Peran bawaan Azure untuk DevOps
Artikel ini mencantumkan peran bawaan Azure dalam kategori DevOps.
Pembaca Lingkungan Penyebaran
Menyediakan akses baca ke sumber daya lingkungan.
Tindakan | Deskripsi |
---|---|
Microsoft.DevCenter/projects/read | Mendapatkan proyek tertentu. |
Microsoft.DevCenter/projects/*/read | |
Microsoft.Authorization/*/baca | Membaca peran dan penetapan peran |
Microsoft.Resources/langganan/resourceGroups/baca | Mendapatkan atau mencantumkan grup sumber daya. |
NotActions | |
Microsoft.DevCenter/projects/pools/read | Mendapatkan kumpulan mesin |
Microsoft.DevCenter/projects/pools/schedules/read | Mendapatkan sumber daya jadwal. |
DataActions | |
Microsoft.DevCenter/projects/users/environments/adminRead/action | Memungkinkan administrator proyek membaca semua lingkungan dalam proyek. |
Microsoft.DevCenter/projects/users/environments/adminActionRead/action | Memungkinkan admin membaca tindakan lingkungan. |
Microsoft.DevCenter/projects/users/environments/adminOutputsRead/action | Memungkinkan admin membaca nilai Output dari penyebaran lingkungan. |
NotDataActions | |
Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Provides read access to environment resources.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/eb960402-bf75-4cc3-8d68-35b34f960f72",
"name": "eb960402-bf75-4cc3-8d68-35b34f960f72",
"permissions": [
{
"actions": [
"Microsoft.DevCenter/projects/read",
"Microsoft.DevCenter/projects/*/read",
"Microsoft.Authorization/*/read",
"Microsoft.Resources/subscriptions/resourceGroups/read"
],
"notActions": [
"Microsoft.DevCenter/projects/pools/read",
"Microsoft.DevCenter/projects/pools/schedules/read"
],
"dataActions": [
"Microsoft.DevCenter/projects/users/environments/adminRead/action",
"Microsoft.DevCenter/projects/users/environments/adminActionRead/action",
"Microsoft.DevCenter/projects/users/environments/adminOutputsRead/action"
],
"notDataActions": []
}
],
"roleName": "Deployment Environments Reader",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Pengguna Lingkungan Penyebaran
Menyediakan akses untuk mengelola sumber daya lingkungan.
Tindakan | Deskripsi |
---|---|
Microsoft.DevCenter/projects/read | Mendapatkan proyek tertentu. |
Microsoft.DevCenter/projects/*/read | |
Microsoft.Resources/langganan/resourceGroups/baca | Mendapatkan atau mencantumkan grup sumber daya. |
Microsoft.Authorization/*/baca | Membaca peran dan penetapan peran |
NotActions | |
Microsoft.DevCenter/projects/pools/read | Mendapatkan kumpulan mesin |
Microsoft.DevCenter/projects/pools/schedules/read | Mendapatkan sumber daya jadwal. |
DataActions | |
Microsoft.DevCenter/projects/users/environments/userRead/action | Memungkinkan pengguna membaca lingkungan yang dapat mereka akses dalam proyek. |
Microsoft.DevCenter/projects/users/environments/userWrite/action | Memungkinkan pengguna untuk menulis lingkungan yang dapat mereka akses dalam proyek. |
Microsoft.DevCenter/projects/users/environments/userDelete/action | Memungkinkan pengguna untuk menghapus lingkungan yang dapat mereka akses dalam proyek. |
Microsoft.DevCenter/projects/users/environments/userActionManage/action | Memungkinkan pengguna untuk melewati, menunda, dll. tindakan lingkungan. |
Microsoft.DevCenter/projects/users/environments/userOutputsRead/action | Memungkinkan pengguna membaca nilai Output dari penyebaran lingkungan. |
NotDataActions | |
Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Provides access to manage environment resources.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/18e40d4e-8d2e-438d-97e1-9528336e149c",
"name": "18e40d4e-8d2e-438d-97e1-9528336e149c",
"permissions": [
{
"actions": [
"Microsoft.DevCenter/projects/read",
"Microsoft.DevCenter/projects/*/read",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.Authorization/*/read"
],
"notActions": [
"Microsoft.DevCenter/projects/pools/read",
"Microsoft.DevCenter/projects/pools/schedules/read"
],
"dataActions": [
"Microsoft.DevCenter/projects/users/environments/userRead/action",
"Microsoft.DevCenter/projects/users/environments/userWrite/action",
"Microsoft.DevCenter/projects/users/environments/userDelete/action",
"Microsoft.DevCenter/projects/users/environments/userActionManage/action",
"Microsoft.DevCenter/projects/users/environments/userOutputsRead/action"
],
"notDataActions": []
}
],
"roleName": "Deployment Environments User",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Pengguna DevCenter Dev Box
Menyediakan akses untuk membuat dan mengelola dev box.
Tindakan | Deskripsi |
---|---|
Microsoft.DevCenter/projects/read | Mendapatkan proyek tertentu. |
Microsoft.DevCenter/projects/*/read | |
Microsoft.Authorization/*/baca | Membaca peran dan penetapan peran |
Microsoft.Resources/langganan/resourceGroups/baca | Mendapatkan atau mencantumkan grup sumber daya. |
NotActions | |
Tidak ada | |
DataActions | |
Microsoft.DevCenter/projects/users/devboxes/userStop/action | Memungkinkan pengguna untuk menghentikan sumber daya Dev Box mereka sendiri. |
Microsoft.DevCenter/projects/users/devboxes/userStart/action | Memungkinkan pengguna untuk memulai sumber daya Dev Box mereka sendiri. |
Microsoft.DevCenter/projects/users/devboxes/userGetRemoteConnection/action | Memungkinkan pengguna untuk mendapatkan informasi koneksi RDP untuk sumber daya Dev Box mereka sendiri. |
Microsoft.DevCenter/projects/users/devboxes/userRead/action | Memungkinkan pengguna membaca sumber daya Dev Box mereka sendiri. |
Microsoft.DevCenter/projects/users/devboxes/userWrite/action | Memungkinkan pengguna untuk membuat dan memperbarui sumber daya Dev Box mereka sendiri. |
Microsoft.DevCenter/projects/users/devboxes/userDelete/action | Memungkinkan pengguna untuk menghapus sumber daya Dev Box mereka sendiri. |
Microsoft.DevCenter/projects/users/devboxes/userUpcomingActionRead/action | Memungkinkan pengguna membaca tindakan yang akan datang. |
Microsoft.DevCenter/projects/users/devboxes/userUpcomingActionManage/action | Memungkinkan pengguna untuk melewati atau menunda tindakan yang akan datang. |
Microsoft.DevCenter/projects/users/devboxes/userActionRead/action | Memungkinkan pengguna membaca tindakan dev box. |
Microsoft.DevCenter/projects/users/devboxes/userActionManage/action | Memungkinkan pengguna untuk melewati atau menunda tindakan kotak dev. |
Microsoft.DevCenter/projects/users/devboxes/userCustomize/action | Memungkinkan pengguna untuk menyesuaikan sumber daya Dev Box mereka sendiri. |
NotDataActions | |
Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Provides access to create and manage dev boxes.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/45d50f46-0b78-4001-a660-4198cbe8cd05",
"name": "45d50f46-0b78-4001-a660-4198cbe8cd05",
"permissions": [
{
"actions": [
"Microsoft.DevCenter/projects/read",
"Microsoft.DevCenter/projects/*/read",
"Microsoft.Authorization/*/read",
"Microsoft.Resources/subscriptions/resourceGroups/read"
],
"notActions": [],
"dataActions": [
"Microsoft.DevCenter/projects/users/devboxes/userStop/action",
"Microsoft.DevCenter/projects/users/devboxes/userStart/action",
"Microsoft.DevCenter/projects/users/devboxes/userGetRemoteConnection/action",
"Microsoft.DevCenter/projects/users/devboxes/userRead/action",
"Microsoft.DevCenter/projects/users/devboxes/userWrite/action",
"Microsoft.DevCenter/projects/users/devboxes/userDelete/action",
"Microsoft.DevCenter/projects/users/devboxes/userUpcomingActionRead/action",
"Microsoft.DevCenter/projects/users/devboxes/userUpcomingActionManage/action",
"Microsoft.DevCenter/projects/users/devboxes/userActionRead/action",
"Microsoft.DevCenter/projects/users/devboxes/userActionManage/action",
"Microsoft.DevCenter/projects/users/devboxes/userCustomize/action"
],
"notDataActions": []
}
],
"roleName": "DevCenter Dev Box User",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Admin Proyek DevCenter
Menyediakan akses untuk mengelola sumber daya proyek.
Tindakan | Deskripsi |
---|---|
Microsoft.DevCenter/projects/* | |
Microsoft.Authorization/*/baca | Membaca peran dan penetapan peran |
Microsoft.Resources/penyebaran/* | Membuat dan mengelola penyebaran |
Microsoft.Resources/langganan/resourceGroups/baca | Mendapatkan atau mencantumkan grup sumber daya. |
NotActions | |
Microsoft.DevCenter/projects/write | Memperbarui sebagian proyek. |
Microsoft.DevCenter/projects/delete | Menghapus sumber daya proyek. |
DataActions | |
Microsoft.DevCenter/projects/users/devboxes/adminStart/action | Memungkinkan pengguna untuk memulai sumber daya Dev Box apa pun. |
Microsoft.DevCenter/projects/users/devboxes/adminStop/action | Memungkinkan pengguna untuk menghentikan sumber daya Dev Box apa pun. |
Microsoft.DevCenter/projects/users/devboxes/adminRead/action | Memungkinkan pengguna membaca akses ke sumber daya Dev Box apa pun. |
Microsoft.DevCenter/projects/users/devboxes/adminWrite/action | Memungkinkan pengguna menulis akses ke sumber daya Dev Box apa pun. |
Microsoft.DevCenter/projects/users/devboxes/adminDelete/action | Memungkinkan pengguna untuk menghapus sumber daya Dev Box apa pun. |
Microsoft.DevCenter/projects/users/devboxes/userStop/action | Memungkinkan pengguna untuk menghentikan sumber daya Dev Box mereka sendiri. |
Microsoft.DevCenter/projects/users/devboxes/userStart/action | Memungkinkan pengguna untuk memulai sumber daya Dev Box mereka sendiri. |
Microsoft.DevCenter/projects/users/devboxes/userGetRemoteConnection/action | Memungkinkan pengguna untuk mendapatkan informasi koneksi RDP untuk sumber daya Dev Box mereka sendiri. |
Microsoft.DevCenter/projects/users/devboxes/userRead/action | Memungkinkan pengguna membaca sumber daya Dev Box mereka sendiri. |
Microsoft.DevCenter/projects/users/devboxes/userWrite/action | Memungkinkan pengguna untuk membuat dan memperbarui sumber daya Dev Box mereka sendiri. |
Microsoft.DevCenter/projects/users/devboxes/userDelete/action | Memungkinkan pengguna untuk menghapus sumber daya Dev Box mereka sendiri. |
Microsoft.DevCenter/projects/users/devboxes/userActionRead/action | Memungkinkan pengguna membaca tindakan dev box. |
Microsoft.DevCenter/projects/users/devboxes/userActionManage/action | Memungkinkan pengguna untuk melewati atau menunda tindakan kotak dev. |
Microsoft.DevCenter/projects/users/devboxes/userCustomize/action | Memungkinkan pengguna untuk menyesuaikan sumber daya Dev Box mereka sendiri. |
Microsoft.DevCenter/projects/users/environments/adminRead/action | Memungkinkan administrator proyek membaca semua lingkungan dalam proyek. |
Microsoft.DevCenter/projects/users/environments/userWrite/action | Memungkinkan pengguna untuk menulis lingkungan yang dapat mereka akses dalam proyek. |
Microsoft.DevCenter/projects/users/environments/adminWrite/action | Memungkinkan administrator proyek untuk menulis semua lingkungan dalam proyek. |
Microsoft.DevCenter/projects/users/environments/userDelete/action | Memungkinkan pengguna untuk menghapus lingkungan yang dapat mereka akses dalam proyek. |
Microsoft.DevCenter/projects/users/environments/adminDelete/action | Memungkinkan administrator proyek menghapus semua lingkungan dalam proyek. |
Microsoft.DevCenter/projects/users/environments/adminAction/action | Memungkinkan administrator proyek untuk melakukan tindakan pada semua lingkungan dalam proyek. |
Microsoft.DevCenter/projects/users/environments/adminActionRead/action | Memungkinkan admin membaca tindakan lingkungan. |
Microsoft.DevCenter/projects/users/environments/adminActionManage/action | Memungkinkan admin untuk melewati, menunda, dll. tindakan lingkungan. |
Microsoft.DevCenter/projects/users/environments/adminOutputsRead/action | Memungkinkan admin membaca nilai Output dari penyebaran lingkungan. |
NotDataActions | |
Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Provides access to manage project resources.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/331c37c6-af14-46d9-b9f4-e1909e1b95a0",
"name": "331c37c6-af14-46d9-b9f4-e1909e1b95a0",
"permissions": [
{
"actions": [
"Microsoft.DevCenter/projects/*",
"Microsoft.Authorization/*/read",
"Microsoft.Resources/deployments/*",
"Microsoft.Resources/subscriptions/resourceGroups/read"
],
"notActions": [
"Microsoft.DevCenter/projects/write",
"Microsoft.DevCenter/projects/delete"
],
"dataActions": [
"Microsoft.DevCenter/projects/users/devboxes/adminStart/action",
"Microsoft.DevCenter/projects/users/devboxes/adminStop/action",
"Microsoft.DevCenter/projects/users/devboxes/adminRead/action",
"Microsoft.DevCenter/projects/users/devboxes/adminWrite/action",
"Microsoft.DevCenter/projects/users/devboxes/adminDelete/action",
"Microsoft.DevCenter/projects/users/devboxes/userStop/action",
"Microsoft.DevCenter/projects/users/devboxes/userStart/action",
"Microsoft.DevCenter/projects/users/devboxes/userGetRemoteConnection/action",
"Microsoft.DevCenter/projects/users/devboxes/userRead/action",
"Microsoft.DevCenter/projects/users/devboxes/userWrite/action",
"Microsoft.DevCenter/projects/users/devboxes/userDelete/action",
"Microsoft.DevCenter/projects/users/devboxes/userActionRead/action",
"Microsoft.DevCenter/projects/users/devboxes/userActionManage/action",
"Microsoft.DevCenter/projects/users/devboxes/userCustomize/action",
"Microsoft.DevCenter/projects/users/environments/adminRead/action",
"Microsoft.DevCenter/projects/users/environments/userWrite/action",
"Microsoft.DevCenter/projects/users/environments/adminWrite/action",
"Microsoft.DevCenter/projects/users/environments/userDelete/action",
"Microsoft.DevCenter/projects/users/environments/adminDelete/action",
"Microsoft.DevCenter/projects/users/environments/adminAction/action",
"Microsoft.DevCenter/projects/users/environments/adminActionRead/action",
"Microsoft.DevCenter/projects/users/environments/adminActionManage/action",
"Microsoft.DevCenter/projects/users/environments/adminOutputsRead/action"
],
"notDataActions": []
}
],
"roleName": "DevCenter Project Admin",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Pengguna DevTest Labs
Memungkinkan Anda menyambungkan, memulai, memulai ulang, dan mematikan virtual machines Anda di Azure DevTest Labs.
Tindakan | Deskripsi |
---|---|
Microsoft.Authorization/*/baca | Membaca peran dan penetapan peran |
Microsoft.Compute/availabilitySets/baca | Mendapatkan properti dari set ketersediaan |
Microsoft.Compute/virtualMachines/*/baca | Baca properti mesin virtual (ukuran VM, status runtime, ekstensi VM, dll.) |
Microsoft.Compute/virtualMachines/deallocate/tindakan | Mematikan komputer virtual dan merilis sumber daya komputasi |
Microsoft.Compute/virtualMachines/baca | Mendapatkan properti mesin virtual |
Microsoft.Compute/virtualMachines/restart/tindakan | Menghidupkan ulang komputer virtual |
Microsoft.Compute/virtualMachines/start/tindakan | Memulai mesin virtual |
Microsoft.DevTestLab/*/baca | Membaca properti laboratorium |
Microsoft.DevTestLab/labs/claimAnyVm/tindakan | Klaim komputer virtual acak yang dapat diklaim di lab. |
Microsoft.DevTestLab/labs/createEnvironment/tindakan | Buat mesin virtual di laboratorium. |
Microsoft.DevTestLab/labs/ensureCurrentUserProfile/tindakan | Pastikan pengguna saat ini memiliki profil yang valid di lab. |
Microsoft.DevTestLab/labs/formulas/hapus | Menghapus rumus. |
Microsoft.DevTestLab/labs/formulas/baca | Membaca rumus. |
Microsoft.DevTestLab/labs/formulas/tulis | Menambahkan atau mengubah rumus. |
Microsoft.DevTestLab/labs/policySets/evaluatePolicies/tindakan | Mengevaluasi kebijakan lab. |
Microsoft.DevTestLab/labs/virtualMachines/klaim/tindakan | Mengambil kepemilikan mesin virtual yang ada |
Microsoft.DevTestLab/labs/virtualmachines/listApplicableSchedules/tindakan | Mencantumkan jadwal mulai/berhenti yang berlaku, jika ada. |
Microsoft.DevTestLab/labs/virtualMachines/getRdpFileContents/tindakan | Mendapatkan string yang mewakili konten file RDP untuk komputer virtual |
Microsoft.Network/loadBalancers/backendAddressPools/gabung/tindakan | Menggabungkan kumpulan alamat ujung belakang penyeimbang muatan. Tidak bisa diperingatkan. |
Microsoft.Network/loadBalancers/inboundNatRules/gabung/tindakan | Bergabung dengan kumpulan NAT masuk penyeimbang muatan. Tidak bisa diperingatkan. |
Microsoft.Network/networkInterfaces/*/read | Baca properti antarmuka jaringan (misalnya, semua penyeimbang muatan yang merupakan bagian dari antarmuka jaringan) |
Microsoft.Network/networkInterfaces/gabung/tindakan | Melampirkan antarmuka jaringan ke komputer virtual. Tidak bisa diperingatkan. |
Microsoft.Network/networkInterfaces/baca | Mendapatkan definisi antarmuka jaringan. |
Microsoft.Network/networkInterfaces/tulis | Membuat antarmuka jaringan atau memperbarui antarmuka jaringan yang ada. |
Microsoft.Network/publicIPAddresses/*/baca | Membaca properti alamat IP publik |
Microsoft.Network/publicIPAddresses/gabung/tindakan | Menggabungkan alamat IP publik. Tidak bisa diperingatkan. |
Microsoft.Network/publicIPAddresses/baca | Mendapatkan definisi alamat IP publik. |
Microsoft.Network/virtualNetworks/subnets/gabung/tindakan | Bergabung dengan jaringan virtual. Tidak bisa diperingatkan. |
Microsoft.Resources/penyebaran/operasi/baca | Mendapatkan atau mencantumkan operasi penyebaran. |
Microsoft.Resources/penyebaran/baca | Mendapatkan atau mencantumkan penyebaran. |
Microsoft.Resources/langganan/resourceGroups/baca | Mendapatkan atau mencantumkan grup sumber daya. |
Microsoft.Storage/storageAccounts/listKeys/tindakan | Mengembalikan kunci akses untuk akun penyimpanan tertentu. |
NotActions | |
Microsoft.Compute/virtualMachines/vmSizes/baca | Daftar ukuran yang tersedia yang dapat digunakan untuk memperbarui mesin virtual |
DataActions | |
Tidak ada | |
NotDataActions | |
Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Lets you connect, start, restart, and shutdown your virtual machines in your Azure DevTest Labs.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/76283e04-6283-4c54-8f91-bcf1374a3c64",
"name": "76283e04-6283-4c54-8f91-bcf1374a3c64",
"permissions": [
{
"actions": [
"Microsoft.Authorization/*/read",
"Microsoft.Compute/availabilitySets/read",
"Microsoft.Compute/virtualMachines/*/read",
"Microsoft.Compute/virtualMachines/deallocate/action",
"Microsoft.Compute/virtualMachines/read",
"Microsoft.Compute/virtualMachines/restart/action",
"Microsoft.Compute/virtualMachines/start/action",
"Microsoft.DevTestLab/*/read",
"Microsoft.DevTestLab/labs/claimAnyVm/action",
"Microsoft.DevTestLab/labs/createEnvironment/action",
"Microsoft.DevTestLab/labs/ensureCurrentUserProfile/action",
"Microsoft.DevTestLab/labs/formulas/delete",
"Microsoft.DevTestLab/labs/formulas/read",
"Microsoft.DevTestLab/labs/formulas/write",
"Microsoft.DevTestLab/labs/policySets/evaluatePolicies/action",
"Microsoft.DevTestLab/labs/virtualMachines/claim/action",
"Microsoft.DevTestLab/labs/virtualmachines/listApplicableSchedules/action",
"Microsoft.DevTestLab/labs/virtualMachines/getRdpFileContents/action",
"Microsoft.Network/loadBalancers/backendAddressPools/join/action",
"Microsoft.Network/loadBalancers/inboundNatRules/join/action",
"Microsoft.Network/networkInterfaces/*/read",
"Microsoft.Network/networkInterfaces/join/action",
"Microsoft.Network/networkInterfaces/read",
"Microsoft.Network/networkInterfaces/write",
"Microsoft.Network/publicIPAddresses/*/read",
"Microsoft.Network/publicIPAddresses/join/action",
"Microsoft.Network/publicIPAddresses/read",
"Microsoft.Network/virtualNetworks/subnets/join/action",
"Microsoft.Resources/deployments/operations/read",
"Microsoft.Resources/deployments/read",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.Storage/storageAccounts/listKeys/action"
],
"notActions": [
"Microsoft.Compute/virtualMachines/vmSizes/read"
],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "DevTest Labs User",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Asisten Lab
Memungkinkan Anda melihat lab yang ada, melakukan tindakan pada VM lab dan mengirim undangan ke lab.
Tindakan | Deskripsi |
---|---|
Microsoft.Authorization/*/baca | Membaca peran dan penetapan peran |
Microsoft.Insights/alertRules/* | Membuat dan mengelola pemberitahuan metrik klasik |
Microsoft.LabServices/labPlans/images/read | Mendapatkan properti dari gambar. |
Microsoft.LabServices/labPlans/read | Mendapatkan properti dari paket lab. |
Microsoft.LabServices/labs/read | Mendapatkan properti lab. |
Microsoft.LabServices/labs/schedules/read | Mendapatkan properti dari jadwal. |
Microsoft.LabServices/labs/users/read | Mendapatkan properti pengguna. |
Microsoft.LabServices/labs/users/invite/action | Kirim undangan email ke pengguna untuk bergabung dengan lab. |
Microsoft.LabServices/labs/virtualMachines/read | Mendapatkan properti dari komputer virtual. |
Microsoft.LabServices/labs/virtualMachines/start/action | Mulai komputer virtual. |
Microsoft.LabServices/labs/virtualMachines/stop/action | Hentikan dan batalkan alokasi komputer virtual. |
Microsoft.LabServices/labs/virtualMachines/reimage/action | Reimage komputer virtual ke gambar terakhir yang diterbitkan. |
Microsoft.LabServices/labs/virtualMachines/redeploy/action | Sebarkan ulang komputer virtual ke node komputasi yang berbeda. |
Microsoft.LabServices/locations/usages/read | Mendapatkan Penggunaan di lokasi |
Microsoft.LabServices/skus/read | Mendapatkan properti SKU Layanan Lab. |
Microsoft.Resources/penyebaran/* | Membuat dan mengelola penyebaran |
Microsoft.Resources/langganan/resourceGroups/baca | Mendapatkan atau mencantumkan grup sumber daya. |
NotActions | |
Tidak ada | |
DataActions | |
Tidak ada | |
NotDataActions | |
Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "The lab assistant role",
"id": "/providers/Microsoft.Authorization/roleDefinitions/ce40b423-cede-4313-a93f-9b28290b72e1",
"name": "ce40b423-cede-4313-a93f-9b28290b72e1",
"permissions": [
{
"actions": [
"Microsoft.Authorization/*/read",
"Microsoft.Insights/alertRules/*",
"Microsoft.LabServices/labPlans/images/read",
"Microsoft.LabServices/labPlans/read",
"Microsoft.LabServices/labs/read",
"Microsoft.LabServices/labs/schedules/read",
"Microsoft.LabServices/labs/users/read",
"Microsoft.LabServices/labs/users/invite/action",
"Microsoft.LabServices/labs/virtualMachines/read",
"Microsoft.LabServices/labs/virtualMachines/start/action",
"Microsoft.LabServices/labs/virtualMachines/stop/action",
"Microsoft.LabServices/labs/virtualMachines/reimage/action",
"Microsoft.LabServices/labs/virtualMachines/redeploy/action",
"Microsoft.LabServices/locations/usages/read",
"Microsoft.LabServices/skus/read",
"Microsoft.Resources/deployments/*",
"Microsoft.Resources/subscriptions/resourceGroups/read"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "Lab Assistant",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Kontributor Lab
Diterapkan pada tingkat lab, memungkinkan Anda mengelola lab. Diterapkan di grup sumber daya, memungkinkan Anda membuat dan mengelola lab.
Tindakan | Deskripsi |
---|---|
Microsoft.Authorization/*/baca | Membaca peran dan penetapan peran |
Microsoft.Insights/alertRules/* | Membuat dan mengelola pemberitahuan metrik klasik |
Microsoft.LabServices/labPlans/images/read | Mendapatkan properti dari gambar. |
Microsoft.LabServices/labPlans/read | Mendapatkan properti dari paket lab. |
Microsoft.LabServices/labPlans/saveImage/action | Membuat gambar dari komputer virtual di galeri yang dilampirkan ke rencana lab. |
Microsoft.LabServices/labs/read | Mendapatkan properti lab. |
Microsoft.LabServices/labs/write | Membuat baru atau perbarui lab yang ada. |
Microsoft.LabServices/labs/delete | Menghapus lab dan semua penggunanya, jadwal, dan komputer virtualnya. |
Microsoft.LabServices/labs/publish/action | Publikasikan lab dengan menyebarkan gambar komputer virtual templat ke semua komputer virtual di lab. |
Microsoft.LabServices/labs/syncGroup/action | Memperbarui daftar pengguna dari grup Direktori Aktif yang ditetapkan ke lab. |
Microsoft.LabServices/labs/schedules/read | Mendapatkan properti dari jadwal. |
Microsoft.LabServices/labs/schedules/write | Membuat baru atau perbarui jadwal yang ada. |
Microsoft.LabServices/labs/schedules/delete | Menghapus jadwal. |
Microsoft.LabServices/labs/users/read | Mendapatkan properti pengguna. |
Microsoft.LabServices/labs/users/write | Membuat baru atau perbarui pengguna yang ada. |
Microsoft.LabServices/labs/users/delete | Menghapus pengguna. |
Microsoft.LabServices/labs/users/invite/action | Kirim undangan email ke pengguna untuk bergabung dengan lab. |
Microsoft.LabServices/labs/virtualMachines/read | Mendapatkan properti dari komputer virtual. |
Microsoft.LabServices/labs/virtualMachines/start/action | Mulai komputer virtual. |
Microsoft.LabServices/labs/virtualMachines/stop/action | Hentikan dan batalkan alokasi komputer virtual. |
Microsoft.LabServices/labs/virtualMachines/reimage/action | Reimage komputer virtual ke gambar terakhir yang diterbitkan. |
Microsoft.LabServices/labs/virtualMachines/redeploy/action | Sebarkan ulang komputer virtual ke node komputasi yang berbeda. |
Microsoft.LabServices/labs/virtualMachines/resetPassword/action | Atur ulang kata sandi pengguna lokal di komputer virtual. |
Microsoft.LabServices/locations/usages/read | Mendapatkan Penggunaan di lokasi |
Microsoft.LabServices/skus/read | Mendapatkan properti SKU Layanan Lab. |
Microsoft.Resources/penyebaran/* | Membuat dan mengelola penyebaran |
Microsoft.Resources/langganan/resourceGroups/baca | Mendapatkan atau mencantumkan grup sumber daya. |
NotActions | |
Tidak ada | |
DataActions | |
Microsoft.LabServices/labPlans/createLab/action | Membuat lab baru dari paket lab. |
NotDataActions | |
Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "The lab contributor role",
"id": "/providers/Microsoft.Authorization/roleDefinitions/5daaa2af-1fe8-407c-9122-bba179798270",
"name": "5daaa2af-1fe8-407c-9122-bba179798270",
"permissions": [
{
"actions": [
"Microsoft.Authorization/*/read",
"Microsoft.Insights/alertRules/*",
"Microsoft.LabServices/labPlans/images/read",
"Microsoft.LabServices/labPlans/read",
"Microsoft.LabServices/labPlans/saveImage/action",
"Microsoft.LabServices/labs/read",
"Microsoft.LabServices/labs/write",
"Microsoft.LabServices/labs/delete",
"Microsoft.LabServices/labs/publish/action",
"Microsoft.LabServices/labs/syncGroup/action",
"Microsoft.LabServices/labs/schedules/read",
"Microsoft.LabServices/labs/schedules/write",
"Microsoft.LabServices/labs/schedules/delete",
"Microsoft.LabServices/labs/users/read",
"Microsoft.LabServices/labs/users/write",
"Microsoft.LabServices/labs/users/delete",
"Microsoft.LabServices/labs/users/invite/action",
"Microsoft.LabServices/labs/virtualMachines/read",
"Microsoft.LabServices/labs/virtualMachines/start/action",
"Microsoft.LabServices/labs/virtualMachines/stop/action",
"Microsoft.LabServices/labs/virtualMachines/reimage/action",
"Microsoft.LabServices/labs/virtualMachines/redeploy/action",
"Microsoft.LabServices/labs/virtualMachines/resetPassword/action",
"Microsoft.LabServices/locations/usages/read",
"Microsoft.LabServices/skus/read",
"Microsoft.Resources/deployments/*",
"Microsoft.Resources/subscriptions/resourceGroups/read"
],
"notActions": [],
"dataActions": [
"Microsoft.LabServices/labPlans/createLab/action"
],
"notDataActions": []
}
],
"roleName": "Lab Contributor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Pembuat Lab
Memungkinkan Anda membuat lab baru di bawah Akun Azure Lab.
Tindakan | Deskripsi |
---|---|
Microsoft.Authorization/*/baca | Membaca peran dan penetapan peran |
Microsoft.LabServices/labAccounts/*/baca | |
Microsoft.LabServices/labAccounts/createLab/tindakan | Membuat jendela akun lab. |
Microsoft.LabServices/labAccounts/getPricingAndAvailability/tindakan | Dapatkan harga dan ketersediaan kombinasi ukuran, geografi, dan sistem operasi untuk akun lab. |
Microsoft.LabServices/labAccounts/getRestrictionsAndUsage/tindakan | Dapatkan pembatasan dan penggunaan inti untuk langganan ini |
Microsoft.Insights/alertRules/* | Membuat dan mengelola pemberitahuan metrik klasik |
Microsoft.LabServices/labPlans/images/read | Mendapatkan properti dari gambar. |
Microsoft.LabServices/labPlans/read | Mendapatkan properti dari paket lab. |
Microsoft.LabServices/labPlans/saveImage/action | Membuat gambar dari komputer virtual di galeri yang dilampirkan ke rencana lab. |
Microsoft.LabServices/labs/read | Mendapatkan properti lab. |
Microsoft.LabServices/labs/schedules/read | Mendapatkan properti dari jadwal. |
Microsoft.LabServices/labs/users/read | Mendapatkan properti pengguna. |
Microsoft.LabServices/labs/virtualMachines/read | Mendapatkan properti dari komputer virtual. |
Microsoft.LabServices/locations/usages/read | Mendapatkan Penggunaan di lokasi |
Microsoft.LabServices/skus/read | Mendapatkan properti SKU Layanan Lab. |
Microsoft.Resources/penyebaran/* | Membuat dan mengelola penyebaran |
Microsoft.Resources/langganan/resourceGroups/baca | Mendapatkan atau mencantumkan grup sumber daya. |
Microsoft.Support/* | Membuat dan memperbarui tiket dukungan |
NotActions | |
Tidak ada | |
DataActions | |
Microsoft.LabServices/labPlans/createLab/action | Membuat lab baru dari paket lab. |
NotDataActions | |
Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Lets you create new labs under your Azure Lab Accounts.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/b97fb8bc-a8b2-4522-a38b-dd33c7e65ead",
"name": "b97fb8bc-a8b2-4522-a38b-dd33c7e65ead",
"permissions": [
{
"actions": [
"Microsoft.Authorization/*/read",
"Microsoft.LabServices/labAccounts/*/read",
"Microsoft.LabServices/labAccounts/createLab/action",
"Microsoft.LabServices/labAccounts/getPricingAndAvailability/action",
"Microsoft.LabServices/labAccounts/getRestrictionsAndUsage/action",
"Microsoft.Insights/alertRules/*",
"Microsoft.LabServices/labPlans/images/read",
"Microsoft.LabServices/labPlans/read",
"Microsoft.LabServices/labPlans/saveImage/action",
"Microsoft.LabServices/labs/read",
"Microsoft.LabServices/labs/schedules/read",
"Microsoft.LabServices/labs/users/read",
"Microsoft.LabServices/labs/virtualMachines/read",
"Microsoft.LabServices/locations/usages/read",
"Microsoft.LabServices/skus/read",
"Microsoft.Resources/deployments/*",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.Support/*"
],
"notActions": [],
"dataActions": [
"Microsoft.LabServices/labPlans/createLab/action"
],
"notDataActions": []
}
],
"roleName": "Lab Creator",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Lab Operator
Memberi Anda kemampuan terbatas untuk mengelola lab yang ada.
Tindakan | Deskripsi |
---|---|
Microsoft.Authorization/*/baca | Membaca peran dan penetapan peran |
Microsoft.Insights/alertRules/* | Membuat dan mengelola pemberitahuan metrik klasik |
Microsoft.LabServices/labPlans/images/read | Mendapatkan properti dari gambar. |
Microsoft.LabServices/labPlans/read | Mendapatkan properti dari paket lab. |
Microsoft.LabServices/labPlans/saveImage/action | Membuat gambar dari komputer virtual di galeri yang dilampirkan ke rencana lab. |
Microsoft.LabServices/labs/publish/action | Publikasikan lab dengan menyebarkan gambar komputer virtual templat ke semua komputer virtual di lab. |
Microsoft.LabServices/labs/read | Mendapatkan properti lab. |
Microsoft.LabServices/labs/schedules/read | Mendapatkan properti dari jadwal. |
Microsoft.LabServices/labs/schedules/write | Membuat baru atau perbarui jadwal yang ada. |
Microsoft.LabServices/labs/schedules/delete | Menghapus jadwal. |
Microsoft.LabServices/labs/users/read | Mendapatkan properti pengguna. |
Microsoft.LabServices/labs/users/write | Membuat baru atau perbarui pengguna yang ada. |
Microsoft.LabServices/labs/users/delete | Menghapus pengguna. |
Microsoft.LabServices/labs/users/invite/action | Kirim undangan email ke pengguna untuk bergabung dengan lab. |
Microsoft.LabServices/labs/virtualMachines/read | Mendapatkan properti dari komputer virtual. |
Microsoft.LabServices/labs/virtualMachines/start/action | Mulai komputer virtual. |
Microsoft.LabServices/labs/virtualMachines/stop/action | Hentikan dan batalkan alokasi komputer virtual. |
Microsoft.LabServices/labs/virtualMachines/reimage/action | Reimage komputer virtual ke gambar terakhir yang diterbitkan. |
Microsoft.LabServices/labs/virtualMachines/redeploy/action | Sebarkan ulang komputer virtual ke node komputasi yang berbeda. |
Microsoft.LabServices/labs/virtualMachines/resetPassword/action | Atur ulang kata sandi pengguna lokal di komputer virtual. |
Microsoft.LabServices/locations/usages/read | Mendapatkan Penggunaan di lokasi |
Microsoft.LabServices/skus/read | Mendapatkan properti SKU Layanan Lab. |
Microsoft.Resources/penyebaran/* | Membuat dan mengelola penyebaran |
Microsoft.Resources/langganan/resourceGroups/baca | Mendapatkan atau mencantumkan grup sumber daya. |
NotActions | |
Tidak ada | |
DataActions | |
Tidak ada | |
NotDataActions | |
Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "The lab operator role",
"id": "/providers/Microsoft.Authorization/roleDefinitions/a36e6959-b6be-4b12-8e9f-ef4b474d304d",
"name": "a36e6959-b6be-4b12-8e9f-ef4b474d304d",
"permissions": [
{
"actions": [
"Microsoft.Authorization/*/read",
"Microsoft.Insights/alertRules/*",
"Microsoft.LabServices/labPlans/images/read",
"Microsoft.LabServices/labPlans/read",
"Microsoft.LabServices/labPlans/saveImage/action",
"Microsoft.LabServices/labs/publish/action",
"Microsoft.LabServices/labs/read",
"Microsoft.LabServices/labs/schedules/read",
"Microsoft.LabServices/labs/schedules/write",
"Microsoft.LabServices/labs/schedules/delete",
"Microsoft.LabServices/labs/users/read",
"Microsoft.LabServices/labs/users/write",
"Microsoft.LabServices/labs/users/delete",
"Microsoft.LabServices/labs/users/invite/action",
"Microsoft.LabServices/labs/virtualMachines/read",
"Microsoft.LabServices/labs/virtualMachines/start/action",
"Microsoft.LabServices/labs/virtualMachines/stop/action",
"Microsoft.LabServices/labs/virtualMachines/reimage/action",
"Microsoft.LabServices/labs/virtualMachines/redeploy/action",
"Microsoft.LabServices/labs/virtualMachines/resetPassword/action",
"Microsoft.LabServices/locations/usages/read",
"Microsoft.LabServices/skus/read",
"Microsoft.Resources/deployments/*",
"Microsoft.Resources/subscriptions/resourceGroups/read"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "Lab Operator",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Kontributor Layanan Lab
Memungkinkan Anda mengontrol sepenuhnya semua skenario Lab Services dalam grup sumber daya.
Tindakan | Deskripsi |
---|---|
Microsoft.LabServices/* | Membuat dan mengelola komponen layanan lab |
Microsoft.Insights/alertRules/* | Membuat dan mengelola pemberitahuan metrik klasik |
Microsoft.Authorization/*/baca | Membaca peran dan penetapan peran |
Microsoft.Resources/penyebaran/* | Membuat dan mengelola penyebaran |
Microsoft.Resources/langganan/resourceGroups/baca | Mendapatkan atau mencantumkan grup sumber daya. |
NotActions | |
Tidak ada | |
DataActions | |
Microsoft.LabServices/labPlans/createLab/action | Membuat lab baru dari paket lab. |
NotDataActions | |
Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "The lab services contributor role",
"id": "/providers/Microsoft.Authorization/roleDefinitions/f69b8690-cc87-41d6-b77a-a4bc3c0a966f",
"name": "f69b8690-cc87-41d6-b77a-a4bc3c0a966f",
"permissions": [
{
"actions": [
"Microsoft.LabServices/*",
"Microsoft.Insights/alertRules/*",
"Microsoft.Authorization/*/read",
"Microsoft.Resources/deployments/*",
"Microsoft.Resources/subscriptions/resourceGroups/read"
],
"notActions": [],
"dataActions": [
"Microsoft.LabServices/labPlans/createLab/action"
],
"notDataActions": []
}
],
"roleName": "Lab Services Contributor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Pembaca Layanan Lab
Memungkinkan Anda untuk melihat, tetapi tidak berubah, semua paket lab dan sumber daya lab.
Tindakan | Deskripsi |
---|---|
Microsoft.LabServices/*/read | Membaca properti layanan lab |
Microsoft.Authorization/*/baca | Membaca peran dan penetapan peran |
Microsoft.Resources/penyebaran/* | Membuat dan mengelola penyebaran |
Microsoft.Resources/langganan/resourceGroups/baca | Mendapatkan atau mencantumkan grup sumber daya. |
NotActions | |
Tidak ada | |
DataActions | |
Tidak ada | |
NotDataActions | |
Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "The lab services reader role",
"id": "/providers/Microsoft.Authorization/roleDefinitions/2a5c394f-5eb7-4d4f-9c8e-e8eae39faebc",
"name": "2a5c394f-5eb7-4d4f-9c8e-e8eae39faebc",
"permissions": [
{
"actions": [
"Microsoft.LabServices/*/read",
"Microsoft.Authorization/*/read",
"Microsoft.Resources/deployments/*",
"Microsoft.Resources/subscriptions/resourceGroups/read"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "Lab Services Reader",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Kontributor Uji Beban
Menampilkan, membuat, memperbarui, menghapus, dan menjalankan pengujian beban. Melihat dan mencantumkan sumber daya uji beban tetapi tidak dapat membuat perubahan apa pun.
Tindakan | Deskripsi |
---|---|
Microsoft.LoadTestService/*/read | Membaca sumber daya pengujian beban |
Microsoft.Authorization/*/baca | Membaca peran dan penetapan peran |
Microsoft.Resources/penyebaran/* | Membuat dan mengelola penyebaran |
Microsoft.Resources/langganan/resourceGroups/baca | Mendapatkan atau mencantumkan grup sumber daya. |
Microsoft.Insights/alertRules/* | Membuat dan mengelola pemberitahuan metrik klasik |
NotActions | |
Tidak ada | |
DataActions | |
Microsoft.LoadTestService/loadtests/* | Membuat dan mengelola pengujian beban |
Microsoft.LoadTestService/testProfiles/* | |
Microsoft.LoadTestService/testProfileRuns/* | |
NotDataActions | |
Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "View, create, update, delete and execute load tests. View and list load test resources but can not make any changes.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/749a398d-560b-491b-bb21-08924219302e",
"name": "749a398d-560b-491b-bb21-08924219302e",
"permissions": [
{
"actions": [
"Microsoft.LoadTestService/*/read",
"Microsoft.Authorization/*/read",
"Microsoft.Resources/deployments/*",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.Insights/alertRules/*"
],
"notActions": [],
"dataActions": [
"Microsoft.LoadTestService/loadtests/*",
"Microsoft.LoadTestService/testProfiles/*",
"Microsoft.LoadTestService/testProfileRuns/*"
],
"notDataActions": []
}
],
"roleName": "Load Test Contributor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Memuat Pemilik Uji
Jalankan semua operasi pada sumber daya uji beban dan uji beban
Tindakan | Deskripsi |
---|---|
Microsoft.LoadTestService/* | Membuat dan mengelola sumber daya pengujian beban |
Microsoft.Authorization/*/baca | Membaca peran dan penetapan peran |
Microsoft.Resources/penyebaran/* | Membuat dan mengelola penyebaran |
Microsoft.Resources/langganan/resourceGroups/baca | Mendapatkan atau mencantumkan grup sumber daya. |
Microsoft.Insights/alertRules/* | Membuat dan mengelola pemberitahuan metrik klasik |
NotActions | |
Tidak ada | |
DataActions | |
Microsoft.LoadTestService/* | Membuat dan mengelola sumber daya pengujian beban |
NotDataActions | |
Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "Execute all operations on load test resources and load tests",
"id": "/providers/Microsoft.Authorization/roleDefinitions/45bb0b16-2f0c-4e78-afaa-a07599b003f6",
"name": "45bb0b16-2f0c-4e78-afaa-a07599b003f6",
"permissions": [
{
"actions": [
"Microsoft.LoadTestService/*",
"Microsoft.Authorization/*/read",
"Microsoft.Resources/deployments/*",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.Insights/alertRules/*"
],
"notActions": [],
"dataActions": [
"Microsoft.LoadTestService/*"
],
"notDataActions": []
}
],
"roleName": "Load Test Owner",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Load Test Reader
Melihat dan mencantumkan semua pengujian beban dan memuat sumber daya pengujian tetapi tidak dapat membuat perubahan apa pun
Tindakan | Deskripsi |
---|---|
Microsoft.LoadTestService/*/read | Membaca sumber daya pengujian beban |
Microsoft.Authorization/*/baca | Membaca peran dan penetapan peran |
Microsoft.Resources/penyebaran/* | Membuat dan mengelola penyebaran |
Microsoft.Resources/langganan/resourceGroups/baca | Mendapatkan atau mencantumkan grup sumber daya. |
Microsoft.Insights/alertRules/* | Membuat dan mengelola pemberitahuan metrik klasik |
NotActions | |
Tidak ada | |
DataActions | |
Microsoft.LoadTestService/loadtests/readTest/action | Baca Uji Beban |
Microsoft.LoadTestService/testProfiles/read | Membaca Profil Pengujian |
Microsoft.LoadTestService/testProfileRuns/read | Membaca Uji Eksekusi Profil |
NotDataActions | |
Tidak ada |
{
"assignableScopes": [
"/"
],
"description": "View and list all load tests and load test resources but can not make any changes",
"id": "/providers/Microsoft.Authorization/roleDefinitions/3ae3fb29-0000-4ccd-bf80-542e7b26e081",
"name": "3ae3fb29-0000-4ccd-bf80-542e7b26e081",
"permissions": [
{
"actions": [
"Microsoft.LoadTestService/*/read",
"Microsoft.Authorization/*/read",
"Microsoft.Resources/deployments/*",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.Insights/alertRules/*"
],
"notActions": [],
"dataActions": [
"Microsoft.LoadTestService/loadtests/readTest/action",
"Microsoft.LoadTestService/testProfiles/read",
"Microsoft.LoadTestService/testProfileRuns/read"
],
"notDataActions": []
}
],
"roleName": "Load Test Reader",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}