Azure peran bawaan untuk Storage

Artikel ini mencantumkan peran bawaan Azure dalam kategori Penyimpanan.

Kontributor Avere

Dapat membuat dan mengelola kluster Avere vFXT.

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Otorisasi/*/read	Membaca peran dan penetapan peran
Microsoft. Komputasi/*/read
Microsoft. Komputasi/availabilitySets/*
Microsoft. Komputasi/proximityPlacementGroups/*
Microsoft. Komputasi/virtualMachines/*
Microsoft. Komputasi/disk/*
Microsoft. Jaringan/*/read
Microsoft. Jaringan/networkInterfaces/*
Microsoft. Jaringan/virtualNetworks/read	Dapatkan definisi jaringan virtual
Microsoft. Jaringan/virtualNetworks/subnets/read	Mendapatkan definisi subnet jaringan virtual
Microsoft. Jaringan/virtualNetworks/subnet/join/action	Bergabung dengan jaringan virtual. Tidak bisa diperingatkan.
Microsoft. Jaringan/virtualNetworks/subnets/joinViaServiceEndpoint/action	Menggabungkan sumber daya seperti akun penyimpanan atau database SQL ke subnet. Tidak dapat diberi tahu.
Microsoft. Jaringan/networkSecurityGroups/join/action	Menggabungkan kelompok keamanan jaringan. Tidak bisa diperingatkan.
Microsoft. Sumber daya/penyebaran/*	Membuat dan mengelola penyebaran
Microsoft. Wawasan/alertRules/*	Membuat dan mengelola pemberitahuan metrik klasik
Microsoft. Sumber daya/subscriptions/resourceGroups/read	Mendapatkan atau mencantumkan grup sumber daya.
Microsoft. Penyimpanan/*/read
Microsoft. Penyimpanan/storageAccounts/*	Membuat dan mengelola akun penyimpanan
Microsoft. Dukungan/*	Membuat dan memperbarui tiket dukungan
Microsoft. Sumber daya/subscriptions/resourceGroups/resources/read	Mendapatkan sumber daya untuk grup sumber daya.
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/delete	Mengembalikan hasil menghapus blob
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/read	Mengembalikan blob atau daftar blob
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/write	Mengembalikan hasil penulisan blob
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Can create and manage an Avere vFXT cluster.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/4f8fab4f-1852-4a58-a46a-8eaf358af14a",
  "name": "4f8fab4f-1852-4a58-a46a-8eaf358af14a",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Compute/*/read",
        "Microsoft.Compute/availabilitySets/*",
        "Microsoft.Compute/proximityPlacementGroups/*",
        "Microsoft.Compute/virtualMachines/*",
        "Microsoft.Compute/disks/*",
        "Microsoft.Network/*/read",
        "Microsoft.Network/networkInterfaces/*",
        "Microsoft.Network/virtualNetworks/read",
        "Microsoft.Network/virtualNetworks/subnets/read",
        "Microsoft.Network/virtualNetworks/subnets/join/action",
        "Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action",
        "Microsoft.Network/networkSecurityGroups/join/action",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Storage/*/read",
        "Microsoft.Storage/storageAccounts/*",
        "Microsoft.Support/*",
        "Microsoft.Resources/subscriptions/resourceGroups/resources/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete",
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read",
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Avere Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Operator Avere

Digunakan oleh kluster Avere vFXT untuk mengelola kluster

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Komputasi/virtualMachines/read	Mendapatkan properti mesin virtual
Microsoft. Jaringan/networkInterfaces/read	Mendapatkan definisi antarmuka jaringan.
Microsoft. Jaringan/networkInterfaces/write	Membuat antarmuka jaringan atau memperbarui antarmuka jaringan yang ada.
Microsoft. Jaringan/virtualNetworks/read	Dapatkan definisi jaringan virtual
Microsoft. Jaringan/virtualNetworks/subnets/read	Mendapatkan definisi subnet jaringan virtual
Microsoft. Jaringan/virtualNetworks/subnet/join/action	Bergabung dengan jaringan virtual. Tidak bisa diperingatkan.
Microsoft. Jaringan/networkSecurityGroups/join/action	Menggabungkan kelompok keamanan jaringan. Tidak bisa diperingatkan.
Microsoft. Sumber daya/subscriptions/resourceGroups/read	Mendapatkan atau mencantumkan grup sumber daya.
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/delete	Mengembalikan hasil menghapus kontainer
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/read	Daftar kontainer yang diperbarui
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/write	Mengembalikan hasil dari wadah blob put
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/delete	Mengembalikan hasil menghapus blob
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/read	Mengembalikan blob atau daftar blob
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/write	Mengembalikan hasil penulisan blob
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Used by the Avere vFXT cluster to manage the cluster",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/c025889f-8102-4ebf-b32c-fc0c6f0c6bd9",
  "name": "c025889f-8102-4ebf-b32c-fc0c6f0c6bd9",
  "permissions": [
    {
      "actions": [
        "Microsoft.Compute/virtualMachines/read",
        "Microsoft.Network/networkInterfaces/read",
        "Microsoft.Network/networkInterfaces/write",
        "Microsoft.Network/virtualNetworks/read",
        "Microsoft.Network/virtualNetworks/subnets/read",
        "Microsoft.Network/virtualNetworks/subnets/join/action",
        "Microsoft.Network/networkSecurityGroups/join/action",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Storage/storageAccounts/blobServices/containers/delete",
        "Microsoft.Storage/storageAccounts/blobServices/containers/read",
        "Microsoft.Storage/storageAccounts/blobServices/containers/write"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete",
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read",
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Avere Operator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Administrator Azure File Sync

Menyediakan akses penuh untuk mengelola semua sumber daya Azure File Sync (Storage Sync Service). Juga memungkinkan akses baca/tulis ke semua data yang terkandung dalam akun penyimpanan melalui akses ke kunci akun penyimpanan.

Menggunakan kondisi ABAC untuk membatasi penetapan peran.

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. StorageSync/register/action	Mendaftarkan langganan untuk Penyedia Sinkronisasi Penyimpanan
Microsoft. StorageSync/unregister/action	Membatalkan pendaftaran langganan untuk Penyedia Sinkronisasi Penyimpanan
Microsoft. StorageSync/locations/*
Microsoft. StorageSync/deployments/preflight/action	Validasi semua sumber daya sebelum kami berhasil menyebarkan sumber daya.
Microsoft. StorageSync/storageSyncServices/*
Microsoft. StorageSync/operations/read	Mendapatkan daftar Operasi yang Didukung
Microsoft. Otorisasi/roleAssignments/write	Membuat penetapan peran pada cakupan yang ditentukan.
Microsoft. Wawasan/AlertRules/*	Membuat dan mengelola pemberitahuan metrik klasik
Microsoft. Sumber daya/penyebaran/*	Membuat dan mengelola penyebaran
Microsoft. Sumber daya/subscriptions/resourceGroups/read	Mendapatkan atau mencantumkan grup sumber daya.
Microsoft. Penyimpanan/storageAccounts/read	Mengembalikan daftar akun penyimpanan atau mendapatkan properti untuk akun penyimpanan tertentu.
Microsoft. Penyimpanan/storageAccounts/fileServices/shares/read	Mencantumkan berbagi
Microsoft. Penyimpanan/storageAccounts/fileServices/read	Mendapatkan properti layanan file
Microsoft. Dukungan/*	Membuat dan memperbarui tiket dukungan
Microsoft. Otorisasi/*/read	Membaca peran dan penetapan peran
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada
Kondisi
((! (ActionMatches{'Microsoft. Otorisasi/roleAssignments/write'})) OR ((@Request[Microsoft. Authorization/roleAssignments:RoleDefinitionId] ForAnyOfAnyValues:GuidEquals {c12c1c16-33a1-487b-954d-41c89c60f349, 69566ab7-960f-475b-8e7c-b3118f30c6bd, 17d1049b-9a84-46fb-8f53-869881c3d3ab}) DAN (@Request[Microsoft. Otorisasi/roleAssignments:PrincipalType] StringEqualsIgnoreCase 'ServicePrincipal')))	Tambahkan penetapan peran ke perwakilan layanan untuk peran berikut: Akses Data dan Pembaca Storage File Data Privileged Reader Kontributor Akun Penyimpanan

{
  "assignableScopes": [
    "/"
  ],
  "description": "Provides full access to manage all Azure File Sync (Storage Sync Service) resources.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/92b92042-07d9-4307-87f7-36a593fc5850",
  "name": "92b92042-07d9-4307-87f7-36a593fc5850",
  "permissions": [
    {
      "actions": [
        "Microsoft.StorageSync/register/action",
        "Microsoft.StorageSync/unregister/action",
        "Microsoft.StorageSync/locations/*",
        "Microsoft.StorageSync/deployments/preflight/action",
        "Microsoft.StorageSync/storageSyncServices/*",
        "Microsoft.StorageSync/operations/read",
        "Microsoft.Authorization/roleAssignments/write",
        "Microsoft.Insights/AlertRules/*",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Storage/storageAccounts/read",
        "Microsoft.Storage/storageAccounts/fileServices/shares/read",
        "Microsoft.Storage/storageAccounts/fileServices/read",
        "Microsoft.Support/*",
        "Microsoft.Authorization/*/read"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": [],
      "conditionVersion": "2.0",
      "condition": "((!(ActionMatches{'Microsoft.Authorization/roleAssignments/write'})) OR ((@Request[Microsoft.Authorization/roleAssignments:RoleDefinitionId] ForAnyOfAnyValues:GuidEquals {c12c1c16-33a1-487b-954d-41c89c60f349, 69566ab7-960f-475b-8e7c-b3118f30c6bd, 17d1049b-9a84-46fb-8f53-869881c3d3ab}) AND (@Request[Microsoft.Authorization/roleAssignments:PrincipalType] StringEqualsIgnoreCase 'ServicePrincipal')))"
    }
  ],
  "roleName": "Azure File Sync Administrator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pembaca Azure File Sync

Menyediakan akses baca ke layanan Azure File Sync (Storage Sync Service).

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. StorageSync/*/read
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Provides read access to Azure File Sync service (Storage Sync Service).",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/754c1a27-40dc-4708-8ad4-2bffdeee09e8",
  "name": "754c1a27-40dc-4708-8ad4-2bffdeee09e8",
  "permissions": [
    {
      "actions": [
        "Microsoft.StorageSync/*/read"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Azure File Sync Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Kontributor Cadangan

Memungkinkan Anda mengelola layanan pencadangan,tetapi tidak dapat membuat vault dan memberi akses kepada orang lain

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Otorisasi/*/read	Membaca peran dan penetapan peran
Microsoft. Jaringan/virtualNetworks/read	Dapatkan definisi jaringan virtual
Microsoft. RecoveryServices/locations/*
Microsoft. RecoveryServices/Vaults/backupFabrics/operationResults/*	Kelola hasil operasi pada manajemen cadangan
Microsoft. RecoveryServices/Vaults/backupFabrics/protectionContainers/*	Membuat dan mengelola kontainer cadangan di dalam kain cadangan kubah Layanan Pemulihan
Microsoft. RecoveryServices/Vaults/backupFabrics/refreshContainers/action	Me-refresh daftar kontainer
Microsoft. RecoveryServices/Vaults/backupJobs/*	Membuat dan mengelola pekerjaan pencadangan
Microsoft. RecoveryServices/Vaults/backupJobsExport/action	Mengekspor Pekerjaan
Microsoft. RecoveryServices/Vaults/backupOperationResults/*	Membuat dan mengelola Hasil operasi manajemen cadangan
Microsoft. RecoveryServices/Vaults/backupPolicies/*	Membuat dan mengelola pekerjaan pencadangan
Microsoft. RecoveryServices/Vaults/backupProtectableItems/*	Membuat dan mengelola item yang bisa dicadangkan
Microsoft. RecoveryServices/Vaults/backupProtectedItems/*	Membuat dan mengelola item yang dicadangkan
Microsoft. RecoveryServices/Vaults/backupProtectionContainers/*	Membuat dan mengelola kontainer yang menyimpan item cadangan
Microsoft. RecoveryServices/Vaults/backupSecurityPIN/*
Microsoft. RecoveryServices/Vaults/backupUsageSummaries/read	Menghasilkan ringkasan untuk Item yang Dilindungi dan Server yang Dilindungi untuk Layanan Pemulihan.
Microsoft. RecoveryServices/Vaults/certificates/*	Membuat dan mengelola sertifikat yang terkait dengan pencadangan di brankas Layanan Pemulihan
Microsoft. RecoveryServices/Vaults/extendedInformation/*	Membuat dan mengelola info yang diperluas terkait dengan kubah
Microsoft. RecoveryServices/Vaults/monitoringAlerts/read	Mendapatkan peringatan untuk vault Layanan pemulihan.
Microsoft. RecoveryServices/Vaults/monitoringConfigurations/*
Microsoft. RecoveryServices/Vaults/read	Operasi Get Vault mendapatkan objek yang mewakili sumber daya Azure jenis 'vault'
Microsoft. RecoveryServices/Vaults/registeredIdentities/*	Membuat dan mengelola identitas terdaftar
Microsoft. RecoveryServices/Vaults/usages/*	Membuat dan mengelola penggunaan kubah Layanan Pemulihan
Microsoft. Sumber daya/penyebaran/*	Membuat dan mengelola penyebaran
Microsoft. Sumber daya/subscriptions/resourceGroups/read	Mendapatkan atau mencantumkan grup sumber daya.
Microsoft. Penyimpanan/storageAccounts/read	Mengembalikan daftar akun penyimpanan atau mendapatkan properti untuk akun penyimpanan tertentu.
Microsoft. RecoveryServices/Vaults/backupstorageconfig/*
Microsoft. RecoveryServices/Vaults/backupconfig/*
Microsoft. RecoveryServices/Vaults/backupValidateOperation/action	Validasi Operasi pada Item yang Dilindungi
Microsoft. RecoveryServices/Vaults/write	Operasi Buat Vault membuat sumber daya Azure jenis 'vault'
Microsoft. RecoveryServices/Vaults/backupOperations/read	Menampilkan Status Operasi Pencadangan untuk Vault Layanan Pemulihan.
Microsoft. RecoveryServices/Vaults/backupEngines/read	Mengembalikan semua server manajemen cadangan yang terdaftar dengan vault.
Microsoft. RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/*
Microsoft. RecoveryServices/Vaults/backupFabrics/protectableContainers/read	Mendapatkan semua kontainer yang dapat dilindungi
Microsoft. RecoveryServices/vaults/operationStatus/read	Mendapatkan Status Operasi untuk Operasi yang diberikan
Microsoft. RecoveryServices/vaults/operationResults/read	Operasi Dapatkan Hasil Operasi dapat digunakan untuk mendapatkan hasil dan status operasi untuk operasi yang dikirimkan secara asinkron
Microsoft. RecoveryServices/locations/backupStatus/action	Periksa Status Backup untuk Vault Layanan Pemulihan
Microsoft. RecoveryServices/locations/backupPreValidateProtection/action
Microsoft. RecoveryServices/locations/backupValidateFeatures/action	Validasi Fitur
Microsoft. RecoveryServices/Vaults/monitoringAlerts/write	Menyelesaikan peringatan.
Microsoft. RecoveryServices/operations/read	Operasi menghasilkan daftar Operasi untuk Penyedia Sumber Daya
Microsoft. RecoveryServices/locations/operationStatus/read	Mendapatkan Status Operasi untuk Operasi yang diberikan
Microsoft. RecoveryServices/Vaults/backupProtectionIntents/read	Membuat daftar semua Niat Perlindungan cadangan
Microsoft. Dukungan/*	Membuat dan memperbarui tiket dukungan
Microsoft. DataProtection/locations/getBackupStatus/action	Periksa Status Backup untuk Vault Layanan Pemulihan
Microsoft. DataProtection/backupVaults/backupInstances/write	Membuat Instans Microsoft Azure Backup
Microsoft. DataProtection/backupVaults/backupInstances/delete	Menghapus sebuah Instans Backup
Microsoft. DataProtection/backupVaults/backupInstances/read	Mengembalikan semua Instans Microsoft Azure Backup
Microsoft. DataProtection/backupVaults/backupInstances/read	Mengembalikan semua Instans Microsoft Azure Backup
Microsoft. DataProtection/backupVaults/deletedBackupInstances/read	Mencantumkan Instans Cadangan yang dihapus sementara di Brankas Cadangan.
Microsoft. DataProtection/backupVaults/deletedBackupInstances/undelete/action	Lakukan penghapusan Instans Cadangan yang dihapus sementara. Instans Cadangan berpindah dari status SoftDeleted ke ProtectionStopped.
Microsoft. DataProtection/backupVaults/backupInstances/backup/action	Melakukan Pencadangan pada Instans Microsoft Azure Backup
Microsoft. DataProtection/backupVaults/backupInstances/validateRestore/action	Menvalidasi Pemulihan dari Instans Pencadangan
Microsoft. DataProtection/backupVaults/backupInstances/restore/action	Memicu pemulihan pada Instans Microsoft Azure Backup
Microsoft. DataProtection/subscriptions/resourceGroups/providers/locations/crossRegionRestore/action	Memicu operasi pemulihan lintas wilayah pada instans cadangan tertentu.
Microsoft. DataProtection/subscriptions/resourceGroups/providers/locations/validateCrossRegionRestore/action	Melakukan validasi untuk operasi pemulihan lintas wilayah.
Microsoft. DataProtection/subscriptions/resourceGroups/providers/locations/fetchCrossRegionRestoreJobs/action	Mencantumkan pekerjaan pemulihan lintas wilayah instans cadangan dari wilayah sekunder.
Microsoft. DataProtection/subscriptions/resourceGroups/providers/locations/fetchCrossRegionRestoreJob/action	Dapatkan detail pekerjaan pemulihan lintas wilayah dari wilayah sekunder.
Microsoft. DataProtection/subscriptions/resourceGroups/providers/locations/fetchSecondaryRecoveryPoints/action	Mengembalikan titik pemulihan dari wilayah sekunder untuk pemulihan lintas wilayah yang diaktifkan Backup Vault.
Microsoft. DataProtection/backupVaults/backupPolicies/write	Membuat Kebijakan Microsoft Azure Backup
Microsoft. DataProtection/backupVaults/backupPolicies/delete	Menghapus Kebijakan Microsoft Azure Backup
Microsoft. DataProtection/backupVaults/backupPolicies/read	Mengembalikan semua Kebijakan Microsoft Azure Backup
Microsoft. DataProtection/backupVaults/backupPolicies/read	Mengembalikan semua Kebijakan Microsoft Azure Backup
Microsoft. DataProtection/backupVaults/backupInstances/recoveryPoints/read	Mengembalikan semua Titik Pemulihan
Microsoft. DataProtection/backupVaults/backupInstances/recoveryPoints/read	Mengembalikan semua Titik Pemulihan
Microsoft. DataProtection/backupVaults/backupInstances/findRestorableTimeRanges/action	Menemukan Rentang Waktu yang Dapat Dipulihkan
Microsoft. DataProtection/backupVaults/backupInstances/operationResults/read	Mengembalikan Hasil Operasi Microsoft Azure Backup untuk Vault Microsoft Azure Backup.
Microsoft. DataProtection/backupVaults/write	Memperbarui operasi BackupVault memperbarui sumber daya Azure jenis 'Backup Vault'
Microsoft. DataProtection/backupVaults/read	Mendapatkan daftar Vault Microsoft Azure Backup di grup sumber daya
Microsoft. DataProtection/backupVaults/operationResults/read	Mendapatkan Hasil Operasi Patch untuk Vault Microsoft Azure Backup
Microsoft. DataProtection/backupVaults/operationStatus/read	Mengembalikan Status Operasi Microsoft Azure Backup untuk Vault Microsoft Azure Backup.
Microsoft. DataProtection/locations/checkNameAvailability/action	Memeriksa apakah Nama BackupVault yang diminta Tersedia
Microsoft. DataProtection/locations/checkFeatureSupport/action	Memvalidasi apakah fitur didukung
Microsoft. DataProtection/backupVaults/read	Mendapatkan daftar Vault Microsoft Azure Backup di grup sumber daya
Microsoft. DataProtection/backupVaults/read	Mendapatkan daftar Vault Microsoft Azure Backup di grup sumber daya
Microsoft. DataProtection/locations/operationStatus/read	Mengembalikan Status Operasi Microsoft Azure Backup untuk Vault Microsoft Azure Backup.
Microsoft. DataProtection/locations/operationResults/read	Mengembalikan Hasil Operasi Microsoft Azure Backup untuk Vault Microsoft Azure Backup.
Microsoft. DataProtection/backupVaults/validateForBackup/action	Memvalidasi pencadangan Instans Microsoft Azure Backup
Microsoft. DataProtection/operations/read	Operasi menghasilkan daftar Operasi untuk Penyedia Sumber Daya
Microsoft. RecoveryServices/Vaults/backupResourceGuardProxies/delete	Operasi hapus proksi ResourceGuard menghapus sumber daya Azure yang ditentukan dari jenis 'proksi ResourceGuard'
Microsoft. RecoveryServices/Vaults/backupResourceGuardProxies/read	Mendapatkan daftar proksi ResourceGuard untuk sumber daya
Microsoft. RecoveryServices/Vaults/backupResourceGuardProxies/unlockDelete/action	Membuka kunci hapus operasi proksi ResourceGuard membuka kunci operasi kritis penghapusan berikutnya
Microsoft. RecoveryServices/Vaults/backupResourceGuardProxies/write	Membuat operasi proksi ResourceGuard membuat sumber daya Azure jenis 'Proksi ResourceGuard'
Microsoft. DataProtection/backupVaults/backupResourceGuardProxies/read	Mendapatkan operasi proksi ResourceGuard mendapatkan objek yang mewakili sumber daya Azure jenis 'proksi ResourceGuard'
Microsoft. DataProtection/backupVaults/backupResourceGuardProxies/write	Membuat operasi proksi ResourceGuard membuat sumber daya Azure jenis 'Proksi ResourceGuard'
Microsoft. DataProtection/backupVaults/backupResourceGuardProxies/delete	Operasi hapus proksi ResourceGuard menghapus sumber daya Azure yang ditentukan dari jenis 'proksi ResourceGuard'
Microsoft. DataProtection/backupVaults/backupResourceGuardProxies/unlockDelete/action	Membuka kunci hapus operasi proksi ResourceGuard membuka kunci operasi kritis penghapusan berikutnya
Microsoft. DataProtection/backupVaults/backupInstances/validateForModifyBackup/action	Memvalidasi untuk modifikasi Instans Cadangan
Microsoft. DataProtection/backupVaults/backupInstances/SuspendBackups/action	Operasi Penangguhan Pencadangan hanya menghentikan pencadangan instans cadangan. Aktivitas penyimpanan akan terus berlanjut dan karenanya data akan disimpan sesuai kebijakan.
Microsoft. DataProtection/backupVaults/backupInstances/resumeProtection/action	Lanjutkan perlindungan ProtectionStopped BI.
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you manage backups, but can't delete vaults and give access to others",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b",
  "name": "5e467623-bb1f-42f4-a55d-6e525e11384b",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Network/virtualNetworks/read",
        "Microsoft.RecoveryServices/locations/*",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/*",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/*",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/refreshContainers/action",
        "Microsoft.RecoveryServices/Vaults/backupJobs/*",
        "Microsoft.RecoveryServices/Vaults/backupJobsExport/action",
        "Microsoft.RecoveryServices/Vaults/backupOperationResults/*",
        "Microsoft.RecoveryServices/Vaults/backupPolicies/*",
        "Microsoft.RecoveryServices/Vaults/backupProtectableItems/*",
        "Microsoft.RecoveryServices/Vaults/backupProtectedItems/*",
        "Microsoft.RecoveryServices/Vaults/backupProtectionContainers/*",
        "Microsoft.RecoveryServices/Vaults/backupSecurityPIN/*",
        "Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read",
        "Microsoft.RecoveryServices/Vaults/certificates/*",
        "Microsoft.RecoveryServices/Vaults/extendedInformation/*",
        "Microsoft.RecoveryServices/Vaults/monitoringAlerts/read",
        "Microsoft.RecoveryServices/Vaults/monitoringConfigurations/*",
        "Microsoft.RecoveryServices/Vaults/read",
        "Microsoft.RecoveryServices/Vaults/registeredIdentities/*",
        "Microsoft.RecoveryServices/Vaults/usages/*",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Storage/storageAccounts/read",
        "Microsoft.RecoveryServices/Vaults/backupstorageconfig/*",
        "Microsoft.RecoveryServices/Vaults/backupconfig/*",
        "Microsoft.RecoveryServices/Vaults/backupValidateOperation/action",
        "Microsoft.RecoveryServices/Vaults/write",
        "Microsoft.RecoveryServices/Vaults/backupOperations/read",
        "Microsoft.RecoveryServices/Vaults/backupEngines/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/*",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectableContainers/read",
        "Microsoft.RecoveryServices/vaults/operationStatus/read",
        "Microsoft.RecoveryServices/vaults/operationResults/read",
        "Microsoft.RecoveryServices/locations/backupStatus/action",
        "Microsoft.RecoveryServices/locations/backupPreValidateProtection/action",
        "Microsoft.RecoveryServices/locations/backupValidateFeatures/action",
        "Microsoft.RecoveryServices/Vaults/monitoringAlerts/write",
        "Microsoft.RecoveryServices/operations/read",
        "Microsoft.RecoveryServices/locations/operationStatus/read",
        "Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read",
        "Microsoft.Support/*",
        "Microsoft.DataProtection/locations/getBackupStatus/action",
        "Microsoft.DataProtection/backupVaults/backupInstances/write",
        "Microsoft.DataProtection/backupVaults/backupInstances/delete",
        "Microsoft.DataProtection/backupVaults/backupInstances/read",
        "Microsoft.DataProtection/backupVaults/backupInstances/read",
        "Microsoft.DataProtection/backupVaults/deletedBackupInstances/read",
        "Microsoft.DataProtection/backupVaults/deletedBackupInstances/undelete/action",
        "Microsoft.DataProtection/backupVaults/backupInstances/backup/action",
        "Microsoft.DataProtection/backupVaults/backupInstances/validateRestore/action",
        "Microsoft.DataProtection/backupVaults/backupInstances/restore/action",
        "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/crossRegionRestore/action",
        "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/validateCrossRegionRestore/action",
        "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/fetchCrossRegionRestoreJobs/action",
        "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/fetchCrossRegionRestoreJob/action",
        "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/fetchSecondaryRecoveryPoints/action",
        "Microsoft.DataProtection/backupVaults/backupPolicies/write",
        "Microsoft.DataProtection/backupVaults/backupPolicies/delete",
        "Microsoft.DataProtection/backupVaults/backupPolicies/read",
        "Microsoft.DataProtection/backupVaults/backupPolicies/read",
        "Microsoft.DataProtection/backupVaults/backupInstances/recoveryPoints/read",
        "Microsoft.DataProtection/backupVaults/backupInstances/recoveryPoints/read",
        "Microsoft.DataProtection/backupVaults/backupInstances/findRestorableTimeRanges/action",
        "Microsoft.DataProtection/backupVaults/backupInstances/operationResults/read",
        "Microsoft.DataProtection/backupVaults/write",
        "Microsoft.DataProtection/backupVaults/read",
        "Microsoft.DataProtection/backupVaults/operationResults/read",
        "Microsoft.DataProtection/backupVaults/operationStatus/read",
        "Microsoft.DataProtection/locations/checkNameAvailability/action",
        "Microsoft.DataProtection/locations/checkFeatureSupport/action",
        "Microsoft.DataProtection/backupVaults/read",
        "Microsoft.DataProtection/backupVaults/read",
        "Microsoft.DataProtection/locations/operationStatus/read",
        "Microsoft.DataProtection/locations/operationResults/read",
        "Microsoft.DataProtection/backupVaults/validateForBackup/action",
        "Microsoft.DataProtection/operations/read",
        "Microsoft.RecoveryServices/Vaults/backupResourceGuardProxies/delete",
        "Microsoft.RecoveryServices/Vaults/backupResourceGuardProxies/read",
        "Microsoft.RecoveryServices/Vaults/backupResourceGuardProxies/unlockDelete/action",
        "Microsoft.RecoveryServices/Vaults/backupResourceGuardProxies/write",
        "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/read",
        "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/write",
        "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/delete",
        "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/unlockDelete/action",
        "Microsoft.DataProtection/backupVaults/backupInstances/validateForModifyBackup/action",
        "Microsoft.DataProtection/backupVaults/backupInstances/SuspendBackups/action",
        "Microsoft.DataProtection/backupVaults/backupInstances/resumeProtection/action"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Backup Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Mencadangkan Admin MUA

Mencadangkan MultiUser-Authorization. Dapat membuat/menghapus ResourceGuard

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. DataProtection/*/read
Microsoft. DataProtection/*/resourceGuards/write
Microsoft. DataProtection/subscriptions/resourceGroups/providers/resourceGuards/write	Memperbarui operasi ResourceGuard memperbarui sumber daya Azure jenis 'ResourceGuard'
Microsoft. DataProtection/subscriptions/resourceGroups/providers/resourceGuards/delete	Operasi Hapus ResourceGuard menghapus sumber daya Azure yang ditentukan dari jenis 'ResourceGuard'
Microsoft. DataProtection/subscriptions/resourceGroups/providers/resourceGuards/read	Mendapatkan daftar ResourceGuards dalam Grup Sumber Daya
Microsoft. DataProtection/locations/operationResults/read	Mengembalikan Hasil Operasi Microsoft Azure Backup untuk Vault Microsoft Azure Backup.
Microsoft. DataProtection/locations/operationStatus/read	Mengembalikan Status Operasi Microsoft Azure Backup untuk Vault Microsoft Azure Backup.
Microsoft. DataProtection/locations/getBackupStatus/action	Periksa Status Backup untuk Vault Layanan Pemulihan
Microsoft. DataProtection/locations/checkFeatureSupport/action	Memvalidasi apakah fitur didukung
Microsoft. DataProtection/subscriptions/resourceGroups/providers/locations/operationStatus/read	Mengembalikan Status Operasi Microsoft Azure Backup untuk Vault Microsoft Azure Backup.
Microsoft. Otorisasi/*/read	Membaca peran dan penetapan peran
Microsoft. Fitur/features/read	Mendapatkan fitur langganan.
Microsoft. Fitur/providers/features/read	Mendapatkan fitur langganan di penyedia sumber daya tertentu.
Microsoft. ResourceHealth/availabilityStatuses/read	Mendapatkan status ketersediaan untuk semua sumber daya dalam lingkup yang ditentukan
Microsoft. Sumber daya/deployments/operations/read	Mendapatkan atau mencantumkan operasi penyebaran.
Microsoft. Sumber daya/subscriptions/operationresults/read	Dapatkan Hasil Operasi Langganan.
Microsoft. Sumber daya/subscriptions/read	Mendapatkan daftar langganan.
Microsoft. Sumber daya/subscriptions/resourcegroups/deployments/*
Microsoft. Sumber daya/subscriptions/resourceGroups/read	Mendapatkan atau mencantumkan grup sumber daya.
Microsoft. Sumber daya/penyebaran/*	Membuat dan mengelola penyebaran
Microsoft. DataProtection/backupVaults/backupResourceGuardProxies/read	Mendapatkan operasi proksi ResourceGuard mendapatkan objek yang mewakili sumber daya Azure jenis 'proksi ResourceGuard'
Microsoft. DataProtection/backupVaults/backupResourceGuardProxies/write	Membuat operasi proksi ResourceGuard membuat sumber daya Azure jenis 'Proksi ResourceGuard'
Microsoft. DataProtection/backupVaults/backupResourceGuardProxies/delete	Operasi hapus proksi ResourceGuard menghapus sumber daya Azure yang ditentukan dari jenis 'proksi ResourceGuard'
Microsoft. DataProtection/backupVaults/backupResourceGuardProxies/unlockDelete/action	Membuka kunci hapus operasi proksi ResourceGuard membuka kunci operasi kritis penghapusan berikutnya
Microsoft. DataProtection/subscriptions/providers/resourceGuards/read	Mendapatkan daftar ResourceGuards di dalam sebuah Langganan
Microsoft. DataProtection/subscriptions/resourceGroups/providers/resourceGuards/{operationName}/read	Mendapatkan informasi mengenai permintaan operasi default ResourceGuard
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Backup MultiUser-Authorization. Can create/delete ResourceGuard ",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/c2a970b4-16a7-4a51-8c84-8a8ea6ee0bb8",
  "name": "c2a970b4-16a7-4a51-8c84-8a8ea6ee0bb8",
  "permissions": [
    {
      "actions": [
        "Microsoft.DataProtection/*/read",
        "Microsoft.DataProtection/*/resourceGuards/write",
        "Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/write",
        "Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/delete",
        "Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/read",
        "Microsoft.DataProtection/locations/operationResults/read",
        "Microsoft.DataProtection/locations/operationStatus/read",
        "Microsoft.DataProtection/locations/getBackupStatus/action",
        "Microsoft.DataProtection/locations/checkFeatureSupport/action",
        "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/operationStatus/read",
        "Microsoft.Authorization/*/read",
        "Microsoft.Features/features/read",
        "Microsoft.Features/providers/features/read",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Resources/deployments/operations/read",
        "Microsoft.Resources/subscriptions/operationresults/read",
        "Microsoft.Resources/subscriptions/read",
        "Microsoft.Resources/subscriptions/resourcegroups/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/read",
        "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/write",
        "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/delete",
        "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/unlockDelete/action",
        "Microsoft.DataProtection/subscriptions/providers/resourceGuards/read",
        "Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/{operationName}/read"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Backup MUA Admin",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Operator MUA Cadangan

Mencadangkan MultiUser-Authorization. Memungkinkan pengguna melakukan operasi penting yang dilindungi oleh resourceguard

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Perlindungan Data/*/action
Microsoft. DataProtection/*/read
Microsoft. Otorisasi/*/read	Membaca peran dan penetapan peran
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Backup MultiUser-Authorization. Allows user to perform critical operation protected by resourceguard",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/f54b6d04-23c6-443e-b462-9c16ab7b4a52",
  "name": "f54b6d04-23c6-443e-b462-9c16ab7b4a52",
  "permissions": [
    {
      "actions": [
        "Microsoft.DataProtection/*/action",
        "Microsoft.DataProtection/*/read",
        "Microsoft.Authorization/*/read"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Backup MUA Operator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Operator Pencadangan

Memungkinkan Anda mengelola layanan pencadangan, kecuali penghapusan cadangan, pembuatan vault, dan memberikan akses kepada orang lain

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Otorisasi/*/read	Membaca peran dan penetapan peran
Microsoft. Jaringan/virtualNetworks/read	Dapatkan definisi jaringan virtual
Microsoft. RecoveryServices/Vaults/backupFabrics/operationResults/read	Menampilkan status operasi
Microsoft. RecoveryServices/Vaults/backupFabrics/protectionContainers/operationResults/read	Mendapatkan hasil Operasi yang dilakukan pada Protection Container.
Microsoft. RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/backup/action	Melakukan Backup untuk item yang Diproteksi.
Microsoft. RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationResults/read	Mendapatkan Hasil Operasi yang Dilakukan pada Item yang Dilindungi.
Microsoft. RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationsStatus/read	Menampilkan status Operasi yang dilakukan pada Item yang Dilindungi.
Microsoft. RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read	Mengembalikan detail objek Item yang Diproteksi
Microsoft. RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/provisionInstantItemRecovery/action	Penyediaan Pemulihan Item Instan untuk Item yang Dilindungi
Microsoft. RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/accessToken/action	Mendapatkan AccessToken untuk Pemulihan Lintas Wilayah.
Microsoft. RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/read	Dapatkan Titik Pemulihan untuk Item yang Diproteksi.
Microsoft. RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/restore/action	Pulihkan Titik Pemulihan untuk Item yang Diproteksi.
Microsoft. RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/revokeInstantItemRecovery/action	Mencabut Pemulihan Item Instan untuk Item yang Dilindungi
Microsoft. RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/write	Buat Item yang Diproteksi cadangan
Microsoft. RecoveryServices/Vaults/backupFabrics/protectionContainers/read	Menampilkan semua kontainer terdaftar
Microsoft. RecoveryServices/Vaults/backupFabrics/refreshContainers/action	Me-refresh daftar kontainer
Microsoft. RecoveryServices/Vaults/backupJobs/*	Membuat dan mengelola pekerjaan pencadangan
Microsoft. RecoveryServices/Vaults/backupJobsExport/action	Mengekspor Pekerjaan
Microsoft. RecoveryServices/Vaults/backupOperationResults/*	Membuat dan mengelola Hasil operasi manajemen cadangan
Microsoft. RecoveryServices/Vaults/backupPolicies/operationResults/read	Dapatkan Hasil Operasi Policy.
Microsoft. RecoveryServices/Vaults/backupPolicies/read	Menampilkan semua Kebijakan Perlindungan
Microsoft. RecoveryServices/Vaults/backupProtectableItems/*	Membuat dan mengelola item yang bisa dicadangkan
Microsoft. RecoveryServices/Vaults/backupProtectedItems/read	Menampilkan daftar semua Item yang Dilindungi.
Microsoft. RecoveryServices/Vaults/backupProtectionContainers/read	Menampilkan semua kontainer milik langganan
Microsoft. RecoveryServices/Vaults/backupUsageSummaries/read	Menghasilkan ringkasan untuk Item yang Dilindungi dan Server yang Dilindungi untuk Layanan Pemulihan.
Microsoft. RecoveryServices/Vaults/certificates/write	Operasi Perbarui Sertifikat Sumber Daya memperbarui sertifikat kredensial sumber daya/vault.
Microsoft. RecoveryServices/Vaults/extendedInformation/read	Operasi Dapatkan Info Yang Diperluas mendapatkan Info Diperpanjang objek yang mewakili sumber daya Azure jenis ?vault?
Microsoft. RecoveryServices/Vaults/extendedInformation/write	Operasi Dapatkan Info Yang Diperluas mendapatkan Info Diperpanjang objek yang mewakili sumber daya Azure jenis ?vault?
Microsoft. RecoveryServices/Vaults/monitoringAlerts/read	Mendapatkan peringatan untuk vault Layanan pemulihan.
Microsoft. RecoveryServices/Vaults/monitoringConfigurations/*
Microsoft. RecoveryServices/Vaults/read	Operasi Get Vault mendapatkan objek yang mewakili sumber daya Azure jenis 'vault'
Microsoft. RecoveryServices/Vaults/registeredIdentities/operationResults/read	Operasi Dapatkan Hasil Operasi dapat digunakan untuk mendapatkan hasil dan status operasi untuk operasi yang dikirimkan secara asinkron
Microsoft. RecoveryServices/Vaults/registeredIdentities/read	Operasi Dapatkan Kontainer dapat digunakan untuk mendapatkan kontainer yang terdaftar untuk sumber daya.
Microsoft. RecoveryServices/Vaults/registeredIdentities/write	Operasi Daftarkan Kontainer Layanan dapat digunakan untuk mendaftarkan container dengan Recovery Service.
Microsoft. RecoveryServices/Vaults/usages/read	Mengembalikan detail penggunaan untuk Vault Layanan Pemulihan.
Microsoft. Sumber daya/penyebaran/*	Membuat dan mengelola penyebaran
Microsoft. Sumber daya/subscriptions/resourceGroups/read	Mendapatkan atau mencantumkan grup sumber daya.
Microsoft. Penyimpanan/storageAccounts/read	Mengembalikan daftar akun penyimpanan atau mendapatkan properti untuk akun penyimpanan tertentu.
Microsoft. RecoveryServices/Vaults/backupstorageconfig/*
Microsoft. RecoveryServices/Vaults/backupValidateOperation/action	Validasi Operasi pada Item yang Dilindungi
Microsoft. RecoveryServices/Vaults/backupTriggerValidateOperation/action	Validasi Operasi pada Item yang Dilindungi
Microsoft. RecoveryServices/Vaults/backupValidateOperationResults/read	Validasi Operasi pada Item yang Dilindungi
Microsoft. RecoveryServices/Vaults/backupValidateOperationsStatuses/read	Validasi Operasi pada Item yang Dilindungi
Microsoft. RecoveryServices/Vaults/backupOperations/read	Menampilkan Status Operasi Pencadangan untuk Vault Layanan Pemulihan.
Microsoft. RecoveryServices/Vaults/backupPolicies/operations/read	Mendapatkan Status Operasi Kebijakan.
Microsoft. RecoveryServices/Vaults/backupFabrics/protectionContainers/write	Buat kontainer terdaftar
Microsoft. RecoveryServices/Vaults/backupFabrics/protectionContainers/inquire/action	Lakukan penyelidikan untuk beban kerja dalam kontainer
Microsoft. RecoveryServices/Vaults/backupEngines/read	Mengembalikan semua server manajemen cadangan yang terdaftar dengan vault.
Microsoft. RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/write	Membuat Niat Perlindungan cadangan
Microsoft. RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/read	Dapatkan cadangan Niat Proteksi
Microsoft. RecoveryServices/Vaults/backupFabrics/protectableContainers/read	Mendapatkan semua kontainer yang dapat dilindungi
Microsoft. RecoveryServices/Vaults/backupFabrics/protectionContainers/items/read	Dapatkan semua item dalam kontainer
Microsoft. RecoveryServices/locations/backupStatus/action	Periksa Status Backup untuk Vault Layanan Pemulihan
Microsoft. RecoveryServices/locations/backupPreValidateProtection/action
Microsoft. RecoveryServices/locations/backupValidateFeatures/action	Validasi Fitur
Microsoft. RecoveryServices/locations/backupAadProperties/read	Mendapatkan Properti AAD guna autentikasi di wilayah ketiga untuk Pemulihan Lintas Wilayah.
Microsoft. RecoveryServices/locations/backupCrrJobs/action	Cantumkan Pekerjaan Pemulihan Lintas Wilayah di wilayah sekunder untuk Vault Layanan Pemulihan.
Microsoft. RecoveryServices/locations/backupCrrJob/action	Dapatkan Detail Pekerjaan Pemulihan Lintas Wilayah di wilayah sekunder untuk Vault Layanan Pemulihan.
Microsoft. RecoveryServices/locations/backupCrossRegionRestore/action	Mulai Pemulihan lintas wilayah.
Microsoft. RecoveryServices/locations/backupCrrOperationResults/read	Mengembalikan Hasil Operasi CRR untuk Vault Layanan Pemulihan.
Microsoft. RecoveryServices/locations/backupCrrOperationsStatus/read	Mengembalikan Status Operasi CRR untuk Vault Layanan Pemulihan.
Microsoft. RecoveryServices/Vaults/monitoringAlerts/write	Menyelesaikan peringatan.
Microsoft. RecoveryServices/operations/read	Operasi menghasilkan daftar Operasi untuk Penyedia Sumber Daya
Microsoft. RecoveryServices/locations/operationStatus/read	Mendapatkan Status Operasi untuk Operasi yang diberikan
Microsoft. RecoveryServices/Vaults/backupProtectionIntents/read	Membuat daftar semua Niat Perlindungan cadangan
Microsoft. Dukungan/*	Membuat dan memperbarui tiket dukungan
Microsoft. DataProtection/backupVaults/backupInstances/read	Mengembalikan semua Instans Microsoft Azure Backup
Microsoft. DataProtection/backupVaults/backupInstances/read	Mengembalikan semua Instans Microsoft Azure Backup
Microsoft. DataProtection/backupVaults/backupInstances/operationResults/read	Mengembalikan Hasil Operasi Microsoft Azure Backup untuk Vault Microsoft Azure Backup.
Microsoft. DataProtection/backupVaults/backupInstances/write	Membuat Instans Microsoft Azure Backup
Microsoft. DataProtection/backupVaults/deletedBackupInstances/read	Mencantumkan Instans Cadangan yang dihapus sementara di Brankas Cadangan.
Microsoft. DataProtection/backupVaults/backupPolicies/read	Mengembalikan semua Kebijakan Microsoft Azure Backup
Microsoft. DataProtection/backupVaults/backupPolicies/read	Mengembalikan semua Kebijakan Microsoft Azure Backup
Microsoft. DataProtection/backupVaults/backupInstances/recoveryPoints/read	Mengembalikan semua Titik Pemulihan
Microsoft. DataProtection/backupVaults/backupInstances/recoveryPoints/read	Mengembalikan semua Titik Pemulihan
Microsoft. DataProtection/backupVaults/backupInstances/findRestorableTimeRanges/action	Menemukan Rentang Waktu yang Dapat Dipulihkan
Microsoft. DataProtection/backupVaults/read	Mendapatkan daftar Vault Microsoft Azure Backup di grup sumber daya
Microsoft. DataProtection/backupVaults/operationResults/read	Mendapatkan Hasil Operasi Patch untuk Vault Microsoft Azure Backup
Microsoft. DataProtection/backupVaults/operationStatus/read	Mengembalikan Status Operasi Microsoft Azure Backup untuk Vault Microsoft Azure Backup.
Microsoft. DataProtection/backupVaults/read	Mendapatkan daftar Vault Microsoft Azure Backup di grup sumber daya
Microsoft. DataProtection/backupVaults/read	Mendapatkan daftar Vault Microsoft Azure Backup di grup sumber daya
Microsoft. DataProtection/locations/operationStatus/read	Mengembalikan Status Operasi Microsoft Azure Backup untuk Vault Microsoft Azure Backup.
Microsoft. DataProtection/locations/operationResults/read	Mengembalikan Hasil Operasi Microsoft Azure Backup untuk Vault Microsoft Azure Backup.
Microsoft. DataProtection/operations/read	Operasi menghasilkan daftar Operasi untuk Penyedia Sumber Daya
Microsoft. DataProtection/backupVaults/validateForBackup/action	Memvalidasi pencadangan Instans Microsoft Azure Backup
Microsoft. DataProtection/backupVaults/backupInstances/backup/action	Melakukan Pencadangan pada Instans Microsoft Azure Backup
Microsoft. DataProtection/backupVaults/backupInstances/validateRestore/action	Menvalidasi Pemulihan dari Instans Pencadangan
Microsoft. DataProtection/backupVaults/backupInstances/restore/action	Memicu pemulihan pada Instans Microsoft Azure Backup
Microsoft. DataProtection/subscriptions/resourceGroups/providers/locations/crossRegionRestore/action	Memicu operasi pemulihan lintas wilayah pada instans cadangan tertentu.
Microsoft. DataProtection/subscriptions/resourceGroups/providers/locations/validateCrossRegionRestore/action	Melakukan validasi untuk operasi pemulihan lintas wilayah.
Microsoft. DataProtection/subscriptions/resourceGroups/providers/locations/fetchCrossRegionRestoreJobs/action	Mencantumkan pekerjaan pemulihan lintas wilayah instans cadangan dari wilayah sekunder.
Microsoft. DataProtection/subscriptions/resourceGroups/providers/locations/fetchCrossRegionRestoreJob/action	Dapatkan detail pekerjaan pemulihan lintas wilayah dari wilayah sekunder.
Microsoft. DataProtection/subscriptions/resourceGroups/providers/locations/fetchSecondaryRecoveryPoints/action	Mengembalikan titik pemulihan dari wilayah sekunder untuk pemulihan lintas wilayah yang diaktifkan Backup Vault.
Microsoft. DataProtection/locations/checkFeatureSupport/action	Memvalidasi apakah fitur didukung
Microsoft. RecoveryServices/Vaults/backupResourceGuardProxies/delete	Operasi hapus proksi ResourceGuard menghapus sumber daya Azure yang ditentukan dari jenis 'proksi ResourceGuard'
Microsoft. RecoveryServices/Vaults/backupResourceGuardProxies/read	Mendapatkan daftar proksi ResourceGuard untuk sumber daya
Microsoft. RecoveryServices/Vaults/backupResourceGuardProxies/unlockDelete/action	Membuka kunci hapus operasi proksi ResourceGuard membuka kunci operasi kritis penghapusan berikutnya
Microsoft. RecoveryServices/Vaults/backupResourceGuardProxies/write	Membuat operasi proksi ResourceGuard membuat sumber daya Azure jenis 'Proksi ResourceGuard'
Microsoft. DataProtection/backupVaults/backupResourceGuardProxies/read	Mendapatkan operasi proksi ResourceGuard mendapatkan objek yang mewakili sumber daya Azure jenis 'proksi ResourceGuard'
Microsoft. DataProtection/backupVaults/backupResourceGuardProxies/write	Membuat operasi proksi ResourceGuard membuat sumber daya Azure jenis 'Proksi ResourceGuard'
Microsoft. DataProtection/backupVaults/backupResourceGuardProxies/delete	Operasi hapus proksi ResourceGuard menghapus sumber daya Azure yang ditentukan dari jenis 'proksi ResourceGuard'
Microsoft. DataProtection/backupVaults/backupResourceGuardProxies/unlockDelete/action	Membuka kunci hapus operasi proksi ResourceGuard membuka kunci operasi kritis penghapusan berikutnya
Microsoft. DataProtection/backupVaults/backupInstances/validateForModifyBackup/action	Memvalidasi untuk modifikasi Instans Cadangan
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you manage backup services, except removal of backup, vault creation and giving access to others",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/00c29273-979b-4161-815c-10b084fb9324",
  "name": "00c29273-979b-4161-815c-10b084fb9324",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Network/virtualNetworks/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/operationResults/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/backup/action",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationResults/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationsStatus/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/provisionInstantItemRecovery/action",
        "Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/accessToken/action",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/restore/action",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/revokeInstantItemRecovery/action",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/write",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/refreshContainers/action",
        "Microsoft.RecoveryServices/Vaults/backupJobs/*",
        "Microsoft.RecoveryServices/Vaults/backupJobsExport/action",
        "Microsoft.RecoveryServices/Vaults/backupOperationResults/*",
        "Microsoft.RecoveryServices/Vaults/backupPolicies/operationResults/read",
        "Microsoft.RecoveryServices/Vaults/backupPolicies/read",
        "Microsoft.RecoveryServices/Vaults/backupProtectableItems/*",
        "Microsoft.RecoveryServices/Vaults/backupProtectedItems/read",
        "Microsoft.RecoveryServices/Vaults/backupProtectionContainers/read",
        "Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read",
        "Microsoft.RecoveryServices/Vaults/certificates/write",
        "Microsoft.RecoveryServices/Vaults/extendedInformation/read",
        "Microsoft.RecoveryServices/Vaults/extendedInformation/write",
        "Microsoft.RecoveryServices/Vaults/monitoringAlerts/read",
        "Microsoft.RecoveryServices/Vaults/monitoringConfigurations/*",
        "Microsoft.RecoveryServices/Vaults/read",
        "Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read",
        "Microsoft.RecoveryServices/Vaults/registeredIdentities/read",
        "Microsoft.RecoveryServices/Vaults/registeredIdentities/write",
        "Microsoft.RecoveryServices/Vaults/usages/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Storage/storageAccounts/read",
        "Microsoft.RecoveryServices/Vaults/backupstorageconfig/*",
        "Microsoft.RecoveryServices/Vaults/backupValidateOperation/action",
        "Microsoft.RecoveryServices/Vaults/backupTriggerValidateOperation/action",
        "Microsoft.RecoveryServices/Vaults/backupValidateOperationResults/read",
        "Microsoft.RecoveryServices/Vaults/backupValidateOperationsStatuses/read",
        "Microsoft.RecoveryServices/Vaults/backupOperations/read",
        "Microsoft.RecoveryServices/Vaults/backupPolicies/operations/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/write",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/inquire/action",
        "Microsoft.RecoveryServices/Vaults/backupEngines/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/write",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectableContainers/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/items/read",
        "Microsoft.RecoveryServices/locations/backupStatus/action",
        "Microsoft.RecoveryServices/locations/backupPreValidateProtection/action",
        "Microsoft.RecoveryServices/locations/backupValidateFeatures/action",
        "Microsoft.RecoveryServices/locations/backupAadProperties/read",
        "Microsoft.RecoveryServices/locations/backupCrrJobs/action",
        "Microsoft.RecoveryServices/locations/backupCrrJob/action",
        "Microsoft.RecoveryServices/locations/backupCrossRegionRestore/action",
        "Microsoft.RecoveryServices/locations/backupCrrOperationResults/read",
        "Microsoft.RecoveryServices/locations/backupCrrOperationsStatus/read",
        "Microsoft.RecoveryServices/Vaults/monitoringAlerts/write",
        "Microsoft.RecoveryServices/operations/read",
        "Microsoft.RecoveryServices/locations/operationStatus/read",
        "Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read",
        "Microsoft.Support/*",
        "Microsoft.DataProtection/backupVaults/backupInstances/read",
        "Microsoft.DataProtection/backupVaults/backupInstances/read",
        "Microsoft.DataProtection/backupVaults/backupInstances/operationResults/read",
        "Microsoft.DataProtection/backupVaults/backupInstances/write",
        "Microsoft.DataProtection/backupVaults/deletedBackupInstances/read",
        "Microsoft.DataProtection/backupVaults/backupPolicies/read",
        "Microsoft.DataProtection/backupVaults/backupPolicies/read",
        "Microsoft.DataProtection/backupVaults/backupInstances/recoveryPoints/read",
        "Microsoft.DataProtection/backupVaults/backupInstances/recoveryPoints/read",
        "Microsoft.DataProtection/backupVaults/backupInstances/findRestorableTimeRanges/action",
        "Microsoft.DataProtection/backupVaults/read",
        "Microsoft.DataProtection/backupVaults/operationResults/read",
        "Microsoft.DataProtection/backupVaults/operationStatus/read",
        "Microsoft.DataProtection/backupVaults/read",
        "Microsoft.DataProtection/backupVaults/read",
        "Microsoft.DataProtection/locations/operationStatus/read",
        "Microsoft.DataProtection/locations/operationResults/read",
        "Microsoft.DataProtection/operations/read",
        "Microsoft.DataProtection/backupVaults/validateForBackup/action",
        "Microsoft.DataProtection/backupVaults/backupInstances/backup/action",
        "Microsoft.DataProtection/backupVaults/backupInstances/validateRestore/action",
        "Microsoft.DataProtection/backupVaults/backupInstances/restore/action",
        "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/crossRegionRestore/action",
        "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/validateCrossRegionRestore/action",
        "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/fetchCrossRegionRestoreJobs/action",
        "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/fetchCrossRegionRestoreJob/action",
        "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/fetchSecondaryRecoveryPoints/action",
        "Microsoft.DataProtection/locations/checkFeatureSupport/action",
        "Microsoft.RecoveryServices/Vaults/backupResourceGuardProxies/delete",
        "Microsoft.RecoveryServices/Vaults/backupResourceGuardProxies/read",
        "Microsoft.RecoveryServices/Vaults/backupResourceGuardProxies/unlockDelete/action",
        "Microsoft.RecoveryServices/Vaults/backupResourceGuardProxies/write",
        "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/read",
        "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/write",
        "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/delete",
        "Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/unlockDelete/action",
        "Microsoft.DataProtection/backupVaults/backupInstances/validateForModifyBackup/action"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Backup Operator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pembaca Backup

Dapat melihat layanan pencadangan, tetapi tidak dapat membuat perubahan

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Otorisasi/*/read	Membaca peran dan penetapan peran
Microsoft. RecoveryServices/locations/allocatedStamp/read	GetAllocatedStamp adalah operasi internal yang digunakan oleh layanan
Microsoft. RecoveryServices/Vaults/backupFabrics/operationResults/read	Menampilkan status operasi
Microsoft. RecoveryServices/Vaults/backupFabrics/operationsStatus/read	Menampilkan status operasi
Microsoft. RecoveryServices/Vaults/backupFabrics/protectionContainers/operationResults/read	Mendapatkan hasil Operasi yang dilakukan pada Protection Container.
Microsoft. RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationResults/read	Mendapatkan Hasil Operasi yang Dilakukan pada Item yang Dilindungi.
Microsoft. RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationsStatus/read	Menampilkan status Operasi yang dilakukan pada Item yang Dilindungi.
Microsoft. RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read	Mengembalikan detail objek Item yang Diproteksi
Microsoft. RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/read	Dapatkan Titik Pemulihan untuk Item yang Diproteksi.
Microsoft. RecoveryServices/Vaults/backupFabrics/protectionContainers/read	Menampilkan semua kontainer terdaftar
Microsoft. RecoveryServices/Vaults/backupJobs/operationResults/read	Mengembalikan Hasil Operasi Tugas.
Microsoft. RecoveryServices/Vaults/backupJobs/read	Menghasilkan semua Objek Tugas
Microsoft. RecoveryServices/Vaults/backupJobsExport/action	Mengekspor Pekerjaan
Microsoft. RecoveryServices/Vaults/backupOperationResults/read	Menampilkan Hasil Operasi Pencadangan untuk Vault Layanan Pemulihan.
Microsoft. RecoveryServices/Vaults/backupPolicies/operationResults/read	Dapatkan Hasil Operasi Policy.
Microsoft. RecoveryServices/Vaults/backupPolicies/read	Menampilkan semua Kebijakan Perlindungan
Microsoft. RecoveryServices/Vaults/backupProtectedItems/read	Menampilkan daftar semua Item yang Dilindungi.
Microsoft. RecoveryServices/Vaults/backupProtectionContainers/read	Menampilkan semua kontainer milik langganan
Microsoft. RecoveryServices/Vaults/backupUsageSummaries/read	Menghasilkan ringkasan untuk Item yang Dilindungi dan Server yang Dilindungi untuk Layanan Pemulihan.
Microsoft. RecoveryServices/Vaults/extendedInformation/read	Operasi Dapatkan Info Yang Diperluas mendapatkan Info Diperpanjang objek yang mewakili sumber daya Azure jenis ?vault?
Microsoft. RecoveryServices/Vaults/monitoringAlerts/read	Mendapatkan peringatan untuk vault Layanan pemulihan.
Microsoft. RecoveryServices/Vaults/read	Operasi Get Vault mendapatkan objek yang mewakili sumber daya Azure jenis 'vault'
Microsoft. RecoveryServices/Vaults/registeredIdentities/operationResults/read	Operasi Dapatkan Hasil Operasi dapat digunakan untuk mendapatkan hasil dan status operasi untuk operasi yang dikirimkan secara asinkron
Microsoft. RecoveryServices/Vaults/registeredIdentities/read	Operasi Dapatkan Kontainer dapat digunakan untuk mendapatkan kontainer yang terdaftar untuk sumber daya.
Microsoft. RecoveryServices/Vaults/backupstorageconfig/read	Menampilkan Konfigurasi Penyimpanan untuk Vault Layanan Pemulihan.
Microsoft. RecoveryServices/Vaults/backupconfig/read	Menghasilkan Konfigurasi untuk Vault Layanan Pemulihan.
Microsoft. RecoveryServices/Vaults/backupOperations/read	Menampilkan Status Operasi Pencadangan untuk Vault Layanan Pemulihan.
Microsoft. RecoveryServices/Vaults/backupPolicies/operations/read	Mendapatkan Status Operasi Kebijakan.
Microsoft. RecoveryServices/Vaults/backupEngines/read	Mengembalikan semua server manajemen cadangan yang terdaftar dengan vault.
Microsoft. RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/read	Dapatkan cadangan Niat Proteksi
Microsoft. RecoveryServices/Vaults/backupFabrics/protectionContainers/items/read	Dapatkan semua item dalam kontainer
Microsoft. RecoveryServices/locations/backupStatus/action	Periksa Status Backup untuk Vault Layanan Pemulihan
Microsoft. RecoveryServices/Vaults/monitoringConfigurations/*
Microsoft. RecoveryServices/Vaults/monitoringAlerts/write	Menyelesaikan peringatan.
Microsoft. RecoveryServices/operations/read	Operasi menghasilkan daftar Operasi untuk Penyedia Sumber Daya
Microsoft. RecoveryServices/locations/operationStatus/read	Mendapatkan Status Operasi untuk Operasi yang diberikan
Microsoft. RecoveryServices/Vaults/backupProtectionIntents/read	Membuat daftar semua Niat Perlindungan cadangan
Microsoft. RecoveryServices/Vaults/usages/read	Mengembalikan detail penggunaan untuk Vault Layanan Pemulihan.
Microsoft. RecoveryServices/locations/backupValidateFeatures/action	Validasi Fitur
Microsoft. RecoveryServices/locations/backupCrrJobs/action	Cantumkan Pekerjaan Pemulihan Lintas Wilayah di wilayah sekunder untuk Vault Layanan Pemulihan.
Microsoft. RecoveryServices/locations/backupCrrJob/action	Dapatkan Detail Pekerjaan Pemulihan Lintas Wilayah di wilayah sekunder untuk Vault Layanan Pemulihan.
Microsoft. RecoveryServices/locations/backupCrrOperationResults/read	Mengembalikan Hasil Operasi CRR untuk Vault Layanan Pemulihan.
Microsoft. RecoveryServices/locations/backupCrrOperationsStatus/read	Mengembalikan Status Operasi CRR untuk Vault Layanan Pemulihan.
Microsoft. DataProtection/locations/getBackupStatus/action	Periksa Status Backup untuk Vault Layanan Pemulihan
Microsoft. DataProtection/backupVaults/backupInstances/read	Mengembalikan semua Instans Microsoft Azure Backup
Microsoft. DataProtection/backupVaults/deletedBackupInstances/read	Mencantumkan Instans Cadangan yang dihapus sementara di Brankas Cadangan.
Microsoft. DataProtection/backupVaults/backupPolicies/read	Mengembalikan semua Kebijakan Microsoft Azure Backup
Microsoft. DataProtection/backupVaults/backupPolicies/read	Mengembalikan semua Kebijakan Microsoft Azure Backup
Microsoft. DataProtection/backupVaults/backupInstances/recoveryPoints/read	Mengembalikan semua Titik Pemulihan
Microsoft. DataProtection/backupVaults/backupInstances/recoveryPoints/read	Mengembalikan semua Titik Pemulihan
Microsoft. DataProtection/backupVaults/backupInstances/operationResults/read	Mengembalikan Hasil Operasi Microsoft Azure Backup untuk Vault Microsoft Azure Backup.
Microsoft. DataProtection/backupVaults/backupInstances/findRestorableTimeRanges/action	Menemukan Rentang Waktu yang Dapat Dipulihkan
Microsoft. DataProtection/backupVaults/read	Mendapatkan daftar Vault Microsoft Azure Backup di grup sumber daya
Microsoft. DataProtection/backupVaults/operationResults/read	Mendapatkan Hasil Operasi Patch untuk Vault Microsoft Azure Backup
Microsoft. DataProtection/backupVaults/operationStatus/read	Mengembalikan Status Operasi Microsoft Azure Backup untuk Vault Microsoft Azure Backup.
Microsoft. DataProtection/backupVaults/read	Mendapatkan daftar Vault Microsoft Azure Backup di grup sumber daya
Microsoft. DataProtection/backupVaults/read	Mendapatkan daftar Vault Microsoft Azure Backup di grup sumber daya
Microsoft. DataProtection/locations/operationStatus/read	Mengembalikan Status Operasi Microsoft Azure Backup untuk Vault Microsoft Azure Backup.
Microsoft. DataProtection/locations/operationResults/read	Mengembalikan Hasil Operasi Microsoft Azure Backup untuk Vault Microsoft Azure Backup.
Microsoft. DataProtection/operations/read	Operasi menghasilkan daftar Operasi untuk Penyedia Sumber Daya
Microsoft. DataProtection/subscriptions/resourceGroups/providers/locations/fetchCrossRegionRestoreJobs/action	Mencantumkan pekerjaan pemulihan lintas wilayah instans cadangan dari wilayah sekunder.
Microsoft. DataProtection/subscriptions/resourceGroups/providers/locations/fetchCrossRegionRestoreJob/action	Dapatkan detail pekerjaan pemulihan lintas wilayah dari wilayah sekunder.
Microsoft. DataProtection/subscriptions/resourceGroups/providers/locations/fetchSecondaryRecoveryPoints/action	Mengembalikan titik pemulihan dari wilayah sekunder untuk pemulihan lintas wilayah yang diaktifkan Backup Vault.
Microsoft. DataProtection/locations/checkFeatureSupport/action	Memvalidasi apakah fitur didukung
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Can view backup services, but can't make changes",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/a795c7a0-d4a2-40c1-ae25-d81f01202912",
  "name": "a795c7a0-d4a2-40c1-ae25-d81f01202912",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.RecoveryServices/locations/allocatedStamp/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/operationsStatus/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/operationResults/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationResults/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationsStatus/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/read",
        "Microsoft.RecoveryServices/Vaults/backupJobs/operationResults/read",
        "Microsoft.RecoveryServices/Vaults/backupJobs/read",
        "Microsoft.RecoveryServices/Vaults/backupJobsExport/action",
        "Microsoft.RecoveryServices/Vaults/backupOperationResults/read",
        "Microsoft.RecoveryServices/Vaults/backupPolicies/operationResults/read",
        "Microsoft.RecoveryServices/Vaults/backupPolicies/read",
        "Microsoft.RecoveryServices/Vaults/backupProtectedItems/read",
        "Microsoft.RecoveryServices/Vaults/backupProtectionContainers/read",
        "Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read",
        "Microsoft.RecoveryServices/Vaults/extendedInformation/read",
        "Microsoft.RecoveryServices/Vaults/monitoringAlerts/read",
        "Microsoft.RecoveryServices/Vaults/read",
        "Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read",
        "Microsoft.RecoveryServices/Vaults/registeredIdentities/read",
        "Microsoft.RecoveryServices/Vaults/backupstorageconfig/read",
        "Microsoft.RecoveryServices/Vaults/backupconfig/read",
        "Microsoft.RecoveryServices/Vaults/backupOperations/read",
        "Microsoft.RecoveryServices/Vaults/backupPolicies/operations/read",
        "Microsoft.RecoveryServices/Vaults/backupEngines/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/read",
        "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/items/read",
        "Microsoft.RecoveryServices/locations/backupStatus/action",
        "Microsoft.RecoveryServices/Vaults/monitoringConfigurations/*",
        "Microsoft.RecoveryServices/Vaults/monitoringAlerts/write",
        "Microsoft.RecoveryServices/operations/read",
        "Microsoft.RecoveryServices/locations/operationStatus/read",
        "Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read",
        "Microsoft.RecoveryServices/Vaults/usages/read",
        "Microsoft.RecoveryServices/locations/backupValidateFeatures/action",
        "Microsoft.RecoveryServices/locations/backupCrrJobs/action",
        "Microsoft.RecoveryServices/locations/backupCrrJob/action",
        "Microsoft.RecoveryServices/locations/backupCrrOperationResults/read",
        "Microsoft.RecoveryServices/locations/backupCrrOperationsStatus/read",
        "Microsoft.DataProtection/locations/getBackupStatus/action",
        "Microsoft.DataProtection/backupVaults/backupInstances/read",
        "Microsoft.DataProtection/backupVaults/deletedBackupInstances/read",
        "Microsoft.DataProtection/backupVaults/backupPolicies/read",
        "Microsoft.DataProtection/backupVaults/backupPolicies/read",
        "Microsoft.DataProtection/backupVaults/backupInstances/recoveryPoints/read",
        "Microsoft.DataProtection/backupVaults/backupInstances/recoveryPoints/read",
        "Microsoft.DataProtection/backupVaults/backupInstances/operationResults/read",
        "Microsoft.DataProtection/backupVaults/backupInstances/findRestorableTimeRanges/action",
        "Microsoft.DataProtection/backupVaults/read",
        "Microsoft.DataProtection/backupVaults/operationResults/read",
        "Microsoft.DataProtection/backupVaults/operationStatus/read",
        "Microsoft.DataProtection/backupVaults/read",
        "Microsoft.DataProtection/backupVaults/read",
        "Microsoft.DataProtection/locations/operationStatus/read",
        "Microsoft.DataProtection/locations/operationResults/read",
        "Microsoft.DataProtection/operations/read",
        "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/fetchCrossRegionRestoreJobs/action",
        "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/fetchCrossRegionRestoreJob/action",
        "Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/fetchSecondaryRecoveryPoints/action",
        "Microsoft.DataProtection/locations/checkFeatureSupport/action"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Backup Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Kontributor Akun Penyimpanan Klasik

Memungkinkan Anda mengelola akun penyimpanan klasik, tetapi tidak dapat mengaksesnya.

Tindakan	Deskripsi
Microsoft. Otorisasi/*/read	Membaca peran dan penetapan peran
Microsoft. ClassicStorage/storageAccounts/*
Microsoft. Wawasan/alertRules/*	Membuat dan mengelola pemberitahuan metrik klasik
Microsoft. ResourceHealth/availabilityStatuses/read	Mendapatkan status ketersediaan untuk semua sumber daya dalam lingkup yang ditentukan
Microsoft. Sumber daya/penyebaran/*	Membuat dan mengelola penyebaran
Microsoft. Sumber daya/subscriptions/resourceGroups/read	Mendapatkan atau mencantumkan grup sumber daya.
Microsoft. Dukungan/*	Membuat dan memperbarui tiket dukungan
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you manage classic storage accounts, but not access to them.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/86e8f5dc-a6e9-4c67-9d15-de283e8eac25",
  "name": "86e8f5dc-a6e9-4c67-9d15-de283e8eac25",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.ClassicStorage/storageAccounts/*",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Support/*"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Classic Storage Account Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Peran Layanan Operator Kunci Akun Penyimpanan Klasik

Operator Kunci Akun Penyimpanan Klasik diizinkan untuk mencantumkan dan membuat kunci pada Akun Penyimpanan Klasik

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. ClassicStorage/storageAccounts/listkeys/action
Microsoft. ClassicStorage/storageAccounts/regeneratekey/action
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Classic Storage Account Key Operators are allowed to list and regenerate keys on Classic Storage Accounts",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/985d6b00-f706-48f5-a6fe-d0ca12fb668d",
  "name": "985d6b00-f706-48f5-a6fe-d0ca12fb668d",
  "permissions": [
    {
      "actions": [
        "Microsoft.ClassicStorage/storageAccounts/listkeys/action",
        "Microsoft.ClassicStorage/storageAccounts/regeneratekey/action"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Classic Storage Account Key Operator Service Role",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Kontributor Data Box

Memungkinkan Anda mengelola semuanya dalam Layanan Data Box, kecuali memberikan akses kepada orang lain.

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Otorisasi/*/read	Membaca peran dan penetapan peran
Microsoft. ResourceHealth/availabilityStatuses/read	Mendapatkan status ketersediaan untuk semua sumber daya dalam lingkup yang ditentukan
Microsoft. Sumber daya/penyebaran/*	Membuat dan mengelola penyebaran
Microsoft. Sumber daya/subscriptions/resourceGroups/read	Mendapatkan atau mencantumkan grup sumber daya.
Microsoft. Dukungan/*	Membuat dan memperbarui tiket dukungan
Microsoft. Databox/*
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you manage everything under Data Box Service except giving access to others.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/add466c9-e687-43fc-8d98-dfcf8d720be5",
  "name": "add466c9-e687-43fc-8d98-dfcf8d720be5",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Support/*",
        "Microsoft.Databox/*"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Data Box Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pembaca Data Box

Memungkinkan Anda mengelola Layanan Data Box, kecuali membuat urutan atau mengedit detail urutan dan memberikan akses kepada orang lain.

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Otorisasi/*/read	Membaca peran dan penetapan peran
Microsoft. Kotak data/*/read
Microsoft. Databox/jobs/listsecrets/action
Microsoft. Databox/jobs/listcredentials/action	Mencantumkan mandat tak terenkripsi yang terkait dengan urutan.
Microsoft. Databox/locations/availableSkus/action	Metode ini mengembalikan daftar sku yang tersedia.
Microsoft. Databox/locations/validateInputs/action	Metode ini melakukan semua jenis validasi.
Microsoft. Databox/locations/regionConfiguration/action	Metode ini mengembalikan konfigurasi untuk wilayah.
Microsoft. Databox/locations/validateAddress/action	Memvalidasi alamat pengiriman dan memberikan alamat alternatif jika ada.
Microsoft. ResourceHealth/availabilityStatuses/read	Mendapatkan status ketersediaan untuk semua sumber daya dalam lingkup yang ditentukan
Microsoft. Dukungan/*	Membuat dan memperbarui tiket dukungan
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you manage Data Box Service except creating order or editing order details and giving access to others.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/028f4ed7-e2a9-465e-a8f4-9c0ffdfdc027",
  "name": "028f4ed7-e2a9-465e-a8f4-9c0ffdfdc027",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Databox/*/read",
        "Microsoft.Databox/jobs/listsecrets/action",
        "Microsoft.Databox/jobs/listcredentials/action",
        "Microsoft.Databox/locations/availableSkus/action",
        "Microsoft.Databox/locations/validateInputs/action",
        "Microsoft.Databox/locations/regionConfiguration/action",
        "Microsoft.Databox/locations/validateAddress/action",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Support/*"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Data Box Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pengembang Data Lake Analytics

Memungkinkan Anda mengirimkan, memantau, dan mengelola pekerjaan Anda sendiri tetapi tidak membuat atau menghapus akun Data Lake Analytics.

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Otorisasi/*/read	Membaca peran dan penetapan peran
Microsoft. BigAnalytics/accounts/*
Microsoft. DataLakeAnalytics/accounts/*
Microsoft. Wawasan/alertRules/*	Membuat dan mengelola pemberitahuan metrik klasik
Microsoft. ResourceHealth/availabilityStatuses/read	Mendapatkan status ketersediaan untuk semua sumber daya dalam lingkup yang ditentukan
Microsoft. Sumber daya/penyebaran/*	Membuat dan mengelola penyebaran
Microsoft. Sumber daya/subscriptions/resourceGroups/read	Mendapatkan atau mencantumkan grup sumber daya.
Microsoft. Dukungan/*	Membuat dan memperbarui tiket dukungan
NotActions
Microsoft. BigAnalytics/accounts/Delete
Microsoft. BigAnalytics/accounts/TakeOwnership/action
Microsoft. BigAnalytics/accounts/Write
Microsoft. DataLakeAnalytics/accounts/Delete	Menghapus akun DataLakeAnalytics.
Microsoft. DataLakeAnalytics/accounts/TakeOwnership/action	Memberikan izin untuk membatalkan pekerjaan yang dikirimkan oleh pengguna lain.
Microsoft. DataLakeAnalytics/accounts/Write	Membuat atau memperbarui akun DataLakeAnalytics.
Microsoft. DataLakeAnalytics/accounts/dataLakeStoreAccounts/Write	Membuat atau memperbarui akun DataLakeStore yang ditautkan dari akun DataLakeAnalytics.
Microsoft. DataLakeAnalytics/accounts/dataLakeStoreAccounts/Delete	Membatalkan tautan akun DataLakeStore dari akun DataLakeAnalytics.
Microsoft. DataLakeAnalytics/accounts/storageAccounts/Write	Membuat atau memperbarui akun Storage yang ditautkan dari akun DataLakeAnalytics.
Microsoft. DataLakeAnalytics/accounts/storageAccounts/Delete	Membatalkan tautan akun Azure Storage dari akun DataLakeAnalytics.
Microsoft. DataLakeAnalytics/accounts/firewallRules/Write	Membuat atau memperbarui aturan firewall.
Microsoft. DataLakeAnalytics/accounts/firewallRules/Delete	Menghapus aturan firewall.
Microsoft. DataLakeAnalytics/accounts/computePolicies/Write	Membuat atau memperbarui kebijakan komputasi.
Microsoft. DataLakeAnalytics/accounts/computePolicies/Delete	Menghapus kebijakan komputasi.
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you submit, monitor, and manage your own jobs but not create or delete Data Lake Analytics accounts.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/47b7735b-770e-4598-a7da-8b91488b4c88",
  "name": "47b7735b-770e-4598-a7da-8b91488b4c88",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.BigAnalytics/accounts/*",
        "Microsoft.DataLakeAnalytics/accounts/*",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Support/*"
      ],
      "notActions": [
        "Microsoft.BigAnalytics/accounts/Delete",
        "Microsoft.BigAnalytics/accounts/TakeOwnership/action",
        "Microsoft.BigAnalytics/accounts/Write",
        "Microsoft.DataLakeAnalytics/accounts/Delete",
        "Microsoft.DataLakeAnalytics/accounts/TakeOwnership/action",
        "Microsoft.DataLakeAnalytics/accounts/Write",
        "Microsoft.DataLakeAnalytics/accounts/dataLakeStoreAccounts/Write",
        "Microsoft.DataLakeAnalytics/accounts/dataLakeStoreAccounts/Delete",
        "Microsoft.DataLakeAnalytics/accounts/storageAccounts/Write",
        "Microsoft.DataLakeAnalytics/accounts/storageAccounts/Delete",
        "Microsoft.DataLakeAnalytics/accounts/firewallRules/Write",
        "Microsoft.DataLakeAnalytics/accounts/firewallRules/Delete",
        "Microsoft.DataLakeAnalytics/accounts/computePolicies/Write",
        "Microsoft.DataLakeAnalytics/accounts/computePolicies/Delete"
      ],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Data Lake Analytics Developer",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Defender untuk Pemindai Data Penyimpanan

Memberikan akses untuk membaca blob dan memperbarui tag indeks. Peran ini digunakan oleh pemindai data Defender untuk Penyimpanan.

Tindakan	Deskripsi
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/read	Daftar kontainer yang diperbarui
Microsoft. Penyimpanan/storageAccounts/blobServices/read	Mengembalikan properti layanan blob atau statistik
Microsoft. Penyimpanan/storageAccounts/fileServices/shares/read	Mencantumkan berbagi
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/read	Mengembalikan blob atau daftar blob
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/tags/write	Mengembalikan hasil penulisan tag blob
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/tags/read	Mengembalikan hasil pembacaan tag blob
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/delete	Mengembalikan hasil menghapus blob
Microsoft. Penyimpanan/storageAccounts/fileServices/fileshares/files/read	Mengembalikan file/folder atau daftar file/folder
Microsoft. Penyimpanan/storageAccounts/fileServices/readFileBackupSemantics/action	Membaca Hak Istimewa Semantik Pencadangan File
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Grants access to read blobs and update index tags. This role is used by the data scanner of Defender for Storage.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/1e7ca9b1-60d1-4db8-a914-f2ca1ff27c40",
  "name": "1e7ca9b1-60d1-4db8-a914-f2ca1ff27c40",
  "permissions": [
    {
      "actions": [
        "Microsoft.Storage/storageAccounts/blobServices/containers/read",
        "Microsoft.Storage/storageAccounts/blobServices/read",
        "Microsoft.Storage/storageAccounts/fileServices/shares/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read",
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/tags/write",
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/tags/read",
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete",
        "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read",
        "Microsoft.Storage/storageAccounts/fileServices/readFileBackupSemantics/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Defender for Storage Data Scanner",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Admin Jaringan ELASTIC SAN

Memungkinkan akses untuk membuat Titik Akhir Privat pada sumber daya SAN, dan untuk membaca sumber daya SAN

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. ElasticSan/elasticSans/*/read
Microsoft. ElasticSan/elasticSans/PrivateEndpointConnectionsApproval/action
Microsoft. ElasticSan/elasticSans/privateEndpointConnections/write
Microsoft. ElasticSan/elasticSans/privateEndpointConnections/delete
Microsoft. ElasticSan/locations/asyncoperations/read	Polling status operasi asinkron.
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows access to create Private Endpoints on SAN resources, and to read SAN resources",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/fa6cecf6-5db3-4c43-8470-c540bcb4eafa",
  "name": "fa6cecf6-5db3-4c43-8470-c540bcb4eafa",
  "permissions": [
    {
      "actions": [
        "Microsoft.ElasticSan/elasticSans/*/read",
        "Microsoft.ElasticSan/elasticSans/PrivateEndpointConnectionsApproval/action",
        "Microsoft.ElasticSan/elasticSans/privateEndpointConnections/write",
        "Microsoft.ElasticSan/elasticSans/privateEndpointConnections/delete",
        "Microsoft.ElasticSan/locations/asyncoperations/read"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Elastic SAN Network Admin",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pemilik SAN Elastis

Memungkinkan akses penuh ke semua sumber daya di bawah Azure Elastic SAN termasuk mengubah kebijakan keamanan jaringan untuk membuka blokir akses jalur data

Tindakan	Deskripsi
Microsoft. Otorisasi/*/read	Membaca peran dan penetapan peran
Microsoft. ResourceHealth/availabilityStatuses/read	Mendapatkan status ketersediaan untuk semua sumber daya dalam lingkup yang ditentukan
Microsoft. Sumber daya/penyebaran/*	Membuat dan mengelola penyebaran
Microsoft. Sumber daya/subscriptions/resourceGroups/read	Mendapatkan atau mencantumkan grup sumber daya.
Microsoft. ElasticSan/elasticSans/*
Microsoft. ElasticSan/locations/*
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows for full access to all resources under Azure Elastic SAN including changing network security policies to unblock data path access",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/80dcbedb-47ef-405d-95bd-188a1b4ac406",
  "name": "80dcbedb-47ef-405d-95bd-188a1b4ac406",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.ElasticSan/elasticSans/*",
        "Microsoft.ElasticSan/locations/*"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Elastic SAN Owner",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pembaca SAN Elastis

Memungkinkan akses baca jalur kontrol ke Azure Elastic SAN

Tindakan	Deskripsi
Microsoft. Otorisasi/roleAssignments/read	Mendapatkan informasi tentang penetapan peran.
Microsoft. Otorisasi/roleDefinitions/read	Mendapatkan informasi tentang definisi peran.
Microsoft. ResourceHealth/availabilityStatuses/read	Mendapatkan status ketersediaan untuk semua sumber daya dalam lingkup yang ditentukan
Microsoft. Sumber daya/subscriptions/resourceGroups/read	Mendapatkan atau mencantumkan grup sumber daya.
Microsoft. ElasticSan/elasticSans/*/read
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows for control path read access to Azure Elastic SAN",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/af6a70f8-3c9f-4105-acf1-d719e9fca4ca",
  "name": "af6a70f8-3c9f-4105-acf1-d719e9fca4ca",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/roleAssignments/read",
        "Microsoft.Authorization/roleDefinitions/read",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.ElasticSan/elasticSans/*/read"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Elastic SAN Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pemilik Grup Volume ELASTIC SAN

Memungkinkan akses penuh ke grup volume di Azure Elastic SAN termasuk mengubah kebijakan keamanan jaringan untuk membuka blokir akses jalur data

Tindakan	Deskripsi
Microsoft. Otorisasi/roleAssignments/read	Mendapatkan informasi tentang penetapan peran.
Microsoft. Otorisasi/roleDefinitions/read	Mendapatkan informasi tentang definisi peran.
Microsoft. ElasticSan/elasticSans/volumeGroups/*
Microsoft. ElasticSan/locations/asyncoperations/read	Polling status operasi asinkron.
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows for full access to a volume group in Azure Elastic SAN including changing network security policies to unblock data path access",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/a8281131-f312-4f34-8d98-ae12be9f0d23",
  "name": "a8281131-f312-4f34-8d98-ae12be9f0d23",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/roleAssignments/read",
        "Microsoft.Authorization/roleDefinitions/read",
        "Microsoft.ElasticSan/elasticSans/volumeGroups/*",
        "Microsoft.ElasticSan/locations/asyncoperations/read"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Elastic SAN Volume Group Owner",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Akses Data dan Pembaca

Memungkinkan Anda melihat semuanya tetapi tidak akan membiarkan Anda menghapus atau membuat akun penyimpanan atau sumber daya yang terkandung. Ini juga akan memungkinkan akses baca / tulis ke semua data yang terkandung dalam akun penyimpanan melalui akses ke kunci akun penyimpanan.

Tindakan	Deskripsi
Microsoft. Penyimpanan/storageAccounts/listKeys/action	Mengembalikan kunci akses untuk akun penyimpanan tertentu.
Microsoft. Penyimpanan/storageAccounts/ListAccountSas/action	Mengembalikan token SAS Akun untuk akun penyimpanan tertentu.
Microsoft. Penyimpanan/storageAccounts/read	Mengembalikan daftar akun penyimpanan atau mendapatkan properti untuk akun penyimpanan tertentu.
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you view everything but will not let you delete or create a storage account or contained resource. It will also allow read/write access to all data contained in a storage account via access to storage account keys.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/c12c1c16-33a1-487b-954d-41c89c60f349",
  "name": "c12c1c16-33a1-487b-954d-41c89c60f349",
  "permissions": [
    {
      "actions": [
        "Microsoft.Storage/storageAccounts/listKeys/action",
        "Microsoft.Storage/storageAccounts/ListAccountSas/action",
        "Microsoft.Storage/storageAccounts/read"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Reader and Data Access",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Kontributor Pencadangan Akun Penyimpanan

Memungkinkan Anda melakukan operasi pencadangan dan pemulihan menggunakan Azure Backup di akun penyimpanan.

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Otorisasi/*/read	Membaca peran dan penetapan peran
Microsoft. Otorisasi/locks/read	Mendapatkan kunci pada cakupan yang ditentukan.
Microsoft. Otorisasi/kunci/tulis	Menambahkan kunci pada cakupan yang ditentukan.
Microsoft. Otorisasi/locks/delete	Menghapus kunci pada cakupan yang ditentukan.
Microsoft. Fitur/features/read	Mendapatkan fitur langganan.
Microsoft. Fitur/providers/features/read	Mendapatkan fitur langganan di penyedia sumber daya tertentu.
Microsoft. Sumber daya/subscriptions/resourceGroups/read	Mendapatkan atau mencantumkan grup sumber daya.
Microsoft. Penyimpanan/operasi/baca	Polling status operasi asinkron.
Microsoft. Penyimpanan/storageAccounts/objectReplicationPolicies/delete	Menghapus kebijakan replikasi objek
Microsoft. Penyimpanan/storageAccounts/objectReplicationPolicies/read	Mencantumkan kebijakan replikasi objek
Microsoft. Penyimpanan/storageAccounts/objectReplicationPolicies/write	Membuat atau memperbarui kebijakan replikasi objek
Microsoft. Penyimpanan/storageAccounts/objectReplicationPolicies/restorePointMarkers/write	Membuat penanda titik pemulihan replikasi objek
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/read	Daftar kontainer yang diperbarui
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/write	Mengembalikan hasil dari wadah blob put
Microsoft. Penyimpanan/storageAccounts/blobServices/read	Mengembalikan properti layanan blob atau statistik
Microsoft. Penyimpanan/storageAccounts/blobServices/write	Mengembalikan hasil dari properti layanan blob put
Microsoft. Penyimpanan/storageAccounts/read	Mengembalikan daftar akun penyimpanan atau mendapatkan properti untuk akun penyimpanan tertentu.
Microsoft. Penyimpanan/storageAccounts/restoreBlobRanges/action	Kembalikan rentang blob ke keadaan pada waktu yang ditentukan
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you perform backup and restore operations using Azure Backup on the storage account.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/e5e2a7ff-d759-4cd2-bb51-3152d37e2eb1",
  "name": "e5e2a7ff-d759-4cd2-bb51-3152d37e2eb1",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Authorization/locks/read",
        "Microsoft.Authorization/locks/write",
        "Microsoft.Authorization/locks/delete",
        "Microsoft.Features/features/read",
        "Microsoft.Features/providers/features/read",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Storage/operations/read",
        "Microsoft.Storage/storageAccounts/objectReplicationPolicies/delete",
        "Microsoft.Storage/storageAccounts/objectReplicationPolicies/read",
        "Microsoft.Storage/storageAccounts/objectReplicationPolicies/write",
        "Microsoft.Storage/storageAccounts/objectReplicationPolicies/restorePointMarkers/write",
        "Microsoft.Storage/storageAccounts/blobServices/containers/read",
        "Microsoft.Storage/storageAccounts/blobServices/containers/write",
        "Microsoft.Storage/storageAccounts/blobServices/read",
        "Microsoft.Storage/storageAccounts/blobServices/write",
        "Microsoft.Storage/storageAccounts/read",
        "Microsoft.Storage/storageAccounts/restoreBlobRanges/action"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Storage Account Backup Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Kontributor Akun Penyimpanan

Mengizinkan pengelolaan akun penyimpanan. Menyediakan akses ke kunci akun, yang dapat digunakan untuk mengakses data melalui otorisasi Kunci Bersama.

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Otorisasi/*/read	Membaca peran dan penetapan peran
Microsoft. Wawasan/alertRules/*	Membuat dan mengelola pemberitahuan metrik klasik
Microsoft. Insight/diagnosticSettings/*	Membuat, memperbarui, atau membaca pengaturan diagnostik untuk Server Analisis
Microsoft. Jaringan/virtualNetworks/subnets/joinViaServiceEndpoint/action	Menggabungkan sumber daya seperti akun penyimpanan atau database SQL ke subnet. Tidak dapat diberi tahu.
Microsoft. ResourceHealth/availabilityStatuses/read	Mendapatkan status ketersediaan untuk semua sumber daya dalam lingkup yang ditentukan
Microsoft. Sumber daya/penyebaran/*	Membuat dan mengelola penyebaran
Microsoft. Sumber daya/subscriptions/resourceGroups/read	Mendapatkan atau mencantumkan grup sumber daya.
Microsoft. Penyimpanan/storageAccounts/*	Membuat dan mengelola akun penyimpanan
Microsoft. Dukungan/*	Membuat dan memperbarui tiket dukungan
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you manage storage accounts, including accessing storage account keys which provide full access to storage account data.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab",
  "name": "17d1049b-9a84-46fb-8f53-869881c3d3ab",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.Insights/diagnosticSettings/*",
        "Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Storage/storageAccounts/*",
        "Microsoft.Support/*"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Storage Account Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Peran Layanan Operator Kunci Akun Penyimpanan

Mengizinkan pencatatan dan regenerasi kunci akses akun penyimpanan.

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Penyimpanan/storageAccounts/listkeys/action	Mengembalikan kunci akses untuk akun penyimpanan tertentu.
Microsoft. Penyimpanan/storageAccounts/regeneratekey/action	Mengembalikan kunci akses untuk akun penyimpanan tertentu.
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Storage Account Key Operators are allowed to list and regenerate keys on Storage Accounts",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/81a9662b-bebf-436f-a333-f67b29880f12",
  "name": "81a9662b-bebf-436f-a333-f67b29880f12",
  "permissions": [
    {
      "actions": [
        "Microsoft.Storage/storageAccounts/listkeys/action",
        "Microsoft.Storage/storageAccounts/regeneratekey/action"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Storage Account Key Operator Service Role",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Operator Data Blob Tindakan Penyimpanan

Digunakan oleh Tindakan Penyimpanan - Tugas Penyimpanan untuk mencantumkan & melakukan operasi pada blob Akun Penyimpanan

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Otorisasi/*/read	Membaca peran dan penetapan peran
Microsoft. Wawasan/alertRules/*	Membuat dan mengelola pemberitahuan metrik klasik
Microsoft. Sumber daya/penyebaran/*	Membuat dan mengelola penyebaran
Microsoft. Sumber daya/subscriptions/resourceGroups/read	Mendapatkan atau mencantumkan grup sumber daya.
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/read	Daftar kontainer yang diperbarui
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/write	Mengembalikan hasil dari wadah blob put
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/read	Mengembalikan blob atau daftar blob
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/write	Mengembalikan hasil penulisan blob
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/delete	Mengembalikan hasil menghapus blob
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/add/action	Mengembalikan hasil penambahan konten blob
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/tags/read	Mengembalikan hasil pembacaan tag blob
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/tags/write	Mengembalikan hasil penulisan tag blob
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/runAsSuperUser/action	Mengembalikan hasil perintah blob
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/immutableStorage/runAsSuperUser/action
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Used by the Storage Actions - Storage Task to list & perform operations on the Storage Account blobs",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/4bad4d9e-2a13-4888-94bb-c8432f6f3040",
  "name": "4bad4d9e-2a13-4888-94bb-c8432f6f3040",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Storage/storageAccounts/blobServices/containers/read",
        "Microsoft.Storage/storageAccounts/blobServices/containers/write"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read",
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write",
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete",
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/add/action",
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/tags/read",
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/tags/write",
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/runAsSuperUser/action",
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/immutableStorage/runAsSuperUser/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Storage Actions Blob Data Operator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Kontributor Tindakan Penyimpanan

Digunakan oleh penulis Tindakan Penyimpanan untuk membuat, membaca, memperbarui, dan menghapus Tindakan Penyimpanan

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Otorisasi/*/read	Membaca peran dan penetapan peran
Microsoft. Wawasan/alertRules/*	Membuat dan mengelola pemberitahuan metrik klasik
Microsoft. Sumber daya/penyebaran/*	Membuat dan mengelola penyebaran
Microsoft. Sumber daya/subscriptions/resourceGroups/read	Mendapatkan atau mencantumkan grup sumber daya.
Microsoft. StorageActions/storageTasks/read	Mendapatkan properti untuk tugas penyimpanan yang ditentukan
Microsoft. StorageActions/storageTasks/write	Membuat atau memperbarui tugas penyimpanan
Microsoft. StorageActions/storageTasks/delete	Menghapus tugas penyimpanan yang ada
Microsoft. StorageActions/storageTasks/storageTaskAssignments/read	Mencantumkan semua tugas penyimpanan tugas penyimpanan
Microsoft. StorageActions/storageTasks/reports/read	Mencantumkan status eksekusi tugas penyimpanan
Microsoft. StorageActions/locations/previewActions/action	previewActions
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Used by the Storage Actions author to create, read, update, and delete Storage Actions",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/bd8acdb0-202c-4493-a7fe-ef98eefbfbc4",
  "name": "bd8acdb0-202c-4493-a7fe-ef98eefbfbc4",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.StorageActions/storageTasks/read",
        "Microsoft.StorageActions/storageTasks/write",
        "Microsoft.StorageActions/storageTasks/delete",
        "Microsoft.StorageActions/storageTasks/storageTaskAssignments/read",
        "Microsoft.StorageActions/storageTasks/reports/read",
        "Microsoft.StorageActions/locations/previewActions/action"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Storage Actions Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Kontributor Tugas Tindakan Penyimpanan

Digunakan oleh penugasan Tindakan Penyimpanan untuk membuat Tugas Pada Akun Penyimpanan target mereka, dengan hak istimewa RBAC untuk Identitas Terkelola

Menggunakan kondisi ABAC untuk membatasi penetapan peran.

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Otorisasi/*/read	Membaca peran dan penetapan peran
Microsoft. Wawasan/alertRules/*	Membuat dan mengelola pemberitahuan metrik klasik
Microsoft. Sumber daya/penyebaran/*	Membuat dan mengelola penyebaran
Microsoft. Sumber daya/subscriptions/resourceGroups/read	Mendapatkan atau mencantumkan grup sumber daya.
Microsoft. Penyimpanan/storageAccounts/reports/read
Microsoft. Penyimpanan/storageAccounts/read	Mengembalikan daftar akun penyimpanan atau mendapatkan properti untuk akun penyimpanan tertentu.
Microsoft. Penyimpanan/storageAccounts/blobServices/read	Mengembalikan properti layanan blob atau statistik
Microsoft. Penyimpanan/storageAccounts/storageTaskAssignments/read
Microsoft. Storage/storageAccounts/storageTaskAssignments/write
Microsoft. Penyimpanan/storageAccounts/storageTaskAssignments/delete
Microsoft. Penyimpanan/storageAccounts/storageTaskAssignments/reports/read
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada
Tindakan
Microsoft. Otorisasi/roleAssignments/write	Membuat penetapan peran pada cakupan yang ditentukan.
Microsoft. Otorisasi/roleAssignments/delete	Hapus penugasan peran pada cakupan yang ditentukan.
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada
Kondisi
((! (ActionMatches{'Microsoft. Otorisasi/roleAssignments/write'})) OR (@Request[Microsoft. Authorization/roleAssignments:RoleDefinitionId] ForAnyOfAnyValues:GuidEquals{4bad4d9e2a1348894bbc8432f6f3040})) AND ((!( ActionMatches{'Microsoft. Otorisasi/roleAssignments/delete'})) OR (@Resource[Microsoft. Authorization/roleAssignments:RoleDefinitionId] ForAnyOfAnyValues:GuidEquals{4bad4d9e2a1348894bbc8432f6f3040}))	Tambahkan atau hapus penetapan peran untuk peran berikut: Operator Data Blob Tindakan Penyimpanan

{
  "assignableScopes": [
    "/"
  ],
  "description": "Used by the Storage Actions assigner to create a Task Assignment on their target Storage Account, with RBAC privileges for Managed Identity",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/77789c21-1643-48a2-8f27-47f858540b51",
  "name": "77789c21-1643-48a2-8f27-47f858540b51",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Storage/storageAccounts/reports/read",
        "Microsoft.Storage/storageAccounts/read",
        "Microsoft.Storage/storageAccounts/blobServices/read",
        "Microsoft.Storage/storageAccounts/storageTaskAssignments/read",
        "Microsoft.Storage/storageAccounts/storageTaskAssignments/write",
        "Microsoft.Storage/storageAccounts/storageTaskAssignments/delete",
        "Microsoft.Storage/storageAccounts/storageTaskAssignments/reports/read"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    },
    {
      "actions": [
        "Microsoft.Authorization/roleAssignments/write",
        "Microsoft.Authorization/roleAssignments/delete"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": [],
      "conditionVersion": "2.0",
      "condition": "((!(ActionMatches{'Microsoft.Authorization/roleAssignments/write'})) OR (@Request[Microsoft.Authorization/roleAssignments:RoleDefinitionId] ForAnyOfAnyValues:GuidEquals{4bad4d9e2a13488894bbc8432f6f3040})) AND ((!(ActionMatches{'Microsoft.Authorization/roleAssignments/delete'})) OR (@Resource[Microsoft.Authorization/roleAssignments:RoleDefinitionId] ForAnyOfAnyValues:GuidEquals{4bad4d9e2a13488894bbc8432f6f3040}))"
    }
  ],
  "roleName": "Storage Actions Task Assignment Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Kontributor Data Blob Penyimpanan

Membaca, menulis, dan menghapus kontainer dan blob Azure Storage. Untuk mempelajari tindakan mana yang diperlukan untuk operasi data tertentu, lihat Izin untuk memanggil operasi data.

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/delete	Hapus kontainer.
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/read	Mengembalikan kontainer atau daftar kontainer.
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/write	Mengubah metadata atau properti kontainer.
Microsoft. Penyimpanan/storageAccounts/blobServices/generateUserDelegationKey/action	Mengembalikan kunci delegasi pengguna untuk Blob service.
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/delete	Hapus blob.
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/read	Mengembalikan blob atau daftar blob.
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/write	Menulis ke blob.
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/move/action	Memindahkan blob dari satu jalur ke jalur lainnya
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/add/action	Mengembalikan hasil penambahan konten blob
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows for read, write and delete access to Azure Storage blob containers and data",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/ba92f5b4-2d11-453d-a403-e96b0029c9fe",
  "name": "ba92f5b4-2d11-453d-a403-e96b0029c9fe",
  "permissions": [
    {
      "actions": [
        "Microsoft.Storage/storageAccounts/blobServices/containers/delete",
        "Microsoft.Storage/storageAccounts/blobServices/containers/read",
        "Microsoft.Storage/storageAccounts/blobServices/containers/write",
        "Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete",
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read",
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write",
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/move/action",
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/add/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Storage Blob Data Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pemilik Data Blob Penyimpanan

Menyediakan akses penuh ke kontainer dan data blob Azure Storage, termasuk menetapkan kontrol akses POSIX. Untuk mempelajari tindakan mana yang diperlukan untuk operasi data tertentu, lihat Izin untuk memanggil operasi data.

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/*	Izin penuh pada kontainer.
Microsoft. Penyimpanan/storageAccounts/blobServices/generateUserDelegationKey/action	Mengembalikan kunci delegasi pengguna untuk Blob service.
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/*	Izin penuh pada blob.
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows for full access to Azure Storage blob containers and data, including assigning POSIX access control.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/b7e6dc6d-f1e8-4753-8033-0f276bb0955b",
  "name": "b7e6dc6d-f1e8-4753-8033-0f276bb0955b",
  "permissions": [
    {
      "actions": [
        "Microsoft.Storage/storageAccounts/blobServices/containers/*",
        "Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Storage Blob Data Owner",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pembaca Data Blob Penyimpanan

Membaca dan mencantumkan kontainer dan blob Azure Storage. Untuk mempelajari tindakan mana yang diperlukan untuk operasi data tertentu, lihat Izin untuk memanggil operasi data.

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/read	Mengembalikan kontainer atau daftar kontainer.
Microsoft. Penyimpanan/storageAccounts/blobServices/generateUserDelegationKey/action	Mengembalikan kunci delegasi pengguna untuk Blob service.
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/read	Mengembalikan blob atau daftar blob.
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows for read access to Azure Storage blob containers and data",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/2a2b9908-6ea1-4ae2-8e65-a410df84e7d1",
  "name": "2a2b9908-6ea1-4ae2-8e65-a410df84e7d1",
  "permissions": [
    {
      "actions": [
        "Microsoft.Storage/storageAccounts/blobServices/containers/read",
        "Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Storage Blob Data Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Delegator Blob Penyimpanan

Dapatkan kunci delegasi pengguna, yang kemudian dapat digunakan untuk membuat tanda tangan akses bersama untuk kontainer atau blob yang ditandatangani dengan kredensial ad Azure. Untuk informasi selengkapnya, lihat Membuat delegasi pengguna SAS.

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Penyimpanan/storageAccounts/blobServices/generateUserDelegationKey/action	Mengembalikan kunci delegasi pengguna untuk Blob service.
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows for generation of a user delegation key which can be used to sign SAS tokens",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/db58b8e5-c6ad-4a2a-8342-4190687cbf4a",
  "name": "db58b8e5-c6ad-4a2a-8342-4190687cbf4a",
  "permissions": [
    {
      "actions": [
        "Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Storage Blob Delegator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Kontributor Konektor Penyimpanan

Memungkinkan pembuatan dan pengelolaan konektor penyimpanan untuk mengakses sumber data jarak jauh di tempat di akun penyimpanan. Peran ini dalam pratinjau dan dapat berubah.

Tindakan	Deskripsi
Microsoft. Otorisasi/*/read	Membaca peran dan penetapan peran
Microsoft. Wawasan/alertRules/*	Membuat dan mengelola pemberitahuan metrik klasik
Microsoft. Sumber daya/penyebaran/*	Membuat dan mengelola penyebaran
Microsoft. Sumber daya/subscriptions/resourceGroups/read	Mendapatkan atau mencantumkan grup sumber daya.
Microsoft. Penyimpanan/storageAccounts/read	Mengembalikan daftar akun penyimpanan atau mendapatkan properti untuk akun penyimpanan tertentu.
Microsoft. Penyimpanan/storageAccounts/listServiceSas/action	Mengembalikan token SAS Layanan untuk akun penyimpanan yang ditentukan.
Microsoft. Penyimpanan/storageAccounts/blobServices/read	Mengembalikan properti layanan blob atau statistik
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/read	Daftar kontainer yang diperbarui
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/write	Mengembalikan hasil dari wadah blob put
Microsoft. Penyimpanan/locations/DataManagementRPOperationStatuses/read	Mendapatkan status operasi DataManagamentRP
Microsoft. Penyimpanan/locations/DataManagementRPOperationStatuses/write	Membuat atau memperbarui status operasi DataManagamentRP
Microsoft. Penyimpanan/storageAccounts/connectors/read	Mengembalikan daftar konektor penyimpanan atau mendapatkan properti konektor penyimpanan tertentu.
Microsoft. Penyimpanan/storageAccounts/connectors/delete	Menghapus konektor penyimpanan.
Microsoft. Penyimpanan/storageAccounts/connectors/write	Membuat atau memperbarui konektor penyimpanan.
Microsoft. Penyimpanan/storageAccounts/connectors/testExistingConnection/action	Uji koneksi konektor penyimpanan yang ada.
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/read	Mengembalikan blob atau daftar blob
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/write	Mengembalikan hasil penulisan blob
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows creating and managing storage connectors to access remote data sources in-place in a storage account. This role is in preview and subject to change.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/9d819e60-1b9f-4871-b492-4e6cdee0b50a",
  "name": "9d819e60-1b9f-4871-b492-4e6cdee0b50a",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Storage/storageAccounts/read",
        "Microsoft.Storage/storageAccounts/listServiceSas/action",
        "Microsoft.Storage/storageAccounts/blobServices/read",
        "Microsoft.Storage/storageAccounts/blobServices/containers/read",
        "Microsoft.Storage/storageAccounts/blobServices/containers/write",
        "Microsoft.Storage/locations/DataManagementRPOperationStatuses/read",
        "Microsoft.Storage/locations/DataManagementRPOperationStatuses/write",
        "Microsoft.Storage/storageAccounts/connectors/read",
        "Microsoft.Storage/storageAccounts/connectors/delete",
        "Microsoft.Storage/storageAccounts/connectors/write",
        "Microsoft.Storage/storageAccounts/connectors/testExistingConnection/action"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read",
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Storage Connector Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Kontributor Storage DataShare

Memungkinkan membuat dan mengelola data penyimpananShares untuk berbagi data dari akun penyimpanan di tempat. Peran ini dalam pratinjau dan dapat berubah.

Tindakan	Deskripsi
Microsoft. Otorisasi/*/read	Membaca peran dan penetapan peran
Microsoft. Wawasan/alertRules/*	Membuat dan mengelola pemberitahuan metrik klasik
Microsoft. Sumber daya/penyebaran/*	Membuat dan mengelola penyebaran
Microsoft. Sumber daya/subscriptions/resourceGroups/read	Mendapatkan atau mencantumkan grup sumber daya.
Microsoft. Penyimpanan/storageAccounts/read	Mengembalikan daftar akun penyimpanan atau mendapatkan properti untuk akun penyimpanan tertentu.
Microsoft. Penyimpanan/storageAccounts/listServiceSas/action	Mengembalikan token SAS Layanan untuk akun penyimpanan yang ditentukan.
Microsoft. Penyimpanan/storageAccounts/blobServices/read	Mengembalikan properti layanan blob atau statistik
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/read	Daftar kontainer yang diperbarui
Microsoft. Penyimpanan/locations/DataManagementRPOperationStatuses/read	Mendapatkan status operasi DataManagamentRP
Microsoft. Penyimpanan/locations/DataManagementRPOperationStatuses/write	Membuat atau memperbarui status operasi DataManagamentRP
Microsoft. Penyimpanan/storageAccounts/dataShares/read	Mengembalikan daftar berbagi data penyimpanan atau mendapatkan properti berbagi data penyimpanan tertentu.
Microsoft. Penyimpanan/storageAccounts/dataShares/delete	Menghapus berbagi data penyimpanan.
Microsoft. Penyimpanan/storageAccounts/dataShares/write	Membuat atau memperbarui berbagi data penyimpanan.
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/blobServices/containers/blobs/read	Mengembalikan blob atau daftar blob
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows creating and managing storage dataShares to share data from storage accounts in-place. This role is in preview and subject to change.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/35c49d44-ccc1-4b18-8267-cfb3bacdd396",
  "name": "35c49d44-ccc1-4b18-8267-cfb3bacdd396",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Storage/storageAccounts/read",
        "Microsoft.Storage/storageAccounts/listServiceSas/action",
        "Microsoft.Storage/storageAccounts/blobServices/read",
        "Microsoft.Storage/storageAccounts/blobServices/containers/read",
        "Microsoft.Storage/locations/DataManagementRPOperationStatuses/read",
        "Microsoft.Storage/locations/DataManagementRPOperationStatuses/write",
        "Microsoft.Storage/storageAccounts/dataShares/read",
        "Microsoft.Storage/storageAccounts/dataShares/delete",
        "Microsoft.Storage/storageAccounts/dataShares/write"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Storage DataShare Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Storage File Data Privileged Reader

Memungkinkan untuk membaca, menulis, menghapus, dan memodifikasi ACL pada file/direktori dalam berbagi file Azure dengan mengambil alih izin ACL/NTFS yang ada. Peran ini tidak memiliki bawaan yang setara pada server file Windows.

Tindakan	Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/fileServices/fileshares/files/read	Mengembalikan file/folder atau daftar file/folder
Microsoft. Penyimpanan/storageAccounts/fileServices/fileshares/files/write	Mengembalikan hasil penulisan file atau pembuatan folder
Microsoft. Penyimpanan/storageAccounts/fileServices/fileshares/files/delete	Mengembalikan hasil penghapusan file/folder
Microsoft. Penyimpanan/storageAccounts/fileServices/fileshares/files/modifypermissions/action	Mengembalikan hasil dari mengubah izin pada file/folder
Microsoft. Penyimpanan/storageAccounts/fileServices/readFileBackupSemantics/action	Membaca Hak Istimewa Semantik Pencadangan File
Microsoft. Penyimpanan/storageAccounts/fileServices/writeFileBackupSemantics/action	Menulis Hak Istimewa Semantik Pencadangan File
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Customer has read, write, delete and modify NTFS permission access on Azure Storage file shares.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/69566ab7-960f-475b-8e7c-b3118f30c6bd",
  "name": "69566ab7-960f-475b-8e7c-b3118f30c6bd",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read",
        "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/write",
        "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/delete",
        "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/modifypermissions/action",
        "Microsoft.Storage/storageAccounts/fileServices/readFileBackupSemantics/action",
        "Microsoft.Storage/storageAccounts/fileServices/writeFileBackupSemantics/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Storage File Data Privileged Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pembaca Data File Penyimpanan Izin Khusus

Memungkinkan akses baca pada file/direktori dalam berbagi file Azure dengan mengambil alih izin ACL/NTFS yang ada. Peran ini tidak memiliki bawaan yang setara pada server file Windows.

Tindakan	Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/fileServices/fileshares/files/read	Mengembalikan file/folder atau daftar file/folder
Microsoft. Penyimpanan/storageAccounts/fileServices/readFileBackupSemantics/action	Membaca Hak Istimewa Semantik Pencadangan File
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Customer has read access on Azure Storage file shares.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/b8eda974-7b85-4f76-af95-65846b26df6d",
  "name": "b8eda974-7b85-4f76-af95-65846b26df6d",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read",
        "Microsoft.Storage/storageAccounts/fileServices/readFileBackupSemantics/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Storage File Data Privileged Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Admin SMB Data File Penyimpanan

Memungkinkan akses admin yang setara dengan kunci akun penyimpanan untuk pengguna akhir melalui SMB.

Tindakan	Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/fileServices/fileshares/files/read	Mengembalikan file/folder atau daftar file/folder
Microsoft. Penyimpanan/storageAccounts/fileServices/fileshares/files/write	Mengembalikan hasil penulisan file atau pembuatan folder
Microsoft. Penyimpanan/storageAccounts/fileServices/fileshares/files/delete	Mengembalikan hasil penghapusan file/folder
Microsoft. Penyimpanan/storageAccounts/fileServices/fileshares/files/modifypermissions/action	Mengembalikan hasil dari mengubah izin pada file/folder
Microsoft. Penyimpanan/storageAccounts/fileServices/readFileBackupSemantics/action	Membaca Hak Istimewa Semantik Pencadangan File
Microsoft. Penyimpanan/storageAccounts/fileServices/writeFileBackupSemantics/action	Menulis Hak Istimewa Semantik Pencadangan File
Microsoft. Penyimpanan/storageAccounts/fileServices/takeOwnership/action	Hak Istimewa Kepemilikan Ambil File
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows for admin access equivalent to storage account key for end users over SMB.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/bbf004e3-0e4b-4f86-ae4f-1f8fb47b357b",
  "name": "bbf004e3-0e4b-4f86-ae4f-1f8fb47b357b",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read",
        "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/write",
        "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/delete",
        "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/modifypermissions/action",
        "Microsoft.Storage/storageAccounts/fileServices/readFileBackupSemantics/action",
        "Microsoft.Storage/storageAccounts/fileServices/writeFileBackupSemantics/action",
        "Microsoft.Storage/storageAccounts/fileServices/takeOwnership/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Storage File Data SMB Admin",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Data File Penyimpanan SMB MI Admin

Memungkinkan akses tingkat admin untuk identitas terkelola pada file/direktori dalam berbagi file Azure.

Tindakan	Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/fileServices/readFileBackupSemantics/action	Membaca Hak Istimewa Semantik Pencadangan File
Microsoft. Penyimpanan/storageAccounts/fileServices/writeFileBackupSemantics/action	Menulis Hak Istimewa Semantik Pencadangan File
Microsoft. Penyimpanan/storageAccounts/fileServices/takeOwnership/action	Hak Istimewa Kepemilikan Ambil File
Microsoft. Penyimpanan/storageAccounts/fileServices/runAsBuiltInFileAdministrator/action	Izin yang memberikan hak istimewa admin bawaan untuk pemasangan berbagi file melalui identitas terkelola
Microsoft. Penyimpanan/storageAccounts/fileServices/fileshares/files/read	Mengembalikan file/folder atau daftar file/folder
Microsoft. Penyimpanan/storageAccounts/fileServices/fileshares/files/write	Mengembalikan hasil penulisan file atau pembuatan folder
Microsoft. Penyimpanan/storageAccounts/fileServices/fileshares/files/delete	Mengembalikan hasil penghapusan file/folder
Microsoft. Penyimpanan/storageAccounts/fileServices/fileshares/files/modifypermissions/action	Mengembalikan hasil dari mengubah izin pada file/folder
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows for admin-level access for managed identities on files/directories in Azure file shares.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/a235d3ee-5935-4cfb-8cc5-a3303ad5995e",
  "name": "a235d3ee-5935-4cfb-8cc5-a3303ad5995e",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/fileServices/readFileBackupSemantics/action",
        "Microsoft.Storage/storageAccounts/fileServices/writeFileBackupSemantics/action",
        "Microsoft.Storage/storageAccounts/fileServices/takeOwnership/action",
        "Microsoft.Storage/storageAccounts/fileServices/runAsBuiltInFileAdministrator/action",
        "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read",
        "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/write",
        "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/delete",
        "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/modifypermissions/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Storage File Data SMB MI Admin",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Kontributor Berbagi SMB Data File Penyimpanan

Memungkinkan untuk membaca, menulis, dan menghapus akses pada file/direktori di berbagi file Azure. Peran ini tidak memiliki bawaan yang setara pada server file Windows.

Pelajari lebih lanjut

Tindakan	Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/fileServices/fileshares/files/read	Mengembalikan file/folder atau daftar file/folder.
Microsoft. Penyimpanan/storageAccounts/fileServices/fileshares/files/write	Mengembalikan hasil penulisan file atau membuat folder.
Microsoft. Penyimpanan/storageAccounts/fileServices/fileshares/files/delete	Mengembalikan hasil menghapus file/folder.
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows for read, write, and delete access in Azure Storage file shares over SMB",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/0c867c2a-1d8c-454a-a3db-ab2ea1bdc8bb",
  "name": "0c867c2a-1d8c-454a-a3db-ab2ea1bdc8bb",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read",
        "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/write",
        "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/delete"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Storage File Data SMB Share Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Kontributor Lanjutan Berbagi SMB Data File Penyimpanan

Memungkinkan untuk membaca, menulis, menghapus, dan memodifikasi ACL pada file/direktori di berbagi file Azure. Peran ini setara dengan berbagi file ACL perubahan pada server file Windows.

Pelajari lebih lanjut

Tindakan	Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/fileServices/fileshares/files/read	Mengembalikan file/folder atau daftar file/folder.
Microsoft. Penyimpanan/storageAccounts/fileServices/fileshares/files/write	Mengembalikan hasil penulisan file atau membuat folder.
Microsoft. Penyimpanan/storageAccounts/fileServices/fileshares/files/delete	Mengembalikan hasil menghapus file/folder.
Microsoft. Penyimpanan/storageAccounts/fileServices/fileshares/files/modifypermissions/action	Mengembalikan hasil dari mengubah izin pada file/folder.
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows for read, write, delete and modify NTFS permission access in Azure Storage file shares over SMB",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/a7264617-510b-434b-a828-9731dc254ea7",
  "name": "a7264617-510b-434b-a828-9731dc254ea7",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read",
        "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/write",
        "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/delete",
        "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/modifypermissions/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Storage File Data SMB Share Elevated Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pembaca Berbagi SMB Data File Penyimpanan

Memungkinkan akses baca pada file/direktori dalam berbagi file Azure. Peran ini setara dengan berbagi file ACL baca di server file Windows.

Pelajari lebih lanjut

Tindakan	Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/fileServices/fileshares/files/read	Mengembalikan file/folder atau daftar file/folder.
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows for read access to Azure File Share over SMB",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/aba4ae5f-2193-4029-9191-0cb91df5e314",
  "name": "aba4ae5f-2193-4029-9191-0cb91df5e314",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Storage File Data SMB Share Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Data File Penyimpanan SMB Mengambil Kepemilikan

Memungkinkan pengguna akhir untuk mengasumsikan kepemilikan file/direktori

Tindakan	Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/fileServices/takeOwnership/action	Hak Istimewa Kepemilikan Ambil File
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows end user to assume ownership of a file/directory",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/5d9bac3f-34b2-432f-bde5-78aa8e73ce6b",
  "name": "5d9bac3f-34b2-432f-bde5-78aa8e73ce6b",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/fileServices/takeOwnership/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Storage File Data SMB Take Ownership",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Delegator File Penyimpanan

Dapatkan kunci delegasi pengguna, yang kemudian dapat digunakan untuk membuat tanda tangan akses bersama untuk file atau berbagi file Azure yang ditandatangani dengan kredensial ad Azure. Untuk informasi selengkapnya, lihat Membuat delegasi pengguna SAS.

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Penyimpanan/storageAccounts/fileServices/generateUserDelegationKey/action	Mengembalikan kunci delegasi pengguna untuk layanan file
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows for generation of a user delegation key, which can then be used to create a shared access signature for a file or Azure file share that is signed with Entra ID credentials.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/765a04e0-5de8-4bb2-9bf6-b2a30bc03e91",
  "name": "765a04e0-5de8-4bb2-9bf6-b2a30bc03e91",
  "permissions": [
    {
      "actions": [
        "Microsoft.Storage/storageAccounts/fileServices/generateUserDelegationKey/action"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Storage File Delegator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Kontributor Data Antrean Penyimpanan

Membaca, menulis, dan menghapus antrean Azure Storage dan pesan antrean. Untuk mempelajari tindakan mana yang diperlukan untuk operasi data tertentu, lihat Izin untuk memanggil operasi data.

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Penyimpanan/storageAccounts/queueServices/queues/delete	Hapus antrean.
Microsoft. Penyimpanan/storageAccounts/queueServices/queues/read	Mengembalikan antrean atau daftar antrean.
Microsoft. Penyimpanan/storageAccounts/queueServices/queues/write	Mengubah metadata atau properti antrean.
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/queueServices/queues/messages/delete	Menghapus satu atau beberapa pesan dari antrean.
Microsoft. Penyimpanan/storageAccounts/queueServices/queues/messages/read	Mengintip atau mengambil satu atau beberapa pesan dari antrean.
Microsoft. Penyimpanan/storageAccounts/queueServices/queues/messages/write	Kirim pesan ke antrean.
Microsoft. Penyimpanan/storageAccounts/queueServices/queues/messages/process/action	Mengembalikan hasil pemrosesan pesan
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows for read, write, and delete access to Azure Storage queues and queue messages",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/974c5e8b-45b9-4653-ba55-5f855dd0fb88",
  "name": "974c5e8b-45b9-4653-ba55-5f855dd0fb88",
  "permissions": [
    {
      "actions": [
        "Microsoft.Storage/storageAccounts/queueServices/queues/delete",
        "Microsoft.Storage/storageAccounts/queueServices/queues/read",
        "Microsoft.Storage/storageAccounts/queueServices/queues/write"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/queueServices/queues/messages/delete",
        "Microsoft.Storage/storageAccounts/queueServices/queues/messages/read",
        "Microsoft.Storage/storageAccounts/queueServices/queues/messages/write",
        "Microsoft.Storage/storageAccounts/queueServices/queues/messages/process/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Storage Queue Data Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pemroses Pesan Data Antrean Penyimpanan

Mengintip, mengambil, dan menghapus pesan dari antrean Azure Storage. Untuk mempelajari tindakan mana yang diperlukan untuk operasi data tertentu, lihat Izin untuk memanggil operasi data.

Pelajari lebih lanjut

Tindakan	Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/queueServices/queues/messages/read	Mengintip pesan.
Microsoft. Penyimpanan/storageAccounts/queueServices/queues/messages/process/action	Mengambil dan menghapus pesan.
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows for peek, receive, and delete access to Azure Storage queue messages",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/8a0f0c08-91a1-4084-bc3d-661d67233fed",
  "name": "8a0f0c08-91a1-4084-bc3d-661d67233fed",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/queueServices/queues/messages/read",
        "Microsoft.Storage/storageAccounts/queueServices/queues/messages/process/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Storage Queue Data Message Processor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pengirim Pesan Data pada Antrian Penyimpanan

Tambahkan pesan ke antrean Azure Storage. Untuk mempelajari tindakan mana yang diperlukan untuk operasi data tertentu, lihat Izin untuk memanggil operasi data.

Pelajari lebih lanjut

Tindakan	Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/queueServices/queues/messages/add/action	Kirim pesan ke antrean.
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows for sending of Azure Storage queue messages",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/c6a89b2d-59bc-44d0-9896-0f6e12d7b80a",
  "name": "c6a89b2d-59bc-44d0-9896-0f6e12d7b80a",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/queueServices/queues/messages/add/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Storage Queue Data Message Sender",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pembaca Data Antrean Penyimpanan

Membaca dan mencantumkan antrean Azure Storage dan pesan antrean. Untuk mempelajari tindakan mana yang diperlukan untuk operasi data tertentu, lihat Izin untuk memanggil operasi data.

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Penyimpanan/storageAccounts/queueServices/queues/read	Mengembalikan antrean atau daftar antrean.
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/queueServices/queues/messages/read	Mengintip atau mengambil satu atau beberapa pesan dari antrean.
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows for read access to Azure Storage queues and queue messages",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/19e7f393-937e-4f77-808e-94535e297925",
  "name": "19e7f393-937e-4f77-808e-94535e297925",
  "permissions": [
    {
      "actions": [
        "Microsoft.Storage/storageAccounts/queueServices/queues/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/queueServices/queues/messages/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Storage Queue Data Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Delegator Antrean Penyimpanan

Dapatkan kunci delegasi pengguna, yang kemudian dapat digunakan untuk membuat tanda tangan akses bersama untuk antrean Azure Storage yang ditandatangani dengan kredensial ad Azure. Untuk informasi selengkapnya, lihat Membuat delegasi pengguna SAS.

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Penyimpanan/storageAccounts/queueServices/generateUserDelegationKey/action	Mengembalikan kunci delegasi pengguna untuk layanan antrean
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows for generation of a user delegation key, which can then be used to create a shared access signature for an Azure Storage queue that is signed with Entra ID credentials.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/7ee386e9-84f0-448e-80a6-f185f6533131",
  "name": "7ee386e9-84f0-448e-80a6-f185f6533131",
  "permissions": [
    {
      "actions": [
        "Microsoft.Storage/storageAccounts/queueServices/generateUserDelegationKey/action"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Storage Queue Delegator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Kontributor Data Tabel Penyimpanan

Memungkinkan akses baca, tulis, dan hapus ke tabel dan entitas Azure Storage

Tindakan	Deskripsi
Microsoft. Penyimpanan/storageAccounts/tableServices/tables/read	Kueri tabel
Microsoft. Penyimpanan/storageAccounts/tableServices/tables/write	Membuat tabel
Microsoft. Penyimpanan/storageAccounts/tableServices/tables/delete	Menghapus tabel
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/tableServices/tables/entities/read	Mengkueri entitas tabel
Microsoft. Penyimpanan/storageAccounts/tableServices/tables/entities/write	Menyisipkan, menggabungkan, atau mengganti entitas tabel
Microsoft. Penyimpanan/storageAccounts/tableServices/tables/entities/delete	Menghapus entitas tabel
Microsoft. Penyimpanan/storageAccounts/tableServices/tables/entities/add/action	Menyisipkan entitas tabel
Microsoft. Penyimpanan/storageAccounts/tableServices/tables/entities/update/action	Menggabungkan atau memperbarui entitas tabel
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows for read, write and delete access to Azure Storage tables and entities",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/0a9a7e1f-b9d0-4cc4-a60d-0319b160aaa3",
  "name": "0a9a7e1f-b9d0-4cc4-a60d-0319b160aaa3",
  "permissions": [
    {
      "actions": [
        "Microsoft.Storage/storageAccounts/tableServices/tables/read",
        "Microsoft.Storage/storageAccounts/tableServices/tables/write",
        "Microsoft.Storage/storageAccounts/tableServices/tables/delete"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/tableServices/tables/entities/read",
        "Microsoft.Storage/storageAccounts/tableServices/tables/entities/write",
        "Microsoft.Storage/storageAccounts/tableServices/tables/entities/delete",
        "Microsoft.Storage/storageAccounts/tableServices/tables/entities/add/action",
        "Microsoft.Storage/storageAccounts/tableServices/tables/entities/update/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Storage Table Data Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pembaca Data Tabel Penyimpanan

Memungkinkan akses baca ke tabel dan entitas Azure Storage

Tindakan	Deskripsi
Microsoft. Penyimpanan/storageAccounts/tableServices/tables/read	Kueri tabel
NotActions
Tidak ada
DataActions
Microsoft. Penyimpanan/storageAccounts/tableServices/tables/entities/read	Mengkueri entitas tabel
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows for read access to Azure Storage tables and entities",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/76199698-9eea-4c19-bc75-cec21354c6b6",
  "name": "76199698-9eea-4c19-bc75-cec21354c6b6",
  "permissions": [
    {
      "actions": [
        "Microsoft.Storage/storageAccounts/tableServices/tables/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.Storage/storageAccounts/tableServices/tables/entities/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Storage Table Data Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Delegator Tabel Penyimpanan

Dapatkan kunci delegasi pengguna, yang kemudian dapat digunakan untuk membuat tanda tangan akses bersama untuk tabel Azure Storage yang ditandatangani dengan kredensial ad Azure. Untuk informasi selengkapnya, lihat Membuat delegasi pengguna SAS.

Pelajari lebih lanjut

Tindakan	Deskripsi
Microsoft. Penyimpanan/storageAccounts/tableServices/generateUserDelegationKey/action	Mengembalikan kunci delegasi pengguna untuk layanan tabel
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows for generation of a user delegation key, which can then be used to create a shared access signature for an Azure Storage table that is signed with Entra ID credentials.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/965033a5-c8eb-4f35-b82f-fef460a3606d",
  "name": "965033a5-c8eb-4f35-b82f-fef460a3606d",
  "permissions": [
    {
      "actions": [
        "Microsoft.Storage/storageAccounts/tableServices/generateUserDelegationKey/action"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Storage Table Delegator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Langkah berikutnya

• peran Azure Assign menggunakan portal Azure