Bagikan melalui


Peran bawaan Azure untuk DevOps

Artikel ini mencantumkan peran bawaan Azure dalam kategori DevOps.

Pembaca Lingkungan Penyebaran

Menyediakan akses baca ke sumber daya lingkungan.

Pelajari lebih lanjut

Tindakan Deskripsi
Microsoft.DevCenter/projects/read Mendapatkan proyek tertentu.
Microsoft.DevCenter/projects/*/read
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
NotActions
Microsoft.DevCenter/projects/pools/read Mendapatkan kumpulan mesin
Microsoft.DevCenter/projects/pools/schedules/read Mendapatkan sumber daya jadwal.
DataActions
Microsoft.DevCenter/projects/users/environments/adminRead/action Memungkinkan administrator proyek membaca semua lingkungan dalam proyek.
Microsoft.DevCenter/projects/users/environments/adminActionRead/action Memungkinkan admin membaca tindakan lingkungan.
Microsoft.DevCenter/projects/users/environments/adminOutputsRead/action Memungkinkan admin membaca nilai Output dari penyebaran lingkungan.
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Provides read access to environment resources.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/eb960402-bf75-4cc3-8d68-35b34f960f72",
  "name": "eb960402-bf75-4cc3-8d68-35b34f960f72",
  "permissions": [
    {
      "actions": [
        "Microsoft.DevCenter/projects/read",
        "Microsoft.DevCenter/projects/*/read",
        "Microsoft.Authorization/*/read",
        "Microsoft.Resources/subscriptions/resourceGroups/read"
      ],
      "notActions": [
        "Microsoft.DevCenter/projects/pools/read",
        "Microsoft.DevCenter/projects/pools/schedules/read"
      ],
      "dataActions": [
        "Microsoft.DevCenter/projects/users/environments/adminRead/action",
        "Microsoft.DevCenter/projects/users/environments/adminActionRead/action",
        "Microsoft.DevCenter/projects/users/environments/adminOutputsRead/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Deployment Environments Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pengguna Lingkungan Penyebaran

Menyediakan akses untuk mengelola sumber daya lingkungan.

Pelajari lebih lanjut

Tindakan Deskripsi
Microsoft.DevCenter/projects/read Mendapatkan proyek tertentu.
Microsoft.DevCenter/projects/*/read
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
NotActions
Microsoft.DevCenter/projects/pools/read Mendapatkan kumpulan mesin
Microsoft.DevCenter/projects/pools/schedules/read Mendapatkan sumber daya jadwal.
DataActions
Microsoft.DevCenter/projects/users/environments/userRead/action Memungkinkan pengguna membaca lingkungan yang dapat mereka akses dalam proyek.
Microsoft.DevCenter/projects/users/environments/userWrite/action Memungkinkan pengguna untuk menulis lingkungan yang dapat mereka akses dalam proyek.
Microsoft.DevCenter/projects/users/environments/userDelete/action Memungkinkan pengguna untuk menghapus lingkungan yang dapat mereka akses dalam proyek.
Microsoft.DevCenter/projects/users/environments/userActionManage/action Memungkinkan pengguna untuk melewati, menunda, dll. tindakan lingkungan.
Microsoft.DevCenter/projects/users/environments/userOutputsRead/action Memungkinkan pengguna membaca nilai Output dari penyebaran lingkungan.
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Provides access to manage environment resources.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/18e40d4e-8d2e-438d-97e1-9528336e149c",
  "name": "18e40d4e-8d2e-438d-97e1-9528336e149c",
  "permissions": [
    {
      "actions": [
        "Microsoft.DevCenter/projects/read",
        "Microsoft.DevCenter/projects/*/read",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Authorization/*/read"
      ],
      "notActions": [
        "Microsoft.DevCenter/projects/pools/read",
        "Microsoft.DevCenter/projects/pools/schedules/read"
      ],
      "dataActions": [
        "Microsoft.DevCenter/projects/users/environments/userRead/action",
        "Microsoft.DevCenter/projects/users/environments/userWrite/action",
        "Microsoft.DevCenter/projects/users/environments/userDelete/action",
        "Microsoft.DevCenter/projects/users/environments/userActionManage/action",
        "Microsoft.DevCenter/projects/users/environments/userOutputsRead/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Deployment Environments User",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pengguna DevCenter Dev Box

Menyediakan akses untuk membuat dan mengelola dev box.

Pelajari lebih lanjut

Tindakan Deskripsi
Microsoft.DevCenter/projects/read Mendapatkan proyek tertentu.
Microsoft.DevCenter/projects/*/read
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
NotActions
Tidak ada
DataActions
Microsoft.DevCenter/projects/users/devboxes/userStop/action Memungkinkan pengguna untuk menghentikan sumber daya Dev Box mereka sendiri.
Microsoft.DevCenter/projects/users/devboxes/userStart/action Memungkinkan pengguna untuk memulai sumber daya Dev Box mereka sendiri.
Microsoft.DevCenter/projects/users/devboxes/userGetRemoteConnection/action Memungkinkan pengguna untuk mendapatkan informasi koneksi RDP untuk sumber daya Dev Box mereka sendiri.
Microsoft.DevCenter/projects/users/devboxes/userRead/action Memungkinkan pengguna membaca sumber daya Dev Box mereka sendiri.
Microsoft.DevCenter/projects/users/devboxes/userWrite/action Memungkinkan pengguna untuk membuat dan memperbarui sumber daya Dev Box mereka sendiri.
Microsoft.DevCenter/projects/users/devboxes/userDelete/action Memungkinkan pengguna untuk menghapus sumber daya Dev Box mereka sendiri.
Microsoft.DevCenter/projects/users/devboxes/userUpcomingActionRead/action Memungkinkan pengguna membaca tindakan yang akan datang.
Microsoft.DevCenter/projects/users/devboxes/userUpcomingActionManage/action Memungkinkan pengguna untuk melewati atau menunda tindakan yang akan datang.
Microsoft.DevCenter/projects/users/devboxes/userActionRead/action Memungkinkan pengguna membaca tindakan dev box.
Microsoft.DevCenter/projects/users/devboxes/userActionManage/action Memungkinkan pengguna untuk melewati atau menunda tindakan kotak dev.
Microsoft.DevCenter/projects/users/devboxes/userCustomize/action Memungkinkan pengguna untuk menyesuaikan sumber daya Dev Box mereka sendiri.
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Provides access to create and manage dev boxes.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/45d50f46-0b78-4001-a660-4198cbe8cd05",
  "name": "45d50f46-0b78-4001-a660-4198cbe8cd05",
  "permissions": [
    {
      "actions": [
        "Microsoft.DevCenter/projects/read",
        "Microsoft.DevCenter/projects/*/read",
        "Microsoft.Authorization/*/read",
        "Microsoft.Resources/subscriptions/resourceGroups/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.DevCenter/projects/users/devboxes/userStop/action",
        "Microsoft.DevCenter/projects/users/devboxes/userStart/action",
        "Microsoft.DevCenter/projects/users/devboxes/userGetRemoteConnection/action",
        "Microsoft.DevCenter/projects/users/devboxes/userRead/action",
        "Microsoft.DevCenter/projects/users/devboxes/userWrite/action",
        "Microsoft.DevCenter/projects/users/devboxes/userDelete/action",
        "Microsoft.DevCenter/projects/users/devboxes/userUpcomingActionRead/action",
        "Microsoft.DevCenter/projects/users/devboxes/userUpcomingActionManage/action",
        "Microsoft.DevCenter/projects/users/devboxes/userActionRead/action",
        "Microsoft.DevCenter/projects/users/devboxes/userActionManage/action",
        "Microsoft.DevCenter/projects/users/devboxes/userCustomize/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "DevCenter Dev Box User",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Admin Proyek DevCenter

Menyediakan akses untuk mengelola sumber daya proyek.

Pelajari lebih lanjut

Tindakan Deskripsi
Microsoft.DevCenter/projects/*
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
Microsoft.Resources/penyebaran/* Membuat dan mengelola penyebaran
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
NotActions
Microsoft.DevCenter/projects/write Memperbarui sebagian proyek.
Microsoft.DevCenter/projects/delete Menghapus sumber daya proyek.
DataActions
Microsoft.DevCenter/projects/users/devboxes/adminStart/action Memungkinkan pengguna untuk memulai sumber daya Dev Box apa pun.
Microsoft.DevCenter/projects/users/devboxes/adminStop/action Memungkinkan pengguna untuk menghentikan sumber daya Dev Box apa pun.
Microsoft.DevCenter/projects/users/devboxes/adminRead/action Memungkinkan pengguna membaca akses ke sumber daya Dev Box apa pun.
Microsoft.DevCenter/projects/users/devboxes/adminWrite/action Memungkinkan pengguna menulis akses ke sumber daya Dev Box apa pun.
Microsoft.DevCenter/projects/users/devboxes/adminDelete/action Memungkinkan pengguna untuk menghapus sumber daya Dev Box apa pun.
Microsoft.DevCenter/projects/users/devboxes/userStop/action Memungkinkan pengguna untuk menghentikan sumber daya Dev Box mereka sendiri.
Microsoft.DevCenter/projects/users/devboxes/userStart/action Memungkinkan pengguna untuk memulai sumber daya Dev Box mereka sendiri.
Microsoft.DevCenter/projects/users/devboxes/userGetRemoteConnection/action Memungkinkan pengguna untuk mendapatkan informasi koneksi RDP untuk sumber daya Dev Box mereka sendiri.
Microsoft.DevCenter/projects/users/devboxes/userRead/action Memungkinkan pengguna membaca sumber daya Dev Box mereka sendiri.
Microsoft.DevCenter/projects/users/devboxes/userWrite/action Memungkinkan pengguna untuk membuat dan memperbarui sumber daya Dev Box mereka sendiri.
Microsoft.DevCenter/projects/users/devboxes/userDelete/action Memungkinkan pengguna untuk menghapus sumber daya Dev Box mereka sendiri.
Microsoft.DevCenter/projects/users/devboxes/userActionRead/action Memungkinkan pengguna membaca tindakan dev box.
Microsoft.DevCenter/projects/users/devboxes/userActionManage/action Memungkinkan pengguna untuk melewati atau menunda tindakan kotak dev.
Microsoft.DevCenter/projects/users/devboxes/userCustomize/action Memungkinkan pengguna untuk menyesuaikan sumber daya Dev Box mereka sendiri.
Microsoft.DevCenter/projects/users/environments/adminRead/action Memungkinkan administrator proyek membaca semua lingkungan dalam proyek.
Microsoft.DevCenter/projects/users/environments/userWrite/action Memungkinkan pengguna untuk menulis lingkungan yang dapat mereka akses dalam proyek.
Microsoft.DevCenter/projects/users/environments/adminWrite/action Memungkinkan administrator proyek untuk menulis semua lingkungan dalam proyek.
Microsoft.DevCenter/projects/users/environments/userDelete/action Memungkinkan pengguna untuk menghapus lingkungan yang dapat mereka akses dalam proyek.
Microsoft.DevCenter/projects/users/environments/adminDelete/action Memungkinkan administrator proyek menghapus semua lingkungan dalam proyek.
Microsoft.DevCenter/projects/users/environments/adminAction/action Memungkinkan administrator proyek untuk melakukan tindakan pada semua lingkungan dalam proyek.
Microsoft.DevCenter/projects/users/environments/adminActionRead/action Memungkinkan admin membaca tindakan lingkungan.
Microsoft.DevCenter/projects/users/environments/adminActionManage/action Memungkinkan admin untuk melewati, menunda, dll. tindakan lingkungan.
Microsoft.DevCenter/projects/users/environments/adminOutputsRead/action Memungkinkan admin membaca nilai Output dari penyebaran lingkungan.
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Provides access to manage project resources.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/331c37c6-af14-46d9-b9f4-e1909e1b95a0",
  "name": "331c37c6-af14-46d9-b9f4-e1909e1b95a0",
  "permissions": [
    {
      "actions": [
        "Microsoft.DevCenter/projects/*",
        "Microsoft.Authorization/*/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read"
      ],
      "notActions": [
        "Microsoft.DevCenter/projects/write",
        "Microsoft.DevCenter/projects/delete"
      ],
      "dataActions": [
        "Microsoft.DevCenter/projects/users/devboxes/adminStart/action",
        "Microsoft.DevCenter/projects/users/devboxes/adminStop/action",
        "Microsoft.DevCenter/projects/users/devboxes/adminRead/action",
        "Microsoft.DevCenter/projects/users/devboxes/adminWrite/action",
        "Microsoft.DevCenter/projects/users/devboxes/adminDelete/action",
        "Microsoft.DevCenter/projects/users/devboxes/userStop/action",
        "Microsoft.DevCenter/projects/users/devboxes/userStart/action",
        "Microsoft.DevCenter/projects/users/devboxes/userGetRemoteConnection/action",
        "Microsoft.DevCenter/projects/users/devboxes/userRead/action",
        "Microsoft.DevCenter/projects/users/devboxes/userWrite/action",
        "Microsoft.DevCenter/projects/users/devboxes/userDelete/action",
        "Microsoft.DevCenter/projects/users/devboxes/userActionRead/action",
        "Microsoft.DevCenter/projects/users/devboxes/userActionManage/action",
        "Microsoft.DevCenter/projects/users/devboxes/userCustomize/action",
        "Microsoft.DevCenter/projects/users/environments/adminRead/action",
        "Microsoft.DevCenter/projects/users/environments/userWrite/action",
        "Microsoft.DevCenter/projects/users/environments/adminWrite/action",
        "Microsoft.DevCenter/projects/users/environments/userDelete/action",
        "Microsoft.DevCenter/projects/users/environments/adminDelete/action",
        "Microsoft.DevCenter/projects/users/environments/adminAction/action",
        "Microsoft.DevCenter/projects/users/environments/adminActionRead/action",
        "Microsoft.DevCenter/projects/users/environments/adminActionManage/action",
        "Microsoft.DevCenter/projects/users/environments/adminOutputsRead/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "DevCenter Project Admin",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pengguna DevTest Labs

Memungkinkan Anda menyambungkan, memulai, memulai ulang, dan mematikan virtual machines Anda di Azure DevTest Labs.

Pelajari lebih lanjut

Tindakan Deskripsi
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
Microsoft.Compute/availabilitySets/baca Mendapatkan properti dari set ketersediaan
Microsoft.Compute/virtualMachines/*/baca Baca properti mesin virtual (ukuran VM, status runtime, ekstensi VM, dll.)
Microsoft.Compute/virtualMachines/deallocate/tindakan Mematikan komputer virtual dan merilis sumber daya komputasi
Microsoft.Compute/virtualMachines/baca Mendapatkan properti mesin virtual
Microsoft.Compute/virtualMachines/restart/tindakan Menghidupkan ulang komputer virtual
Microsoft.Compute/virtualMachines/start/tindakan Memulai mesin virtual
Microsoft.DevTestLab/*/baca Membaca properti laboratorium
Microsoft.DevTestLab/labs/claimAnyVm/tindakan Klaim komputer virtual acak yang dapat diklaim di lab.
Microsoft.DevTestLab/labs/createEnvironment/tindakan Buat mesin virtual di laboratorium.
Microsoft.DevTestLab/labs/ensureCurrentUserProfile/tindakan Pastikan pengguna saat ini memiliki profil yang valid di lab.
Microsoft.DevTestLab/labs/formulas/hapus Menghapus rumus.
Microsoft.DevTestLab/labs/formulas/baca Membaca rumus.
Microsoft.DevTestLab/labs/formulas/tulis Menambahkan atau mengubah rumus.
Microsoft.DevTestLab/labs/policySets/evaluatePolicies/tindakan Mengevaluasi kebijakan lab.
Microsoft.DevTestLab/labs/virtualMachines/klaim/tindakan Mengambil kepemilikan mesin virtual yang ada
Microsoft.DevTestLab/labs/virtualmachines/listApplicableSchedules/tindakan Mencantumkan jadwal mulai/berhenti yang berlaku, jika ada.
Microsoft.DevTestLab/labs/virtualMachines/getRdpFileContents/tindakan Mendapatkan string yang mewakili konten file RDP untuk komputer virtual
Microsoft.Network/loadBalancers/backendAddressPools/gabung/tindakan Menggabungkan kumpulan alamat ujung belakang penyeimbang muatan. Tidak bisa diperingatkan.
Microsoft.Network/loadBalancers/inboundNatRules/gabung/tindakan Bergabung dengan kumpulan NAT masuk penyeimbang muatan. Tidak bisa diperingatkan.
Microsoft.Network/networkInterfaces/*/read Baca properti antarmuka jaringan (misalnya, semua penyeimbang muatan yang merupakan bagian dari antarmuka jaringan)
Microsoft.Network/networkInterfaces/gabung/tindakan Melampirkan antarmuka jaringan ke komputer virtual. Tidak bisa diperingatkan.
Microsoft.Network/networkInterfaces/baca Mendapatkan definisi antarmuka jaringan.
Microsoft.Network/networkInterfaces/tulis Membuat antarmuka jaringan atau memperbarui antarmuka jaringan yang ada.
Microsoft.Network/publicIPAddresses/*/baca Membaca properti alamat IP publik
Microsoft.Network/publicIPAddresses/gabung/tindakan Menggabungkan alamat IP publik. Tidak bisa diperingatkan.
Microsoft.Network/publicIPAddresses/baca Mendapatkan definisi alamat IP publik.
Microsoft.Network/virtualNetworks/subnets/gabung/tindakan Bergabung dengan jaringan virtual. Tidak bisa diperingatkan.
Microsoft.Resources/penyebaran/operasi/baca Mendapatkan atau mencantumkan operasi penyebaran.
Microsoft.Resources/penyebaran/baca Mendapatkan atau mencantumkan penyebaran.
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
Microsoft.Storage/storageAccounts/listKeys/tindakan Mengembalikan kunci akses untuk akun penyimpanan tertentu.
NotActions
Microsoft.Compute/virtualMachines/vmSizes/baca Daftar ukuran yang tersedia yang dapat digunakan untuk memperbarui mesin virtual
DataActions
Tidak ada
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you connect, start, restart, and shutdown your virtual machines in your Azure DevTest Labs.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/76283e04-6283-4c54-8f91-bcf1374a3c64",
  "name": "76283e04-6283-4c54-8f91-bcf1374a3c64",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Compute/availabilitySets/read",
        "Microsoft.Compute/virtualMachines/*/read",
        "Microsoft.Compute/virtualMachines/deallocate/action",
        "Microsoft.Compute/virtualMachines/read",
        "Microsoft.Compute/virtualMachines/restart/action",
        "Microsoft.Compute/virtualMachines/start/action",
        "Microsoft.DevTestLab/*/read",
        "Microsoft.DevTestLab/labs/claimAnyVm/action",
        "Microsoft.DevTestLab/labs/createEnvironment/action",
        "Microsoft.DevTestLab/labs/ensureCurrentUserProfile/action",
        "Microsoft.DevTestLab/labs/formulas/delete",
        "Microsoft.DevTestLab/labs/formulas/read",
        "Microsoft.DevTestLab/labs/formulas/write",
        "Microsoft.DevTestLab/labs/policySets/evaluatePolicies/action",
        "Microsoft.DevTestLab/labs/virtualMachines/claim/action",
        "Microsoft.DevTestLab/labs/virtualmachines/listApplicableSchedules/action",
        "Microsoft.DevTestLab/labs/virtualMachines/getRdpFileContents/action",
        "Microsoft.Network/loadBalancers/backendAddressPools/join/action",
        "Microsoft.Network/loadBalancers/inboundNatRules/join/action",
        "Microsoft.Network/networkInterfaces/*/read",
        "Microsoft.Network/networkInterfaces/join/action",
        "Microsoft.Network/networkInterfaces/read",
        "Microsoft.Network/networkInterfaces/write",
        "Microsoft.Network/publicIPAddresses/*/read",
        "Microsoft.Network/publicIPAddresses/join/action",
        "Microsoft.Network/publicIPAddresses/read",
        "Microsoft.Network/virtualNetworks/subnets/join/action",
        "Microsoft.Resources/deployments/operations/read",
        "Microsoft.Resources/deployments/read",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Storage/storageAccounts/listKeys/action"
      ],
      "notActions": [
        "Microsoft.Compute/virtualMachines/vmSizes/read"
      ],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "DevTest Labs User",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Asisten Lab

Memungkinkan Anda melihat lab yang ada, melakukan tindakan pada VM lab dan mengirim undangan ke lab.

Pelajari lebih lanjut

Tindakan Deskripsi
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
Microsoft.Insights/alertRules/* Membuat dan mengelola pemberitahuan metrik klasik
Microsoft.LabServices/labPlans/images/read Mendapatkan properti dari gambar.
Microsoft.LabServices/labPlans/read Mendapatkan properti dari paket lab.
Microsoft.LabServices/labs/read Mendapatkan properti lab.
Microsoft.LabServices/labs/schedules/read Mendapatkan properti dari jadwal.
Microsoft.LabServices/labs/users/read Mendapatkan properti pengguna.
Microsoft.LabServices/labs/users/invite/action Kirim undangan email ke pengguna untuk bergabung dengan lab.
Microsoft.LabServices/labs/virtualMachines/read Mendapatkan properti dari komputer virtual.
Microsoft.LabServices/labs/virtualMachines/start/action Mulai komputer virtual.
Microsoft.LabServices/labs/virtualMachines/stop/action Hentikan dan batalkan alokasi komputer virtual.
Microsoft.LabServices/labs/virtualMachines/reimage/action Reimage komputer virtual ke gambar terakhir yang diterbitkan.
Microsoft.LabServices/labs/virtualMachines/redeploy/action Sebarkan ulang komputer virtual ke node komputasi yang berbeda.
Microsoft.LabServices/locations/usages/read Mendapatkan Penggunaan di lokasi
Microsoft.LabServices/skus/read Mendapatkan properti SKU Layanan Lab.
Microsoft.Resources/penyebaran/* Membuat dan mengelola penyebaran
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "The lab assistant role",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/ce40b423-cede-4313-a93f-9b28290b72e1",
  "name": "ce40b423-cede-4313-a93f-9b28290b72e1",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.LabServices/labPlans/images/read",
        "Microsoft.LabServices/labPlans/read",
        "Microsoft.LabServices/labs/read",
        "Microsoft.LabServices/labs/schedules/read",
        "Microsoft.LabServices/labs/users/read",
        "Microsoft.LabServices/labs/users/invite/action",
        "Microsoft.LabServices/labs/virtualMachines/read",
        "Microsoft.LabServices/labs/virtualMachines/start/action",
        "Microsoft.LabServices/labs/virtualMachines/stop/action",
        "Microsoft.LabServices/labs/virtualMachines/reimage/action",
        "Microsoft.LabServices/labs/virtualMachines/redeploy/action",
        "Microsoft.LabServices/locations/usages/read",
        "Microsoft.LabServices/skus/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Lab Assistant",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Kontributor Lab

Diterapkan pada tingkat lab, memungkinkan Anda mengelola lab. Diterapkan di grup sumber daya, memungkinkan Anda membuat dan mengelola lab.

Pelajari lebih lanjut

Tindakan Deskripsi
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
Microsoft.Insights/alertRules/* Membuat dan mengelola pemberitahuan metrik klasik
Microsoft.LabServices/labPlans/images/read Mendapatkan properti dari gambar.
Microsoft.LabServices/labPlans/read Mendapatkan properti dari paket lab.
Microsoft.LabServices/labPlans/saveImage/action Membuat gambar dari komputer virtual di galeri yang dilampirkan ke rencana lab.
Microsoft.LabServices/labs/read Mendapatkan properti lab.
Microsoft.LabServices/labs/write Membuat baru atau perbarui lab yang ada.
Microsoft.LabServices/labs/delete Menghapus lab dan semua penggunanya, jadwal, dan komputer virtualnya.
Microsoft.LabServices/labs/publish/action Publikasikan lab dengan menyebarkan gambar komputer virtual templat ke semua komputer virtual di lab.
Microsoft.LabServices/labs/syncGroup/action Memperbarui daftar pengguna dari grup Direktori Aktif yang ditetapkan ke lab.
Microsoft.LabServices/labs/schedules/read Mendapatkan properti dari jadwal.
Microsoft.LabServices/labs/schedules/write Membuat baru atau perbarui jadwal yang ada.
Microsoft.LabServices/labs/schedules/delete Menghapus jadwal.
Microsoft.LabServices/labs/users/read Mendapatkan properti pengguna.
Microsoft.LabServices/labs/users/write Membuat baru atau perbarui pengguna yang ada.
Microsoft.LabServices/labs/users/delete Menghapus pengguna.
Microsoft.LabServices/labs/users/invite/action Kirim undangan email ke pengguna untuk bergabung dengan lab.
Microsoft.LabServices/labs/virtualMachines/read Mendapatkan properti dari komputer virtual.
Microsoft.LabServices/labs/virtualMachines/start/action Mulai komputer virtual.
Microsoft.LabServices/labs/virtualMachines/stop/action Hentikan dan batalkan alokasi komputer virtual.
Microsoft.LabServices/labs/virtualMachines/reimage/action Reimage komputer virtual ke gambar terakhir yang diterbitkan.
Microsoft.LabServices/labs/virtualMachines/redeploy/action Sebarkan ulang komputer virtual ke node komputasi yang berbeda.
Microsoft.LabServices/labs/virtualMachines/resetPassword/action Atur ulang kata sandi pengguna lokal di komputer virtual.
Microsoft.LabServices/locations/usages/read Mendapatkan Penggunaan di lokasi
Microsoft.LabServices/skus/read Mendapatkan properti SKU Layanan Lab.
Microsoft.Resources/penyebaran/* Membuat dan mengelola penyebaran
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
NotActions
Tidak ada
DataActions
Microsoft.LabServices/labPlans/createLab/action Membuat lab baru dari paket lab.
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "The lab contributor role",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/5daaa2af-1fe8-407c-9122-bba179798270",
  "name": "5daaa2af-1fe8-407c-9122-bba179798270",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.LabServices/labPlans/images/read",
        "Microsoft.LabServices/labPlans/read",
        "Microsoft.LabServices/labPlans/saveImage/action",
        "Microsoft.LabServices/labs/read",
        "Microsoft.LabServices/labs/write",
        "Microsoft.LabServices/labs/delete",
        "Microsoft.LabServices/labs/publish/action",
        "Microsoft.LabServices/labs/syncGroup/action",
        "Microsoft.LabServices/labs/schedules/read",
        "Microsoft.LabServices/labs/schedules/write",
        "Microsoft.LabServices/labs/schedules/delete",
        "Microsoft.LabServices/labs/users/read",
        "Microsoft.LabServices/labs/users/write",
        "Microsoft.LabServices/labs/users/delete",
        "Microsoft.LabServices/labs/users/invite/action",
        "Microsoft.LabServices/labs/virtualMachines/read",
        "Microsoft.LabServices/labs/virtualMachines/start/action",
        "Microsoft.LabServices/labs/virtualMachines/stop/action",
        "Microsoft.LabServices/labs/virtualMachines/reimage/action",
        "Microsoft.LabServices/labs/virtualMachines/redeploy/action",
        "Microsoft.LabServices/labs/virtualMachines/resetPassword/action",
        "Microsoft.LabServices/locations/usages/read",
        "Microsoft.LabServices/skus/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.LabServices/labPlans/createLab/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Lab Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pembuat Lab

Memungkinkan Anda membuat lab baru di bawah Akun Azure Lab.

Pelajari lebih lanjut

Tindakan Deskripsi
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
Microsoft.LabServices/labAccounts/*/baca
Microsoft.LabServices/labAccounts/createLab/tindakan Membuat jendela akun lab.
Microsoft.LabServices/labAccounts/getPricingAndAvailability/tindakan Dapatkan harga dan ketersediaan kombinasi ukuran, geografi, dan sistem operasi untuk akun lab.
Microsoft.LabServices/labAccounts/getRestrictionsAndUsage/tindakan Dapatkan pembatasan dan penggunaan inti untuk langganan ini
Microsoft.Insights/alertRules/* Membuat dan mengelola pemberitahuan metrik klasik
Microsoft.LabServices/labPlans/images/read Mendapatkan properti dari gambar.
Microsoft.LabServices/labPlans/read Mendapatkan properti dari paket lab.
Microsoft.LabServices/labPlans/saveImage/action Membuat gambar dari komputer virtual di galeri yang dilampirkan ke rencana lab.
Microsoft.LabServices/labs/read Mendapatkan properti lab.
Microsoft.LabServices/labs/schedules/read Mendapatkan properti dari jadwal.
Microsoft.LabServices/labs/users/read Mendapatkan properti pengguna.
Microsoft.LabServices/labs/virtualMachines/read Mendapatkan properti dari komputer virtual.
Microsoft.LabServices/locations/usages/read Mendapatkan Penggunaan di lokasi
Microsoft.LabServices/skus/read Mendapatkan properti SKU Layanan Lab.
Microsoft.Resources/penyebaran/* Membuat dan mengelola penyebaran
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
Microsoft.Support/* Membuat dan memperbarui tiket dukungan
NotActions
Tidak ada
DataActions
Microsoft.LabServices/labPlans/createLab/action Membuat lab baru dari paket lab.
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you create new labs under your Azure Lab Accounts.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/b97fb8bc-a8b2-4522-a38b-dd33c7e65ead",
  "name": "b97fb8bc-a8b2-4522-a38b-dd33c7e65ead",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.LabServices/labAccounts/*/read",
        "Microsoft.LabServices/labAccounts/createLab/action",
        "Microsoft.LabServices/labAccounts/getPricingAndAvailability/action",
        "Microsoft.LabServices/labAccounts/getRestrictionsAndUsage/action",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.LabServices/labPlans/images/read",
        "Microsoft.LabServices/labPlans/read",
        "Microsoft.LabServices/labPlans/saveImage/action",
        "Microsoft.LabServices/labs/read",
        "Microsoft.LabServices/labs/schedules/read",
        "Microsoft.LabServices/labs/users/read",
        "Microsoft.LabServices/labs/virtualMachines/read",
        "Microsoft.LabServices/locations/usages/read",
        "Microsoft.LabServices/skus/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Support/*"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.LabServices/labPlans/createLab/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Lab Creator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Lab Operator

Memberi Anda kemampuan terbatas untuk mengelola lab yang ada.

Pelajari lebih lanjut

Tindakan Deskripsi
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
Microsoft.Insights/alertRules/* Membuat dan mengelola pemberitahuan metrik klasik
Microsoft.LabServices/labPlans/images/read Mendapatkan properti dari gambar.
Microsoft.LabServices/labPlans/read Mendapatkan properti dari paket lab.
Microsoft.LabServices/labPlans/saveImage/action Membuat gambar dari komputer virtual di galeri yang dilampirkan ke rencana lab.
Microsoft.LabServices/labs/publish/action Publikasikan lab dengan menyebarkan gambar komputer virtual templat ke semua komputer virtual di lab.
Microsoft.LabServices/labs/read Mendapatkan properti lab.
Microsoft.LabServices/labs/schedules/read Mendapatkan properti dari jadwal.
Microsoft.LabServices/labs/schedules/write Membuat baru atau perbarui jadwal yang ada.
Microsoft.LabServices/labs/schedules/delete Menghapus jadwal.
Microsoft.LabServices/labs/users/read Mendapatkan properti pengguna.
Microsoft.LabServices/labs/users/write Membuat baru atau perbarui pengguna yang ada.
Microsoft.LabServices/labs/users/delete Menghapus pengguna.
Microsoft.LabServices/labs/users/invite/action Kirim undangan email ke pengguna untuk bergabung dengan lab.
Microsoft.LabServices/labs/virtualMachines/read Mendapatkan properti dari komputer virtual.
Microsoft.LabServices/labs/virtualMachines/start/action Mulai komputer virtual.
Microsoft.LabServices/labs/virtualMachines/stop/action Hentikan dan batalkan alokasi komputer virtual.
Microsoft.LabServices/labs/virtualMachines/reimage/action Reimage komputer virtual ke gambar terakhir yang diterbitkan.
Microsoft.LabServices/labs/virtualMachines/redeploy/action Sebarkan ulang komputer virtual ke node komputasi yang berbeda.
Microsoft.LabServices/labs/virtualMachines/resetPassword/action Atur ulang kata sandi pengguna lokal di komputer virtual.
Microsoft.LabServices/locations/usages/read Mendapatkan Penggunaan di lokasi
Microsoft.LabServices/skus/read Mendapatkan properti SKU Layanan Lab.
Microsoft.Resources/penyebaran/* Membuat dan mengelola penyebaran
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "The lab operator role",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/a36e6959-b6be-4b12-8e9f-ef4b474d304d",
  "name": "a36e6959-b6be-4b12-8e9f-ef4b474d304d",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.LabServices/labPlans/images/read",
        "Microsoft.LabServices/labPlans/read",
        "Microsoft.LabServices/labPlans/saveImage/action",
        "Microsoft.LabServices/labs/publish/action",
        "Microsoft.LabServices/labs/read",
        "Microsoft.LabServices/labs/schedules/read",
        "Microsoft.LabServices/labs/schedules/write",
        "Microsoft.LabServices/labs/schedules/delete",
        "Microsoft.LabServices/labs/users/read",
        "Microsoft.LabServices/labs/users/write",
        "Microsoft.LabServices/labs/users/delete",
        "Microsoft.LabServices/labs/users/invite/action",
        "Microsoft.LabServices/labs/virtualMachines/read",
        "Microsoft.LabServices/labs/virtualMachines/start/action",
        "Microsoft.LabServices/labs/virtualMachines/stop/action",
        "Microsoft.LabServices/labs/virtualMachines/reimage/action",
        "Microsoft.LabServices/labs/virtualMachines/redeploy/action",
        "Microsoft.LabServices/labs/virtualMachines/resetPassword/action",
        "Microsoft.LabServices/locations/usages/read",
        "Microsoft.LabServices/skus/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Lab Operator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Kontributor Layanan Lab

Memungkinkan Anda mengontrol sepenuhnya semua skenario Lab Services dalam grup sumber daya.

Pelajari lebih lanjut

Tindakan Deskripsi
Microsoft.LabServices/* Membuat dan mengelola komponen layanan lab
Microsoft.Insights/alertRules/* Membuat dan mengelola pemberitahuan metrik klasik
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
Microsoft.Resources/penyebaran/* Membuat dan mengelola penyebaran
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
NotActions
Tidak ada
DataActions
Microsoft.LabServices/labPlans/createLab/action Membuat lab baru dari paket lab.
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "The lab services contributor role",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/f69b8690-cc87-41d6-b77a-a4bc3c0a966f",
  "name": "f69b8690-cc87-41d6-b77a-a4bc3c0a966f",
  "permissions": [
    {
      "actions": [
        "Microsoft.LabServices/*",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.Authorization/*/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.LabServices/labPlans/createLab/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Lab Services Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pembaca Layanan Lab

Memungkinkan Anda untuk melihat, tetapi tidak berubah, semua paket lab dan sumber daya lab.

Pelajari lebih lanjut

Tindakan Deskripsi
Microsoft.LabServices/*/read Membaca properti layanan lab
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
Microsoft.Resources/penyebaran/* Membuat dan mengelola penyebaran
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "The lab services reader role",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/2a5c394f-5eb7-4d4f-9c8e-e8eae39faebc",
  "name": "2a5c394f-5eb7-4d4f-9c8e-e8eae39faebc",
  "permissions": [
    {
      "actions": [
        "Microsoft.LabServices/*/read",
        "Microsoft.Authorization/*/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Lab Services Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Kontributor Uji Beban

Menampilkan, membuat, memperbarui, menghapus, dan menjalankan pengujian beban. Melihat dan mencantumkan sumber daya uji beban tetapi tidak dapat membuat perubahan apa pun.

Pelajari lebih lanjut

Tindakan Deskripsi
Microsoft.LoadTestService/*/read Membaca sumber daya pengujian beban
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
Microsoft.Resources/penyebaran/* Membuat dan mengelola penyebaran
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
Microsoft.Insights/alertRules/* Membuat dan mengelola pemberitahuan metrik klasik
NotActions
Tidak ada
DataActions
Microsoft.LoadTestService/loadtests/* Membuat dan mengelola pengujian beban
Microsoft.LoadTestService/testProfiles/*
Microsoft.LoadTestService/testProfileRuns/*
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "View, create, update, delete and execute load tests. View and list load test resources but can not make any changes.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/749a398d-560b-491b-bb21-08924219302e",
  "name": "749a398d-560b-491b-bb21-08924219302e",
  "permissions": [
    {
      "actions": [
        "Microsoft.LoadTestService/*/read",
        "Microsoft.Authorization/*/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Insights/alertRules/*"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.LoadTestService/loadtests/*",
        "Microsoft.LoadTestService/testProfiles/*",
        "Microsoft.LoadTestService/testProfileRuns/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Load Test Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Memuat Pemilik Uji

Jalankan semua operasi pada sumber daya uji beban dan uji beban

Pelajari lebih lanjut

Tindakan Deskripsi
Microsoft.LoadTestService/* Membuat dan mengelola sumber daya pengujian beban
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
Microsoft.Resources/penyebaran/* Membuat dan mengelola penyebaran
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
Microsoft.Insights/alertRules/* Membuat dan mengelola pemberitahuan metrik klasik
NotActions
Tidak ada
DataActions
Microsoft.LoadTestService/* Membuat dan mengelola sumber daya pengujian beban
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Execute all operations on load test resources and load tests",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/45bb0b16-2f0c-4e78-afaa-a07599b003f6",
  "name": "45bb0b16-2f0c-4e78-afaa-a07599b003f6",
  "permissions": [
    {
      "actions": [
        "Microsoft.LoadTestService/*",
        "Microsoft.Authorization/*/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Insights/alertRules/*"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.LoadTestService/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Load Test Owner",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Load Test Reader

Melihat dan mencantumkan semua pengujian beban dan memuat sumber daya pengujian tetapi tidak dapat membuat perubahan apa pun

Pelajari lebih lanjut

Tindakan Deskripsi
Microsoft.LoadTestService/*/read Membaca sumber daya pengujian beban
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
Microsoft.Resources/penyebaran/* Membuat dan mengelola penyebaran
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
Microsoft.Insights/alertRules/* Membuat dan mengelola pemberitahuan metrik klasik
NotActions
Tidak ada
DataActions
Microsoft.LoadTestService/loadtests/readTest/action Baca Uji Beban
Microsoft.LoadTestService/testProfiles/read Membaca Profil Pengujian
Microsoft.LoadTestService/testProfileRuns/read Membaca Uji Eksekusi Profil
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "View and list all load tests and load test resources but can not make any changes",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/3ae3fb29-0000-4ccd-bf80-542e7b26e081",
  "name": "3ae3fb29-0000-4ccd-bf80-542e7b26e081",
  "permissions": [
    {
      "actions": [
        "Microsoft.LoadTestService/*/read",
        "Microsoft.Authorization/*/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Insights/alertRules/*"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.LoadTestService/loadtests/readTest/action",
        "Microsoft.LoadTestService/testProfiles/read",
        "Microsoft.LoadTestService/testProfileRuns/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Load Test Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Langkah berikutnya