Bagikan melalui


Peran bawaan Azure untuk Web dan Seluler

Artikel ini mencantumkan peran bawaan Azure dalam kategori Web dan Seluler.

Kontributor Data Azure Maps

Memberikan akses baca, tulis, dan hapus ke data terkait peta dari akun Azure maps.

Pelajari lebih lanjut

Tindakan Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft.Maps/akun/*/baca
Microsoft.Maps/akun/*/tulis
Microsoft.Maps/akun/*/hapus
Microsoft.Maps/accounts/*/action
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Grants access to read, write, and delete access to map related data from an Azure maps account.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/8f5e0ce6-4f7b-4dcf-bddf-e6f48634a204",
  "name": "8f5e0ce6-4f7b-4dcf-bddf-e6f48634a204",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.Maps/accounts/*/read",
        "Microsoft.Maps/accounts/*/write",
        "Microsoft.Maps/accounts/*/delete",
        "Microsoft.Maps/accounts/*/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Azure Maps Data Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pembaca Data Azure Maps

Memberikan akses untuk membaca data terkait peta dari akun Azure maps.

Pelajari lebih lanjut

Tindakan Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft.Maps/akun/*/baca
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Grants access to read map related data from an Azure maps account.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/423170ca-a8f6-4b0f-8487-9e4eb8f49bfa",
  "name": "423170ca-a8f6-4b0f-8487-9e4eb8f49bfa",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.Maps/accounts/*/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Azure Maps Data Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pencarian Azure Maps dan Render Pembaca Data

Memberikan akses ke kumpulan API data yang sangat terbatas untuk skenario SDK web visual umum. Secara khusus, render dan cari API data.

Pelajari lebih lanjut

Tindakan Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft.Maps/accounts/services/render/read Memungkinkan pembacaan data untuk layanan Render.
Microsoft.Maps/accounts/services/search/read Memungkinkan pembacaan data untuk Layanan pencarian.
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Grants access to very limited set of data APIs for common visual web SDK scenarios. Specifically, render and search data APIs.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/6be48352-4f82-47c9-ad5e-0acacefdb005",
  "name": "6be48352-4f82-47c9-ad5e-0acacefdb005",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.Maps/accounts/services/render/read",
        "Microsoft.Maps/accounts/services/search/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Azure Maps Search and Render Data Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Peran Pembaca Pola File Konfigurasi Layanan Konfigurasi Aplikasi Azure Spring Apps

Membaca konten pola file konfigurasi untuk Application Configuration Service di Azure Spring Apps

Pelajari lebih lanjut

Tindakan Deskripsi
Microsoft.AppPlatform/Spring/read Mendapatkan instans layanan Azure Spring Apps
Microsoft.AppPlatform/Spring/configurationServices/read Mendapatkan Application Configuration Services untuk instans layanan Azure Spring Apps tertentu
NotActions
Tidak ada
DataActions
Microsoft.AppPlatform/Spring/ApplicationConfigurationService/read Baca konten konfigurasi (misalnya, application-prod.yaml) yang ditarik oleh Application Configuration Service untuk instans layanan Azure Spring Apps tertentu
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Read content of config file pattern for Application Configuration Service in Azure Spring Apps",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/25211fc6-dc78-40b6-b205-e4ac934fd9fd",
  "name": "25211fc6-dc78-40b6-b205-e4ac934fd9fd",
  "permissions": [
    {
      "actions": [
        "Microsoft.AppPlatform/Spring/read",
        "Microsoft.AppPlatform/Spring/configurationServices/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.AppPlatform/Spring/ApplicationConfigurationService/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Azure Spring Apps Application Configuration Service Config File Pattern Reader Role",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Peran Pembaca Log Layanan Konfigurasi Aplikasi Azure Spring Apps

Membaca log real-time untuk Application Configuration Service di Azure Spring Apps

Pelajari lebih lanjut

Tindakan Deskripsi
Microsoft.AppPlatform/Spring/read Mendapatkan instans layanan Azure Spring Apps
Microsoft.AppPlatform/Spring/configurationServices/read Mendapatkan Application Configuration Services untuk instans layanan Azure Spring Apps tertentu
NotActions
Tidak ada
DataActions
Microsoft.AppPlatform/Spring/ApplicationConfigurationService/logstream/action Membaca log streaming semua subkomponen di Application Configuration Service dari instans layanan Azure Spring Apps tertentu
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Read real-time logs for Application Configuration Service in Azure Spring Apps",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/6593e776-2a30-40f9-8a32-4fe28b77655d",
  "name": "6593e776-2a30-40f9-8a32-4fe28b77655d",
  "permissions": [
    {
      "actions": [
        "Microsoft.AppPlatform/Spring/read",
        "Microsoft.AppPlatform/Spring/configurationServices/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.AppPlatform/Spring/ApplicationConfigurationService/logstream/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Azure Spring Apps Application Configuration Service Log Reader Role",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Peran Azure Spring Apps Connect

Peran Azure Spring Apps Connect

Pelajari lebih lanjut

Tindakan Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft.AppPlatform/Spring/apps/deployments/connect/action Menyambungkan ke instans untuk aplikasi tertentu
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Azure Spring Apps Connect Role",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/80558df3-64f9-4c0f-b32d-e5094b036b0b",
  "name": "80558df3-64f9-4c0f-b32d-e5094b036b0b",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.AppPlatform/Spring/apps/deployments/connect/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Azure Spring Apps Connect Role",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Peran Pembaca Log Pekerjaan Azure Spring Apps

Membaca log real-time untuk pekerjaan di Azure Spring Apps

Pelajari lebih lanjut

Tindakan Deskripsi
Microsoft.AppPlatform/Spring/read Mendapatkan instans layanan Azure Spring Apps
Microsoft.AppPlatform/Spring/jobs/read Mendapatkan pekerjaan untuk instans layanan Azure Spring Apps tertentu
Microsoft.AppPlatform/Spring/jobs/executions/read Dapatkan eksekusi pekerjaan untuk instans layanan Azure Spring Apps tertentu
NotActions
Tidak ada
DataActions
Microsoft.AppPlatform/Spring/jobs/executions/logstream/action Mendapatkan log streaming eksekusi pekerjaan untuk instans layanan Azure Spring Apps tertentu
Microsoft.AppPlatform/Spring/jobs/executions/listInstances/action Mencantumkan instans eksekusi pekerjaan tertentu untuk instans layanan Azure Spring Apps tertentu
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Read real-time logs for jobs in Azure Spring Apps",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/b459aa1d-e3c8-436f-ae21-c0531140f43e",
  "name": "b459aa1d-e3c8-436f-ae21-c0531140f43e",
  "permissions": [
    {
      "actions": [
        "Microsoft.AppPlatform/Spring/read",
        "Microsoft.AppPlatform/Spring/jobs/read",
        "Microsoft.AppPlatform/Spring/jobs/executions/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.AppPlatform/Spring/jobs/executions/logstream/action",
        "Microsoft.AppPlatform/Spring/jobs/executions/listInstances/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Azure Spring Apps Job Log Reader Role",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Peran Penelusuran Kesalahan Jarak Jauh Azure Spring Apps

Peran Penelusuran Kesalahan Jarak Jauh Azure Spring Apps

Pelajari lebih lanjut

Tindakan Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft.AppPlatform/Spring/apps/deployments/remotedebugging/action Instans aplikasi penelusuran kesalahan jarak jauh untuk aplikasi tertentu
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Azure Spring Apps Remote Debugging Role",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/a99b0159-1064-4c22-a57b-c9b3caa1c054",
  "name": "a99b0159-1064-4c22-a57b-c9b3caa1c054",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.AppPlatform/Spring/apps/deployments/remotedebugging/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Azure Spring Apps Remote Debugging Role",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Peran Pembaca Log Azure Spring Apps Spring Cloud Gateway

Membaca log real-time untuk Spring Cloud Gateway di Azure Spring Apps

Pelajari lebih lanjut

Tindakan Deskripsi
Microsoft.AppPlatform/Spring/read Mendapatkan instans layanan Azure Spring Apps
Microsoft.AppPlatform/Spring/gateways/read Mendapatkan Spring Cloud Gateways untuk instans layanan Azure Spring Apps tertentu
NotActions
Tidak ada
DataActions
Microsoft.AppPlatform/Spring/SpringCloudGateway/logstream/action Membaca log streaming Spring Cloud Gateway dari instans layanan Azure Spring Apps tertentu
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Read real-time logs for Spring Cloud Gateway in Azure Spring Apps",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/4301dc2a-25a9-44b0-ae63-3636cf7f2bd2",
  "name": "4301dc2a-25a9-44b0-ae63-3636cf7f2bd2",
  "permissions": [
    {
      "actions": [
        "Microsoft.AppPlatform/Spring/read",
        "Microsoft.AppPlatform/Spring/gateways/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.AppPlatform/Spring/SpringCloudGateway/logstream/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Azure Spring Apps Spring Cloud Gateway Log Reader Role",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Kontributor Server Azure Spring Cloud Config

Mengizinkan membaca, menulis, dan menghapus akses ke Server Config Azure Spring Cloud

Pelajari lebih lanjut

Tindakan Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft.AppPlatform/Spring/configService/read Membaca konten konfigurasi(misalnya, application.yaml) untuk instans layanan Azure Spring Apps tertentu
Microsoft.AppPlatform/Spring/configService/write Menulis konten server konfigurasi untuk instans layanan Azure Spring Apps tertentu
Microsoft.AppPlatform/Spring/configService/delete Menghapus konten server konfigurasi untuk instans layanan Azure Spring Apps tertentu
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Allow read, write and delete access to Azure Spring Cloud Config Server",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/a06f5c24-21a7-4e1a-aa2b-f19eb6684f5b",
  "name": "a06f5c24-21a7-4e1a-aa2b-f19eb6684f5b",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.AppPlatform/Spring/configService/read",
        "Microsoft.AppPlatform/Spring/configService/write",
        "Microsoft.AppPlatform/Spring/configService/delete"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Azure Spring Cloud Config Server Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pembaca Server Azure Spring Cloud Config

Mengizinkan akses baca ke Server Config Azure Spring Cloud

Pelajari lebih lanjut

Tindakan Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft.AppPlatform/Spring/configService/read Membaca konten konfigurasi(misalnya, application.yaml) untuk instans layanan Azure Spring Apps tertentu
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Allow read access to Azure Spring Cloud Config Server",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/d04c6db6-4947-4782-9e91-30a88feb7be7",
  "name": "d04c6db6-4947-4782-9e91-30a88feb7be7",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.AppPlatform/Spring/configService/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Azure Spring Cloud Config Server Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pembaca Data Azure Spring Cloud

Izinkan akses baca ke Azure Spring Cloud Data

Tindakan Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft.AppPlatform/Spring/*/baca
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Allow read access to Azure Spring Cloud Data",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/b5537268-8956-4941-a8f0-646150406f0c",
  "name": "b5537268-8956-4941-a8f0-646150406f0c",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.AppPlatform/Spring/*/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Azure Spring Cloud Data Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Kontributor Registri Layanan Azure Spring Cloud

Mengizinkan membaca, menulis, dan menghapus akses ke Registri Layanan Azure Spring Cloud

Pelajari lebih lanjut

Tindakan Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft.AppPlatform/Spring/eurekaService/read Membaca informasi pendaftaran aplikasi pengguna untuk instans layanan Azure Spring Apps tertentu
Microsoft.AppPlatform/Spring/eurekaService/write Menulis informasi pendaftaran aplikasi pengguna untuk instans layanan Azure Spring Apps tertentu
Microsoft.AppPlatform/Spring/eurekaService/delete Menghapus informasi pendaftaran aplikasi pengguna untuk instans layanan Azure Spring Apps tertentu
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Allow read, write and delete access to Azure Spring Cloud Service Registry",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/f5880b48-c26d-48be-b172-7927bfa1c8f1",
  "name": "f5880b48-c26d-48be-b172-7927bfa1c8f1",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.AppPlatform/Spring/eurekaService/read",
        "Microsoft.AppPlatform/Spring/eurekaService/write",
        "Microsoft.AppPlatform/Spring/eurekaService/delete"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Azure Spring Cloud Service Registry Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pembaca Registri Layanan Azure Spring Cloud

Mengizinkan akses baca ke Registri Layanan Azure Spring Cloud

Pelajari lebih lanjut

Tindakan Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft.AppPlatform/Spring/eurekaService/read Membaca informasi pendaftaran aplikasi pengguna untuk instans layanan Azure Spring Apps tertentu
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Allow read access to Azure Spring Cloud Service Registry",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/cff1b556-2399-4e7e-856d-a8f754be7b65",
  "name": "cff1b556-2399-4e7e-856d-a8f754be7b65",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.AppPlatform/Spring/eurekaService/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Azure Spring Cloud Service Registry Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Administrator Akun Media Services

Membuat, membaca, mengubah, dan menghapus akun Media Services; akses baca-saja ke sumber daya Media Services lainnya.

Tindakan Deskripsi
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
Microsoft.Insights/alertRules/* Membuat dan mengelola pemberitahuan metrik klasik
Microsoft.Insights/metrik/baca Membaca metrik
Microsoft.Insights/metricDefinitions/baca Baca definisi metrik
Microsoft.Resources/penyebaran/* Membuat dan mengelola penyebaran
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
Microsoft.ResourceHealth/availabilityStatuses/baca Mendapatkan status ketersediaan untuk semua sumber daya dalam lingkup yang ditentukan
Microsoft.Media/mediaservices/*/baca
Microsoft.Media/mediaservices/aset/listStreamingLocators/tindakan Mencantumkan Pencari Streaming untuk Aset
Microsoft.Media/mediaservices/streamingLocators/listPaths/tindakan Jalur Daftar
Microsoft.Media/mediaservices/tulis Membuat atau Memperbarui Akun Azure Media Services mana pun
Microsoft.Media/mediaservices/hapus Hapus Akun Media Services apa pun
Microsoft.Media/mediaservices/privateEndpointConnectionsApproval/tindakan Menyetujui Koneksi Titik Akhir Privat
Microsoft.Media/mediaservices/privateEndpointConnections/*
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Create, read, modify, and delete Media Services accounts; read-only access to other Media Services resources.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/054126f8-9a2b-4f1c-a9ad-eca461f08466",
  "name": "054126f8-9a2b-4f1c-a9ad-eca461f08466",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.Insights/metrics/read",
        "Microsoft.Insights/metricDefinitions/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Media/mediaservices/*/read",
        "Microsoft.Media/mediaservices/assets/listStreamingLocators/action",
        "Microsoft.Media/mediaservices/streamingLocators/listPaths/action",
        "Microsoft.Media/mediaservices/write",
        "Microsoft.Media/mediaservices/delete",
        "Microsoft.Media/mediaservices/privateEndpointConnectionsApproval/action",
        "Microsoft.Media/mediaservices/privateEndpointConnections/*"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Media Services Account Administrator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Administrator Acara Langsung Media Services

Membuat, membaca, dan memodifikasi Acara Langsung, Aset, Filter Aset, dan Pencari Streaming; akses baca-saja ke sumber daya Media Services lainnya.

Tindakan Deskripsi
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
Microsoft.Insights/alertRules/* Membuat dan mengelola pemberitahuan metrik klasik
Microsoft.Insights/metrik/baca Membaca metrik
Microsoft.Insights/metricDefinitions/baca Baca definisi metrik
Microsoft.Resources/penyebaran/* Membuat dan mengelola penyebaran
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
Microsoft.ResourceHealth/availabilityStatuses/baca Mendapatkan status ketersediaan untuk semua sumber daya dalam lingkup yang ditentukan
Microsoft.Media/mediaservices/*/baca
Microsoft.Media/mediaservices/aset/*
Microsoft.Media/mediaservices/assets/assetfilters/*
Microsoft.Media/mediaservices/streamingLocators/*
Microsoft.Media/mediaservices/liveEvents/*
NotActions
Microsoft.Media/layanan media/aset/getEncryptionKey/tindakan Dapatkan Kunci Enkripsi Aset
Microsoft.Media/mediaservices/streamingLocators/listPaths/tindakan Mencantumkan Kunci Konten
DataActions
Tidak ada
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Create, read, modify, and delete Live Events, Assets, Asset Filters, and Streaming Locators; read-only access to other Media Services resources.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/532bc159-b25e-42c0-969e-a1d439f60d77",
  "name": "532bc159-b25e-42c0-969e-a1d439f60d77",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.Insights/metrics/read",
        "Microsoft.Insights/metricDefinitions/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Media/mediaservices/*/read",
        "Microsoft.Media/mediaservices/assets/*",
        "Microsoft.Media/mediaservices/assets/assetfilters/*",
        "Microsoft.Media/mediaservices/streamingLocators/*",
        "Microsoft.Media/mediaservices/liveEvents/*"
      ],
      "notActions": [
        "Microsoft.Media/mediaservices/assets/getEncryptionKey/action",
        "Microsoft.Media/mediaservices/streamingLocators/listContentKeys/action"
      ],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Media Services Live Events Administrator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Operator Media untuk Media Services

Membuat, membaca, memodifikasi, dan menghapus Aset, Filter Aset, Pencari Streaming, dan Pekerjaan; akses baca-saja ke sumber daya Media Services lainnya.

Tindakan Deskripsi
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
Microsoft.Insights/alertRules/* Membuat dan mengelola pemberitahuan metrik klasik
Microsoft.Insights/metrik/baca Membaca metrik
Microsoft.Insights/metricDefinitions/baca Baca definisi metrik
Microsoft.Resources/penyebaran/* Membuat dan mengelola penyebaran
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
Microsoft.ResourceHealth/availabilityStatuses/baca Mendapatkan status ketersediaan untuk semua sumber daya dalam lingkup yang ditentukan
Microsoft.Media/mediaservices/*/baca
Microsoft.Media/mediaservices/aset/*
Microsoft.Media/mediaservices/assets/assetfilters/*
Microsoft.Media/mediaservices/streamingLocators/*
Microsoft.Media/layanan media/transformasi/pekerjaan/*
NotActions
Microsoft.Media/layanan media/aset/getEncryptionKey/tindakan Dapatkan Kunci Enkripsi Aset
Microsoft.Media/mediaservices/streamingLocators/listPaths/tindakan Mencantumkan Kunci Konten
DataActions
Tidak ada
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Create, read, modify, and delete Assets, Asset Filters, Streaming Locators, and Jobs; read-only access to other Media Services resources.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/e4395492-1534-4db2-bedf-88c14621589c",
  "name": "e4395492-1534-4db2-bedf-88c14621589c",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.Insights/metrics/read",
        "Microsoft.Insights/metricDefinitions/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Media/mediaservices/*/read",
        "Microsoft.Media/mediaservices/assets/*",
        "Microsoft.Media/mediaservices/assets/assetfilters/*",
        "Microsoft.Media/mediaservices/streamingLocators/*",
        "Microsoft.Media/mediaservices/transforms/jobs/*"
      ],
      "notActions": [
        "Microsoft.Media/mediaservices/assets/getEncryptionKey/action",
        "Microsoft.Media/mediaservices/streamingLocators/listContentKeys/action"
      ],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Media Services Media Operator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Administrator Media Services Policy

Membuat, membaca, memodifikasi, dan menghapus Filter Akun, Kebijakan Streaming, Kebijakan Kunci Konten, dan Transformasi; akses baca-saja ke sumber daya Media Services lainnya. Tidak dapat membuat sumber daya Pekerjaan, Aset, atau Streaming.

Tindakan Deskripsi
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
Microsoft.Insights/alertRules/* Membuat dan mengelola pemberitahuan metrik klasik
Microsoft.Insights/metrik/baca Membaca metrik
Microsoft.Insights/metricDefinitions/baca Baca definisi metrik
Microsoft.Resources/penyebaran/* Membuat dan mengelola penyebaran
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
Microsoft.ResourceHealth/availabilityStatuses/baca Mendapatkan status ketersediaan untuk semua sumber daya dalam lingkup yang ditentukan
Microsoft.Media/mediaservices/*/baca
Microsoft.Media/mediaservices/aset/listStreamingLocators/tindakan Mencantumkan Pencari Streaming untuk Aset
Microsoft.Media/mediaservices/streamingLocators/listPaths/tindakan Jalur Daftar
Microsoft.Media/mediaservices/accountFilters/*
Microsoft.Media/mediaservices/streamingPolicies/*
Microsoft.Media/mediaservices/contentKeyPolicies/*
Microsoft.Media/mediaservices/transformasi/*
NotActions
Microsoft.Media/layanan media/contentKeyPolicies/getPolicyPropertiesWithSecrets/action Dapatkan Properti Policy Dengan Rahasia
DataActions
Tidak ada
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Create, read, modify, and delete Account Filters, Streaming Policies, Content Key Policies, and Transforms; read-only access to other Media Services resources. Cannot create Jobs, Assets or Streaming resources.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/c4bba371-dacd-4a26-b320-7250bca963ae",
  "name": "c4bba371-dacd-4a26-b320-7250bca963ae",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.Insights/metrics/read",
        "Microsoft.Insights/metricDefinitions/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Media/mediaservices/*/read",
        "Microsoft.Media/mediaservices/assets/listStreamingLocators/action",
        "Microsoft.Media/mediaservices/streamingLocators/listPaths/action",
        "Microsoft.Media/mediaservices/accountFilters/*",
        "Microsoft.Media/mediaservices/streamingPolicies/*",
        "Microsoft.Media/mediaservices/contentKeyPolicies/*",
        "Microsoft.Media/mediaservices/transforms/*"
      ],
      "notActions": [
        "Microsoft.Media/mediaservices/contentKeyPolicies/getPolicyPropertiesWithSecrets/action"
      ],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Media Services Policy Administrator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Administrator Endpoint Streaming Media Services

Membuat, membaca, mengubah, dan menghapus akun Titik Akhir Streaming; akses baca-saja ke sumber daya Media Services lainnya.

Tindakan Deskripsi
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
Microsoft.Insights/alertRules/* Membuat dan mengelola pemberitahuan metrik klasik
Microsoft.Insights/metrik/baca Membaca metrik
Microsoft.Insights/metricDefinitions/baca Baca definisi metrik
Microsoft.Resources/penyebaran/* Membuat dan mengelola penyebaran
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
Microsoft.ResourceHealth/availabilityStatuses/baca Mendapatkan status ketersediaan untuk semua sumber daya dalam lingkup yang ditentukan
Microsoft.Media/mediaservices/*/baca
Microsoft.Media/mediaservices/aset/listStreamingLocators/tindakan Mencantumkan Pencari Streaming untuk Aset
Microsoft.Media/mediaservices/streamingLocators/listPaths/tindakan Jalur Daftar
Microsoft.Media/layanan media/streamingEndpoints/*
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Create, read, modify, and delete Streaming Endpoints; read-only access to other Media Services resources.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/99dba123-b5fe-44d5-874c-ced7199a5804",
  "name": "99dba123-b5fe-44d5-874c-ced7199a5804",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.Insights/metrics/read",
        "Microsoft.Insights/metricDefinitions/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Media/mediaservices/*/read",
        "Microsoft.Media/mediaservices/assets/listStreamingLocators/action",
        "Microsoft.Media/mediaservices/streamingLocators/listPaths/action",
        "Microsoft.Media/mediaservices/streamingEndpoints/*"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Media Services Streaming Endpoints Administrator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pembaca SignalR AccessKey

Membaca Kunci Akses Layanan SignalR

Tindakan Deskripsi
Microsoft.SignalRService/*/baca
Microsoft.SignalRService/SignalR/listkeys/tindakan Melihat nilai kunci akses SignalR di portal manajemen atau melalui API
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
Microsoft.Support/* Membuat dan memperbarui tiket dukungan
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Read SignalR Service Access Keys",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/04165923-9d83-45d5-8227-78b77b0a687e",
  "name": "04165923-9d83-45d5-8227-78b77b0a687e",
  "permissions": [
    {
      "actions": [
        "Microsoft.SignalRService/*/read",
        "Microsoft.SignalRService/SignalR/listkeys/action",
        "Microsoft.Authorization/*/read",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Support/*"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "SignalR AccessKey Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Server Aplikasi SignalR

Memungkinkan server aplikasi Anda mengakses SignalR Service dengan opsi autentikasi AAD.

Tindakan Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft.SignalRService/SignalR/auth/accessKey/tindakan Buat AccessKey untuk menandatangani AccessTokens, kunci akan kedaluwarsa dalam 90 menit secara default
Microsoft.SignalRService/SignalR/serverConnection/tulis Memulai koneksi server
Microsoft.SignalRService/SignalR/clientConnection/tulis Tutup koneksi klien
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets your app server access SignalR Service with AAD auth options.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/420fcaa2-552c-430f-98ca-3264be4806c7",
  "name": "420fcaa2-552c-430f-98ca-3264be4806c7",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.SignalRService/SignalR/auth/accessKey/action",
        "Microsoft.SignalRService/SignalR/serverConnection/write",
        "Microsoft.SignalRService/SignalR/clientConnection/write"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "SignalR App Server",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pemilik REST API SignalR

Akses penuh ke REST API Azure SignalR Service

Tindakan Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft.SignalRService/SignalR/auth/clientToken/tindakan Hasilkan AccessToken untuk klien agar tersambung ke ASRS, token akan kedaluwarsa dalam 5 menit secara default
Microsoft.SignalRService/SignalR/hub/*
Microsoft.SignalRService/SignalR/group/*
Microsoft.SignalRService/SignalR/clientConnection/*
Microsoft.SignalRService/SignalR/user/*
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Full access to Azure SignalR Service REST APIs",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/fd53cd77-2268-407a-8f46-7e7863d0f521",
  "name": "fd53cd77-2268-407a-8f46-7e7863d0f521",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.SignalRService/SignalR/auth/clientToken/action",
        "Microsoft.SignalRService/SignalR/hub/*",
        "Microsoft.SignalRService/SignalR/group/*",
        "Microsoft.SignalRService/SignalR/clientConnection/*",
        "Microsoft.SignalRService/SignalR/user/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "SignalR REST API Owner",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pembaca REST API SignalR

Akses baca saja ke REST API Azure SignalR Service

Tindakan Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft.SignalRService/SignalR/grup/baca Memeriksa keberadaan grup atau keberadaan pengguna dalam grup
Microsoft.SignalRService/SignalR/clientConnection/baca Periksa keberadaan koneksi klien
Microsoft.SignalRService/SignalR/pengguna/baca Periksa keberadaan pengguna
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Read-only access to Azure SignalR Service REST APIs",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/ddde6b66-c0df-4114-a159-3618637b3035",
  "name": "ddde6b66-c0df-4114-a159-3618637b3035",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.SignalRService/SignalR/group/read",
        "Microsoft.SignalRService/SignalR/clientConnection/read",
        "Microsoft.SignalRService/SignalR/user/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "SignalR REST API Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pemilik SignalR Service

Akses penuh ke REST API Azure SignalR Service

Tindakan Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft.SignalRService/SignalR/*
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Full access to Azure SignalR Service REST APIs",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/7e4f1700-ea5a-4f59-8f37-079cfe29dce3",
  "name": "7e4f1700-ea5a-4f59-8f37-079cfe29dce3",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.SignalRService/SignalR/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "SignalR Service Owner",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Kontributor SignalR/Web PubSub

Membuat, Membaca, Memperbarui, dan Menghapus sumber daya layanan SignalR

Tindakan Deskripsi
Microsoft.SignalRService/*
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
Microsoft.Insights/alertRules/* Membuat dan mengelola pemberitahuan metrik klasik
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
Microsoft.Resources/penyebaran/* Membuat dan mengelola penyebaran
Microsoft.Support/* Membuat dan memperbarui tiket dukungan
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Create, Read, Update, and Delete SignalR service resources",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761",
  "name": "8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761",
  "permissions": [
    {
      "actions": [
        "Microsoft.SignalRService/*",
        "Microsoft.Authorization/*/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Support/*"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "SignalR/Web PubSub Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Kontributor Rencana Web

Mengelola paket web untuk situs web. Peran ini tidak memungkinkan Anda menetapkan peran di RBAC Azure.

Tindakan Deskripsi
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
Microsoft.Insights/alertRules/* Membuat dan mengelola pemberitahuan metrik klasik
Microsoft.ResourceHealth/availabilityStatuses/baca Mendapatkan status ketersediaan untuk semua sumber daya dalam lingkup yang ditentukan
Microsoft.Resources/penyebaran/* Membuat dan mengelola penyebaran
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
Microsoft.Support/* Membuat dan memperbarui tiket dukungan
Microsoft.Web/serverFarms/* Membuat dan mengelola peternakan server
Microsoft.Web/hostingEnvironments/Gabung/Tindakan Menggabungkan Lingkungan Azure App Service
Microsoft.Insights/autoscalesettings/*
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you manage the web plans for websites, but not access to them.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/2cc479cb-7b4d-49a8-b449-8c00fd0f0a4b",
  "name": "2cc479cb-7b4d-49a8-b449-8c00fd0f0a4b",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Support/*",
        "Microsoft.Web/serverFarms/*",
        "Microsoft.Web/hostingEnvironments/Join/Action",
        "Microsoft.Insights/autoscalesettings/*"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Web Plan Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pemilik Layanan Web PubSub

Akses penuh ke REST API Layanan Azure Web PubSub

Pelajari lebih lanjut

Tindakan Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft.SignalRService/WebPubSub/*
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Full access to Azure Web PubSub Service REST APIs",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/12cf5a90-567b-43ae-8102-96cf46c7d9b4",
  "name": "12cf5a90-567b-43ae-8102-96cf46c7d9b4",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.SignalRService/WebPubSub/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Web PubSub Service Owner",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Pembaca Layanan Web PubSub

Akses baca-saja ke REST API Layanan Azure Web PubSub

Pelajari lebih lanjut

Tindakan Deskripsi
Tidak ada
NotActions
Tidak ada
DataActions
Microsoft.SignalRService/WebPubSub/*/read
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Read-only access to Azure Web PubSub Service REST APIs",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/bfb1c7d2-fb1a-466b-b2ba-aee63b92deaf",
  "name": "bfb1c7d2-fb1a-466b-b2ba-aee63b92deaf",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.SignalRService/WebPubSub/*/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Web PubSub Service Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Kontributor Situs Web

Mengelola situs web, tetapi bukan paket web. Peran ini tidak memungkinkan Anda menetapkan peran di RBAC Azure.

Tindakan Deskripsi
Microsoft.Authorization/*/baca Membaca peran dan penetapan peran
Microsoft.Insights/alertRules/* Membuat dan mengelola pemberitahuan metrik klasik
Microsoft.Insights/komponen/* Membuat dan mengelola komponen Insight
Microsoft.ResourceHealth/availabilityStatuses/baca Mendapatkan status ketersediaan untuk semua sumber daya dalam lingkup yang ditentukan
Microsoft.Resources/penyebaran/* Membuat dan mengelola penyebaran
Microsoft.Resources/langganan/resourceGroups/baca Mendapatkan atau mencantumkan grup sumber daya.
Microsoft.Support/* Membuat dan memperbarui tiket dukungan
Microsoft.Web/sertifikat/* Membuat dan mengelola sertifikat situs web
Microsoft.Web/listSitesAssignedToHostName/baca Dapatkan nama situs yang ditetapkan ke nama host.
Microsoft.Web/register/action Mendaftarkan penyedia sumber Microsoft.Web untuk langganan.
Microsoft.Web/serverFarms/gabung/tindakan Bergabung dengan App Service Plan
Microsoft.Web/serverFarms/baca Dapatkan properti di App Service Plan
Microsoft.Web/situs/* Membuat dan mengelola situs web (pembuatan situs juga memerlukan izin tulis ke Paket App Service terkait)
NotActions
Tidak ada
DataActions
Tidak ada
NotDataActions
Tidak ada
{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you manage websites (not web plans), but not access to them.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/de139f84-1756-47ae-9be6-808fbbe84772",
  "name": "de139f84-1756-47ae-9be6-808fbbe84772",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.Insights/components/*",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Support/*",
        "Microsoft.Web/certificates/*",
        "Microsoft.Web/listSitesAssignedToHostName/read",
        "Microsoft.Web/register/action",
        "Microsoft.Web/serverFarms/join/action",
        "Microsoft.Web/serverFarms/read",
        "Microsoft.Web/sites/*"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Website Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Langkah berikutnya