/write",
"Microsoft.MachineLearningServices/workspaces/featurestores/delete"
],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "AzureML Data Scientist",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Kontributor Cognitive Services
Memungkinkan Anda membuat, membaca, memperbarui, menghapus, dan mengelola kunci Cognitive Services.
| Tindakan | Deskripsi |
|---|---|
| Microsoft.Authorization/*/baca | Membaca peran dan penetapan peran |
| Microsoft.CognitiveServices/* | |
| Microsoft.Features/features/read | Mendapatkan fitur langganan. |
| Microsoft.Features/penyedia/fitur/baca | Mendapatkan fitur langganan di penyedia sumber daya tertentu. |
| Microsoft.Features/providers/features/register/action | Mendaftarkan fitur untuk langganan di penyedia sumber daya tertentu. |
| Microsoft.Insights/alertRules/* | Membuat dan mengelola pemberitahuan metrik klasik |
| Microsoft.Insights/diagnosticSettings/* | Membuat, memperbarui, atau membaca pengaturan diagnostik untuk Server Analisis |
| Microsoft.Insights/logDefinisi/baca | Baca definisi log |
| Microsoft.Insights/metricdefinisi/baca | Baca definisi metrik |
| Microsoft.Insights/metrik/baca | Membaca metrik |
| Microsoft.ResourceHealth/availabilityStatuses/baca | Mendapatkan status ketersediaan untuk semua sumber daya dalam lingkup yang ditentukan |
| Microsoft.Resources/penyebaran/* | Membuat dan mengelola penyebaran |
| Microsoft.Resources/penyebaran/operasi/baca | Mendapatkan atau mencantumkan operasi penyebaran. |
| Microsoft.Resources/langganan/hasiloperasi/baca | Dapatkan Hasil Operasi Langganan. |
| Microsoft.Resources/langganan/baca | Mendapatkan daftar langganan. |
| Microsoft.Resources/subscriptions/resourcegroups/penyebaran/* | |
| Microsoft.Resources/langganan/resourceGroups/baca | Mendapatkan atau mencantumkan grup sumber daya. |
| Microsoft.Support/* | Membuat dan memperbarui tiket dukungan |
| NotActions | |
| Tidak ada | |
| DataActions | |
| Tidak ada | |
| NotDataActions | |
| Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Lets you create, read, update, delete and manage keys of Cognitive Services.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68",
"name": "25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68",
"permissions": [
{
"actions": [
"Microsoft.Authorization/*/read",
"Microsoft.CognitiveServices/*",
"Microsoft.Features/features/read",
"Microsoft.Features/providers/features/read",
"Microsoft.Features/providers/features/register/action",
"Microsoft.Insights/alertRules/*",
"Microsoft.Insights/diagnosticSettings/*",
"Microsoft.Insights/logDefinitions/read",
"Microsoft.Insights/metricdefinitions/read",
"Microsoft.Insights/metrics/read",
"Microsoft.ResourceHealth/availabilityStatuses/read",
"Microsoft.Resources/deployments/*",
"Microsoft.Resources/deployments/operations/read",
"Microsoft.Resources/subscriptions/operationresults/read",
"Microsoft.Resources/subscriptions/read",
"Microsoft.Resources/subscriptions/resourcegroups/deployments/*",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.Support/*"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "Cognitive Services Contributor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Kontributor Visi Kustom Cognitive Services
Akses penuh ke proyek, termasuk kemampuan untuk melihat, membuat, mengedit, atau menghapus proyek.
| Tindakan | Deskripsi |
|---|---|
| Microsoft.CognitiveServices/*/baca | |
| NotActions | |
| Tidak ada | |
| DataActions | |
| Microsoft.CognitiveServices/akun/CustomVision/* | |
| NotDataActions | |
| Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Full access to the project, including the ability to view, create, edit, or delete projects.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/c1ff6cc2-c111-46fe-8896-e0ef812ad9f3",
"name": "c1ff6cc2-c111-46fe-8896-e0ef812ad9f3",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/*"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services Custom Vision Contributor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Penyebaran Visi Kustom Cognitive Services
Publikasikan, batal terbitkan, atau ekspor model. Penyebaran dapat melihat proyek tetapi tidak dapat memperbarui.
| Tindakan | Deskripsi |
|---|---|
| Microsoft.CognitiveServices/*/baca | |
| NotActions | |
| Tidak ada | |
| DataActions | |
| Microsoft.CognitiveServices/akun/CustomVision/*/baca | |
| Microsoft.CognitiveServices/akun/CustomVision/proyek/prediksi/* | |
| Microsoft.CognitiveServices/akun/CustomVision/proyek/perulangan/terbitkan/* | |
| Microsoft.CognitiveServices/akun/CustomVision/proyek/perulangan/ekspor/* | |
| Microsoft.CognitiveServices/akun/CustomVision/proyek/uji cepat/* | |
| Microsoft.CognitiveServices/akun/CustomVision/klasifikasikan/* | |
| Microsoft.CognitiveServices/akun/CustomVision/deteksi/* | |
| NotDataActions | |
| Microsoft.CognitiveServices/akun/CustomVision/proyek/ekspor/baca | Mengekspor proyek. |
{
"assignableScopes": [
"/"
],
"description": "Publish, unpublish or export models. Deployment can view the project but can't update.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/5c4089e1-6d96-4d2f-b296-c1bc7137275f",
"name": "5c4089e1-6d96-4d2f-b296-c1bc7137275f",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/*/read",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/*",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/publish/*",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/export/*",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/quicktest/*",
"Microsoft.CognitiveServices/accounts/CustomVision/classify/*",
"Microsoft.CognitiveServices/accounts/CustomVision/detect/*"
],
"notDataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read"
]
}
],
"roleName": "Cognitive Services Custom Vision Deployment",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Pemberi Label Visi Kustom Cognitive Services
Lihat, edit gambar pelatihan dan buat, tambahkan, hapus, atau hapus tag gambar. Pelabel dapat melihat proyek tetapi tidak dapat memperbarui apa pun selain gambar dan tag pelatihan.
| Tindakan | Deskripsi |
|---|---|
| Microsoft.CognitiveServices/*/baca | |
| NotActions | |
| Tidak ada | |
| DataActions | |
| Microsoft.CognitiveServices/akun/CustomVision/*/baca | |
| Microsoft.CognitiveServices/akun/CustomVision/proyek/prediksi/kueri/tindakan | Dapatkan gambar yang dikirim ke titik akhir prediksi Anda. |
| Microsoft.CognitiveServices/akun/CustomVision/proyek/gambar/* | |
| Microsoft.CognitiveServices/akun/CustomVision/proyek/tag/* | |
| Microsoft.CognitiveServices/akun/CustomVision/proyek/gambar/disarankan/* | |
| Microsoft.CognitiveServices/akun/CustomVision/proyek/tagsandregions/saran/tindakan | API ini akan mendapatkan tag dan wilayah yang disarankan untuk larik/batch gambar yang tidak diberi tag bersama dengan kepercayaan untuk tag tersebut. Mengembalikan array kosong jika tidak ada tag yang ditemukan. |
| NotDataActions | |
| Microsoft.CognitiveServices/akun/CustomVision/proyek/ekspor/baca | Mengekspor proyek. |
{
"assignableScopes": [
"/"
],
"description": "View, edit training images and create, add, remove, or delete the image tags. Labelers can view the project but can't update anything other than training images and tags.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/88424f51-ebe7-446f-bc41-7fa16989e96c",
"name": "88424f51-ebe7-446f-bc41-7fa16989e96c",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/*/read",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/images/*",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/tags/*",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/images/suggested/*",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/tagsandregions/suggestions/action"
],
"notDataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read"
]
}
],
"roleName": "Cognitive Services Custom Vision Labeler",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Pembaca Visi Kustom Cognitive Services
Tindakan baca-saja di ruang kerja. Pembaca tidak dapat membuat atau memperbarui aset ini.
| Tindakan | Deskripsi |
|---|---|
| Microsoft.CognitiveServices/*/baca | |
| NotActions | |
| Tidak ada | |
| DataActions | |
| Microsoft.CognitiveServices/akun/CustomVision/*/baca | |
| Microsoft.CognitiveServices/akun/CustomVision/proyek/prediksi/kueri/tindakan | Dapatkan gambar yang dikirim ke titik akhir prediksi Anda. |
| NotDataActions | |
| Microsoft.CognitiveServices/akun/CustomVision/proyek/ekspor/baca | Mengekspor proyek. |
{
"assignableScopes": [
"/"
],
"description": "Read-only actions in the project. Readers can't create or update the project.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/93586559-c37d-4a6b-ba08-b9f0940c2d73",
"name": "93586559-c37d-4a6b-ba08-b9f0940c2d73",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/*/read",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action"
],
"notDataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read"
]
}
],
"roleName": "Cognitive Services Custom Vision Reader",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Pelatih Custom Vision Cognitive Services
Lihat, edit proyek, dan latih model, termasuk kemampuan untuk menerbitkan, membatalkan penerbitan, mengekspor model. Pelatih tidak dapat membuat atau menghapus proyek.
| Tindakan | Deskripsi |
|---|---|
| Microsoft.CognitiveServices/*/baca | |
| NotActions | |
| Tidak ada | |
| DataActions | |
| Microsoft.CognitiveServices/akun/CustomVision/* | |
| NotDataActions | |
| Microsoft.CognitiveServices/akun/CustomVision/proyek/tindakan | Buat proyek. |
| Microsoft.CognitiveServices/akun/CustomVision/proyek/hapus | Menghapus proyek tertentu. |
| Microsoft.CognitiveServices/akun/CustomVision/proyek/impor/tindakan | Mengimpor proyek. |
| Microsoft.CognitiveServices/akun/CustomVision/proyek/ekspor/baca | Mengekspor proyek. |
{
"assignableScopes": [
"/"
],
"description": "View, edit projects and train the models, including the ability to publish, unpublish, export the models. Trainers can't create or delete the project.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/0a5ae4ab-0d65-4eeb-be61-29fc9b54394b",
"name": "0a5ae4ab-0d65-4eeb-be61-29fc9b54394b",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/*"
],
"notDataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/projects/action",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/delete",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/import/action",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read"
]
}
],
"roleName": "Cognitive Services Custom Vision Trainer",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Pembaca Data Cognitive Services (Pratinjau)
Memungkinkan Anda membaca data Cognitive Services.
| Tindakan | Deskripsi |
|---|---|
| Tidak ada | |
| NotActions | |
| Tidak ada | |
| DataActions | |
| Microsoft.CognitiveServices/*/baca | |
| NotDataActions | |
| Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Lets you read Cognitive Services data.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/b59867f0-fa02-499b-be73-45a86b5b3e1c",
"name": "b59867f0-fa02-499b-be73-45a86b5b3e1c",
"permissions": [
{
"actions": [],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/*/read"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services Data Reader (Preview)",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Pengenal Wajah Cognitive Services
Memungkinkan Anda melakukan deteksi, verifikasi, identifikasi, kelompokkan, dan temukan operasi serupa di Face API. Peran ini tidak memungkinkan operasi buat atau hapus, yang membuatnya sangat cocok untuk titik akhir yang hanya perlu kemampuan yang lebih rendah, mengikuti praktik terbaik 'hak istimewa paling sedikit'.
| Tindakan | Deskripsi |
|---|---|
| Tidak ada | |
| NotActions | |
| Tidak ada | |
| DataActions | |
| Microsoft.CognitiveServices/akun/Wajah/deteksi/tindakan | Deteksi wajah manusia dalam gambar, kembalikan persegi panjang wajah, dan opsional dengan faceId, landmark, dan atribut. |
| Microsoft.CognitiveServices/akun/Wajah/verifikasi/tindakan | Verifikasi apakah dua wajah milik orang yang sama atau satu wajah milik seseorang. |
| Microsoft.CognitiveServices/akun/Wajah/identifikasi/tindakan | Identifikasi 1-ke-banyak untuk menemukan kecocokan terdekat dari wajah orang kueri tertentu dari grup orang atau kelompok orang besar. |
| Microsoft.CognitiveServices/akun/Wajah/grup/tindakan | Bagilah wajah kandidat menjadi beberapa kelompok berdasarkan kesamaan wajah. |
| Microsoft.CognitiveServices/akun/Wajah/temukan kesaman/tindakan | FaceId wajah kueri yang diberikan, untuk mencari wajah yang tampak serupa dari larik faceId, daftar wajah, atau daftar wajah besar. faceId |
| Microsoft.CognitiveServices/accounts/Face/detectliveness/multimodal/action | Melakukan deteksi liveness pada wajah target dalam urutan gambar inframerah, warna, dan/atau kedalaman, dan mengembalikan klasifikasi keakuratan wajah target sebagai 'wajah nyata', 'wajah spoof', atau 'tidak pasti' jika klasifikasi tidak dapat dilakukan dengan input yang diberikan. |
| Microsoft.CognitiveServices/accounts/Face/detectliveness/singlemodal/action | Melakukan deteksi liveness pada wajah target dalam urutan gambar dengan modalitas yang sama (misalnya warna atau inframerah), dan mengembalikan klasifikasi keakuratan wajah target sebagai 'wajah nyata', 'wajah spoof', atau 'tidak pasti' jika klasifikasi tidak dapat dilakukan dengan input yang diberikan. |
| Microsoft.CognitiveServices/accounts/Face/detectlivenesswithverify/singlemodal/action | Mendeteksi keakuratan wajah target dalam urutan gambar dengan jenis aliran yang sama (misalnya warna) dan kemudian membandingkan dengan VerifyImage untuk mengembalikan skor keyakinan untuk skenario identitas. |
| Microsoft.CognitiveServices/accounts/Face/*/sessions/action | |
| Microsoft.CognitiveServices/accounts/Face/*/sessions/delete | |
| Microsoft.CognitiveServices/accounts/Face/*/sessions/read | |
| Microsoft.CognitiveServices/accounts/Face/*/sessions/audit/read | |
| NotDataActions | |
| Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Lets you perform detect, verify, identify, group, and find similar operations on Face API. This role does not allow create or delete operations, which makes it well suited for endpoints that only need inferencing capabilities, following 'least privilege' best practices.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/9894cab4-e18a-44aa-828b-cb588cd6f2d7",
"name": "9894cab4-e18a-44aa-828b-cb588cd6f2d7",
"permissions": [
{
"actions": [],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/Face/detect/action",
"Microsoft.CognitiveServices/accounts/Face/verify/action",
"Microsoft.CognitiveServices/accounts/Face/identify/action",
"Microsoft.CognitiveServices/accounts/Face/group/action",
"Microsoft.CognitiveServices/accounts/Face/findsimilars/action",
"Microsoft.CognitiveServices/accounts/Face/detectliveness/multimodal/action",
"Microsoft.CognitiveServices/accounts/Face/detectliveness/singlemodal/action",
"Microsoft.CognitiveServices/accounts/Face/detectlivenesswithverify/singlemodal/action",
"Microsoft.CognitiveServices/accounts/Face/*/sessions/action",
"Microsoft.CognitiveServices/accounts/Face/*/sessions/delete",
"Microsoft.CognitiveServices/accounts/Face/*/sessions/read",
"Microsoft.CognitiveServices/accounts/Face/*/sessions/audit/read"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services Face Recognizer",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Administrator Penasihat Metrik Cognitive Services
Akses penuh ke proyek, termasuk konfigurasi tingkat sistem.
| Tindakan | Deskripsi |
|---|---|
| Microsoft.CognitiveServices/*/baca | |
| NotActions | |
| Tidak ada | |
| DataActions | |
| Microsoft.CognitiveServices/accounts/MetricsAdvisor/* | |
| NotDataActions | |
| Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Full access to the project, including the system level configuration.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/cb43c632-a144-4ec5-977c-e80c4affc34a",
"name": "cb43c632-a144-4ec5-977c-e80c4affc34a",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/MetricsAdvisor/*"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services Metrics Advisor Administrator",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Kontributor Cognitive Services OpenAI
Akses penuh termasuk kemampuan untuk menyempurnakan, menyebarkan, dan menghasilkan teks
| Tindakan | Deskripsi |
|---|---|
| Microsoft.CognitiveServices/*/baca | |
| Microsoft.CognitiveServices/accounts/deployments/write | Menulis penyebaran. |
| Microsoft.CognitiveServices/accounts/deployments/delete | Menghapus penyebaran. |
| Microsoft.CognitiveServices/accounts/raiPolicies/read | Mendapatkan semua kebijakan yang berlaku di bawah akun termasuk kebijakan default. |
| Microsoft.CognitiveServices/accounts/raiPolicies/write | Membuat atau memperbarui kebijakan AI Bertanggung Jawab kustom. |
| Microsoft.CognitiveServices/accounts/raiPolicies/delete | Menghapus kebijakan AI Bertanggung Jawab kustom yang tidak dirujuk oleh penyebaran yang ada. |
| Microsoft.CognitiveServices/accounts/commitmentplans/read | Membaca paket komitmen. |
| Microsoft.CognitiveServices/accounts/commitmentplans/write | Menulis paket komitmen. |
| Microsoft.CognitiveServices/accounts/commitmentplans/delete | Menghapus paket komitmen. |
| Microsoft.Authorization/roleAssignments/baca | Mendapatkan informasi tentang penetapan peran. |
| Microsoft.Authorization/roleDefinisi/baca | Mendapatkan informasi tentang definisi peran. |
| NotActions | |
| Tidak ada | |
| DataActions | |
| Microsoft.CognitiveServices/accounts/OpenAI/* | |
| NotDataActions | |
| Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Full access including the ability to fine-tune, deploy and generate text",
"id": "/providers/Microsoft.Authorization/roleDefinitions/a001fd3d-188f-4b5d-821b-7da978bf7442",
"name": "a001fd3d-188f-4b5d-821b-7da978bf7442",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.CognitiveServices/accounts/deployments/write",
"Microsoft.CognitiveServices/accounts/deployments/delete",
"Microsoft.CognitiveServices/accounts/raiPolicies/read",
"Microsoft.CognitiveServices/accounts/raiPolicies/write",
"Microsoft.CognitiveServices/accounts/raiPolicies/delete",
"Microsoft.CognitiveServices/accounts/commitmentplans/read",
"Microsoft.CognitiveServices/accounts/commitmentplans/write",
"Microsoft.CognitiveServices/accounts/commitmentplans/delete",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleDefinitions/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/OpenAI/*"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services OpenAI Contributor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Pengguna Cognitive Services OpenAI
Akses baca untuk melihat file, model, penyebaran. Kemampuan untuk membuat penyelesaian dan penyematan panggilan.
| Tindakan | Deskripsi |
|---|---|
| Microsoft.CognitiveServices/*/baca | |
| Microsoft.Authorization/roleAssignments/baca | Mendapatkan informasi tentang penetapan peran. |
| Microsoft.Authorization/roleDefinisi/baca | Mendapatkan informasi tentang definisi peran. |
| NotActions | |
| Tidak ada | |
| DataActions | |
| Microsoft.CognitiveServices/accounts/OpenAI/*/read | |
| Microsoft.CognitiveServices/accounts/OpenAI/engines/completions/action | Membuat penyelesaian model yang dipilih |
| Microsoft.CognitiveServices/accounts/OpenAI/engines/search/action | Mencari dokumen yang paling relevan menggunakan mesin saat ini. |
| Microsoft.CognitiveServices/accounts/OpenAI/engines/generate/action | (Ditujukan hanya untuk browser.) Streaming teks yang dihasilkan dari model melalui permintaan GET. Metode ini disediakan karena metode EventSource asli browser hanya dapat mengirim permintaan GET. Ini mendukung serangkaian opsi konfigurasi yang lebih terbatas daripada varian POST. |
| Microsoft.CognitiveServices/accounts/OpenAI/deployments/audio/action | Mengembalikan transkrip atau terjemahan untuk file audio tertentu. |
| Microsoft.CognitiveServices/accounts/OpenAI/deployments/search/action | Mencari dokumen yang paling relevan menggunakan mesin saat ini. |
| Microsoft.CognitiveServices/accounts/OpenAI/deployments/completions/action | Buat penyelesaian dari model yang dipilih. |
| Microsoft.CognitiveServices/accounts/OpenAI/deployments/chat/completions/action | Membuat penyelesaian untuk pesan obrolan |
| Microsoft.CognitiveServices/accounts/OpenAI/deployments/extensions/chat/completions/action | Membuat penyelesaian untuk pesan obrolan dengan ekstensi |
| Microsoft.CognitiveServices/accounts/OpenAI/deployments/embeddings/action | Mengembalikan penyematan untuk perintah tertentu. |
| Microsoft.CognitiveServices/accounts/OpenAI/images/generations/action | Membuat pembuatan gambar. |
| NotDataActions | |
| Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Ability to view files, models, deployments. Readers can't make any changes They can inference and create images",
"id": "/providers/Microsoft.Authorization/roleDefinitions/5e0bd9bd-7b93-4f28-af87-19fc36ad61bd",
"name": "5e0bd9bd-7b93-4f28-af87-19fc36ad61bd",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleDefinitions/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/OpenAI/*/read",
"Microsoft.CognitiveServices/accounts/OpenAI/engines/completions/action",
"Microsoft.CognitiveServices/accounts/OpenAI/engines/search/action",
"Microsoft.CognitiveServices/accounts/OpenAI/engines/generate/action",
"Microsoft.CognitiveServices/accounts/OpenAI/deployments/audio/action",
"Microsoft.CognitiveServices/accounts/OpenAI/deployments/search/action",
"Microsoft.CognitiveServices/accounts/OpenAI/deployments/completions/action",
"Microsoft.CognitiveServices/accounts/OpenAI/deployments/chat/completions/action",
"Microsoft.CognitiveServices/accounts/OpenAI/deployments/extensions/chat/completions/action",
"Microsoft.CognitiveServices/accounts/OpenAI/deployments/embeddings/action",
"Microsoft.CognitiveServices/accounts/OpenAI/images/generations/action"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services OpenAI User",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Editor Cognitive Services QnA Maker
Mari kita membuat, mengedit, mengimpor, dan mengekspor KB. Anda tidak dapat menerbitkan atau menghapus KB.
| Tindakan | Deskripsi |
|---|---|
| Microsoft.CognitiveServices/*/baca | |
| Microsoft.Authorization/roleAssignments/baca | Mendapatkan informasi tentang penetapan peran. |
| Microsoft.Authorization/roleDefinisi/baca | Mendapatkan informasi tentang definisi peran. |
| NotActions | |
| Tidak ada | |
| DataActions | |
| Microsoft.CognitiveServices/akun/QnAMaker/knowledgebases/baca | Mendapatkan Daftar Basis Pengetahuan atau detail knowledgebaser tertentu. |
| Microsoft.CognitiveServices/akun/QnAMaker/knowledgebases/unduh/baca | Unduh basis pengetahuan. |
| Microsoft.CognitiveServices/akun/QnAMaker/knowledgebases/buat/tulis | Operasi asinkron untuk membuat basis pengetahuan baru. |
| Microsoft.CognitiveServices/akun/QnAMaker/knowledgebases/baca | Operasi asinkron untuk memodifikasi basis pengetahuan atau Mengganti konten basis pengetahuan. |
| Microsoft.CognitiveServices/akun/QnAMaker/knowledgebases/generateanswer/tindakan | GenerateAnswer panggilan untuk meminta basis pengetahuan. |
| Microsoft.CognitiveServices/akun/QnAMaker/knowledgebases/latih/baca | Latih panggilan untuk menambahkan saran ke basis pengetahuan. |
| Microsoft.CognitiveServices/akun/QnAMaker/perubahan/baca | Unduh perubahan dari waktu proses. |
| Microsoft.CognitiveServices/akun/QnAMaker/perubahan/tulis | Mengganti data perubahan. |
| Microsoft.CognitiveServices/akun/QnAMaker/endpointkeys/baca | Mendapatkan tombol endpoint untuk titik akhir |
| Microsoft.CognitiveServices/akun/QnAMaker/endpointkeys/refreshkeys/tindakan | Membuat ulang kunci titik akhir. |
| Microsoft.CognitiveServices/akun/QnAMaker/endpointsettings/baca | Mendapatkan pengaturan endpoint untuk endpoint |
| Microsoft.CognitiveServices/akun/QnAMaker/endpointsettings/tulis | Perbarui endpoint seettings untuk titik akhir. |
| Microsoft.CognitiveServices/akun/QnAMaker/operasi/baca | Mendapatkan detail operasi jangka panjang tertentu. |
| Microsoft.CognitiveServices/akun/QnAMaker.v2/knowledgebases/baca | Mendapatkan Daftar Basis Pengetahuan atau detail knowledgebaser tertentu. |
| Microsoft.CognitiveServices/akun/QnAMaker.v2/knowledgebases/unduh/baca | Unduh basis pengetahuan. |
| Microsoft.CognitiveServices/akun/QnAMaker.v2/knowledgebases/buat/tulis | Operasi asinkron untuk membuat basis pengetahuan baru. |
| Microsoft.CognitiveServices/akun/QnAMaker.v2/knowledgebases/tulis | Operasi asinkron untuk memodifikasi basis pengetahuan atau Mengganti konten basis pengetahuan. |
| Microsoft.CognitiveServices/akun/QnAMaker.v2/knowledgebases/generateanswer/tindakan | GenerateAnswer panggilan untuk meminta basis pengetahuan. |
| Microsoft.CognitiveServices/akun/QnAMaker.v2/knowledgebases/latih/baca | Latih panggilan untuk menambahkan saran ke basis pengetahuan. |
| Microsoft.CognitiveServices/akun/QnAMaker.v2/perubahan/baca | Unduh perubahan dari waktu proses. |
| Microsoft.CognitiveServices/akun/QnAMaker.v2/perubahan/tulis | Mengganti data perubahan. |
| Microsoft.CognitiveServices/akun/QnAMaker.v2/endpointkeys/baca | Mendapatkan tombol endpoint untuk titik akhir |
| Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/refreshkeys/tindakan | Membuat ulang kunci titik akhir. |
| Microsoft.CognitiveServices/akun/QnAMaker.v2/endpointsettings/baca | Mendapatkan pengaturan endpoint untuk endpoint |
| Microsoft.CognitiveServices/akun/QnAMaker.v2/endpointsettings/tulis | Perbarui endpoint seettings untuk titik akhir. |
| Microsoft.CognitiveServices/akun/QnAMaker.v2/operasi/baca | Mendapatkan detail operasi jangka panjang tertentu. |
| Microsoft.CognitiveServices/akun/TextAnalytics/QnAMaker/knowledgebases/baca | Mendapatkan Daftar Basis Pengetahuan atau detail knowledgebaser tertentu. |
| Microsoft.CognitiveServices/akun/TextAnalytics/QnAMaker/knowledgebases/unduh/baca | Unduh basis pengetahuan. |
| Microsoft.CognitiveServices/akun/TextAnalytics/QnAMaker/knowledgebases/buat/tulis | Operasi asinkron untuk membuat basis pengetahuan baru. |
| Microsoft.CognitiveServices/akun/TextAnalytics/QnAMaker/knowledgebases/tulis | Operasi asinkron untuk memodifikasi basis pengetahuan atau Mengganti konten basis pengetahuan. |
| Microsoft.CognitiveServices/akun/TextAnalytics/QnAMaker/knowledgebases/generateanswer/tindakan | GenerateAnswer panggilan untuk meminta basis pengetahuan. |
| Microsoft.CognitiveServices/akun/TextAnalytics/QnAMaker/knowledgebases/latih/tulis | Latih panggilan untuk menambahkan saran ke basis pengetahuan. |
| Microsoft.CognitiveServices/akun/TextAnalytics/QnAMaker/perubahan/baca | Unduh perubahan dari waktu proses. |
| Microsoft.CognitiveServices/akun/TextAnalytics/QnAMaker/perubahan/tulis | Mengganti data perubahan. |
| Microsoft.CognitiveServices/akun/TextAnalytics/QnAMaker/endpointkeys/baca | Mendapatkan tombol endpoint untuk titik akhir |
| Microsoft.CognitiveServices/akun/TextAnalytics/QnAMaker/endpointkeys/refreshkeys/tindakan | Membuat ulang kunci titik akhir. |
| Microsoft.CognitiveServices/akun/TextAnalytics/QnAMaker/endpointsettings/baca | Mendapatkan pengaturan endpoint untuk endpoint |
| Microsoft.CognitiveServices/akun/TextAnalytics/QnAMaker/endpointsettings/tulis | Perbarui endpoint seettings untuk titik akhir. |
| Microsoft.CognitiveServices/akun/TextAnalytics/QnAMaker/operasi/baca | Mendapatkan detail operasi jangka panjang tertentu. |
| NotDataActions | |
| Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Let's you create, edit, import and export a KB. You cannot publish or delete a KB.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/f4cc2bf9-21be-47a1-bdf1-5c5804381025",
"name": "f4cc2bf9-21be-47a1-bdf1-5c5804381025",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleDefinitions/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/create/write",
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/write",
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action",
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/train/action",
"Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/alterations/write",
"Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/refreshkeys/action",
"Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/write",
"Microsoft.CognitiveServices/accounts/QnAMaker/operations/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/create/write",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/write",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/train/action",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/write",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/refreshkeys/action",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/write",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/operations/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/download/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/create/write",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/write",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/generateanswer/action",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/train/action",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/write",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/refreshkeys/action",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/write",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/operations/read"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services QnA Maker Editor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Pembaca QnA Maker Cognitive Services
Memungkinkan Anda membaca dan menguji KB saja.
| Tindakan | Deskripsi |
|---|---|
| Microsoft.CognitiveServices/*/baca | |
| Microsoft.Authorization/roleAssignments/baca | Mendapatkan informasi tentang penetapan peran. |
| Microsoft.Authorization/roleDefinisi/baca | Mendapatkan informasi tentang definisi peran. |
| NotActions | |
| Tidak ada | |
| DataActions | |
| Microsoft.CognitiveServices/akun/QnAMaker/knowledgebases/baca | Mendapatkan Daftar Basis Pengetahuan atau detail knowledgebaser tertentu. |
| Microsoft.CognitiveServices/akun/QnAMaker/knowledgebases/unduh/baca | Unduh basis pengetahuan. |
| Microsoft.CognitiveServices/akun/QnAMaker/knowledgebases/generateanswer/tindakan | GenerateAnswer panggilan untuk meminta basis pengetahuan. |
| Microsoft.CognitiveServices/akun/QnAMaker/perubahan/baca | Unduh perubahan dari waktu proses. |
| Microsoft.CognitiveServices/akun/QnAMaker/endpointkeys/baca | Mendapatkan tombol endpoint untuk titik akhir |
| Microsoft.CognitiveServices/akun/QnAMaker/endpointsettings/baca | Mendapatkan pengaturan endpoint untuk endpoint |
| Microsoft.CognitiveServices/akun/QnAMaker.v2/knowledgebases/baca | Mendapatkan Daftar Basis Pengetahuan atau detail knowledgebaser tertentu. |
| Microsoft.CognitiveServices/akun/QnAMaker.v2/knowledgebases/unduh/baca | Unduh basis pengetahuan. |
| Microsoft.CognitiveServices/akun/QnAMaker.v2/knowledgebases/generateanswer/tindakan | GenerateAnswer panggilan untuk meminta basis pengetahuan. |
| Microsoft.CognitiveServices/akun/QnAMaker.v2/perubahan/baca | Unduh perubahan dari waktu proses. |
| Microsoft.CognitiveServices/akun/QnAMaker.v2/endpointkeys/baca | Mendapatkan tombol endpoint untuk titik akhir |
| Microsoft.CognitiveServices/akun/QnAMaker.v2/endpointsettings/baca | Mendapatkan pengaturan endpoint untuk endpoint |
| Microsoft.CognitiveServices/akun/TextAnalytics/QnAMaker/knowledgebases/baca | Mendapatkan Daftar Basis Pengetahuan atau detail knowledgebaser tertentu. |
| Microsoft.CognitiveServices/akun/TextAnalytics/QnAMaker/knowledgebases/unduh/baca | Unduh basis pengetahuan. |
| Microsoft.CognitiveServices/akun/TextAnalytics/QnAMaker/knowledgebases/generateanswer/tindakan | GenerateAnswer panggilan untuk meminta basis pengetahuan. |
| Microsoft.CognitiveServices/akun/TextAnalytics/QnAMaker/perubahan/baca | Unduh perubahan dari waktu proses. |
| Microsoft.CognitiveServices/akun/TextAnalytics/QnAMaker/endpointkeys/baca | Mendapatkan tombol endpoint untuk titik akhir |
| Microsoft.CognitiveServices/akun/TextAnalytics/QnAMaker/endpointsettings/baca | Mendapatkan pengaturan endpoint untuk endpoint |
| NotDataActions | |
| Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Let's you read and test a KB only.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/466ccd10-b268-4a11-b098-b4849f024126",
"name": "466ccd10-b268-4a11-b098-b4849f024126",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleDefinitions/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action",
"Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/download/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/generateanswer/action",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/read"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services QnA Maker Reader",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Pembaca Penggunaan Cognitive Services
Izin minimal untuk melihat penggunaan Cognitive Services.
| Tindakan | Deskripsi |
|---|---|
| Microsoft.CognitiveServices/locations/usages/read | Membaca semua data penggunaan |
| NotActions | |
| Tidak ada | |
| DataActions | |
| Tidak ada | |
| NotDataActions | |
| Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Minimal permission to view Cognitive Services usages.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/bba48692-92b0-4667-a9ad-c31c7b334ac2",
"name": "bba48692-92b0-4667-a9ad-c31c7b334ac2",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/locations/usages/read"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "Cognitive Services Usages Reader",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Pengguna Cognitive Services
Memungkinkan Anda membaca dan mencantumkan kunci Cognitive Services.
| Tindakan | Deskripsi |
|---|---|
| Microsoft.CognitiveServices/*/baca | |
| Microsoft.CognitiveServices/akun/listkeys/tindakan | Membuat daftar kunci |
| Microsoft.Insights/alertRules/baca | Membaca pemberitahuan metrik klasik |
| Microsoft.Insights /DiagnosticSettings/baca | Membaca pengaturan diagnostik sumber daya |
| Microsoft.Insights/logDefinisi/baca | Baca definisi log |
| Microsoft.Insights/metricdefinisi/baca | Baca definisi metrik |
| Microsoft.Insights/metrik/baca | Membaca metrik |
| Microsoft.ResourceHealth/availabilityStatuses/baca | Mendapatkan status ketersediaan untuk semua sumber daya dalam lingkup yang ditentukan |
| Microsoft.Resources/penyebaran/operasi/baca | Mendapatkan atau mencantumkan operasi penyebaran. |
| Microsoft.Resources/langganan/hasiloperasi/baca | Dapatkan Hasil Operasi Langganan. |
| Microsoft.Resources/langganan/baca | Mendapatkan daftar langganan. |
| Microsoft.Resources/langganan/resourceGroups/baca | Mendapatkan atau mencantumkan grup sumber daya. |
| Microsoft.Support/* | Membuat dan memperbarui tiket dukungan |
| NotActions | |
| Tidak ada | |
| DataActions | |
| Microsoft.CognitiveServices/* | |
| NotDataActions | |
| Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Lets you read and list keys of Cognitive Services.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/a97b65f3-24c7-4388-baec-2e87135dc908",
"name": "a97b65f3-24c7-4388-baec-2e87135dc908",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.CognitiveServices/accounts/listkeys/action",
"Microsoft.Insights/alertRules/read",
"Microsoft.Insights/diagnosticSettings/read",
"Microsoft.Insights/logDefinitions/read",
"Microsoft.Insights/metricdefinitions/read",
"Microsoft.Insights/metrics/read",
"Microsoft.ResourceHealth/availabilityStatuses/read",
"Microsoft.Resources/deployments/operations/read",
"Microsoft.Resources/subscriptions/operationresults/read",
"Microsoft.Resources/subscriptions/read",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.Support/*"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/*"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services User",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Kontributor Data Indeks Pencarian
Memberikan akses penuh ke data indeks Azure Cognitive Search.
| Tindakan | Deskripsi |
|---|---|
| Tidak ada | |
| NotActions | |
| Tidak ada | |
| DataActions | |
| Microsoft.Search/searchServices/indexes/documents/* | |
| NotDataActions | |
| Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Grants full access to Azure Cognitive Search index data.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/8ebe5a00-799e-43f5-93ac-243d3dce84a7",
"name": "8ebe5a00-799e-43f5-93ac-243d3dce84a7",
"permissions": [
{
"actions": [],
"notActions": [],
"dataActions": [
"Microsoft.Search/searchServices/indexes/documents/*"
],
"notDataActions": []
}
],
"roleName": "Search Index Data Contributor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Pembaca Data Indeks Pencarian
Memberikan akses membaca ke data indeks Azure Cognitive Search.
| Tindakan | Deskripsi |
|---|---|
| Tidak ada | |
| NotActions | |
| Tidak ada | |
| DataActions | |
| Microsoft.Search/searchServices/indexes/documents/read | Membaca dokumen ataupun istilah kueri yang disarankan dari indeks. |
| NotDataActions | |
| Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Grants read access to Azure Cognitive Search index data.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/1407120a-92aa-4202-b7e9-c0e197c71c8f",
"name": "1407120a-92aa-4202-b7e9-c0e197c71c8f",
"permissions": [
{
"actions": [],
"notActions": [],
"dataActions": [
"Microsoft.Search/searchServices/indexes/documents/read"
],
"notDataActions": []
}
],
"roleName": "Search Index Data Reader",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Kontributor Layanan Pencarian
Memungkinkan Anda mengelola Layanan pencarian, tetapi tidak dapat mengaksesnya.
| Tindakan | Deskripsi |
|---|---|
| Microsoft.Authorization/*/baca | Membaca peran dan penetapan peran |
| Microsoft.Insights/alertRules/* | Membuat dan mengelola pemberitahuan metrik klasik |
| Microsoft.ResourceHealth/availabilityStatuses/baca | Mendapatkan status ketersediaan untuk semua sumber daya dalam lingkup yang ditentukan |
| Microsoft.Resources/penyebaran/* | Membuat dan mengelola penyebaran |
| Microsoft.Resources/langganan/resourceGroups/baca | Mendapatkan atau mencantumkan grup sumber daya. |
| Microsoft.Search/searchServices/* | Membuat dan mengelola layanan pencarian |
| Microsoft.Support/* | Membuat dan memperbarui tiket dukungan |
| NotActions | |
| Tidak ada | |
| DataActions | |
| Tidak ada | |
| NotDataActions | |
| Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Lets you manage Search services, but not access to them.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/7ca78c08-252a-4471-8644-bb5ff32d4ba0",
"name": "7ca78c08-252a-4471-8644-bb5ff32d4ba0",
"permissions": [
{
"actions": [
"Microsoft.Authorization/*/read",
"Microsoft.Insights/alertRules/*",
"Microsoft.ResourceHealth/availabilityStatuses/read",
"Microsoft.Resources/deployments/*",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.Search/searchServices/*",
"Microsoft.Support/*"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "Search Service Contributor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Langkah berikutnya
Saran dan Komentar
Segera hadir: Sepanjang tahun 2024 kami akan menghentikan penggunaan GitHub Issues sebagai mekanisme umpan balik untuk konten dan menggantinya dengan sistem umpan balik baru. Untuk mengetahui informasi selengkapnya, lihat: https://aka.ms/ContentUserFeedback.
Kirim dan lihat umpan balik untuk