Ruoli predefiniti di Azure per intelligenza artificiale e Machine Learning
Questo articolo elenca i ruoli predefiniti di Azure nella categoria intelligenza artificiale e Machine Learning.
Operatore di calcolo di AzureML
Può accedere ed eseguire operazioni CRUD sulle risorse di calcolo gestite di Machine Learning Services (incluse le macchine virtuali notebook).
Azioni | Descrizione |
---|---|
Microsoft.MachineLearningServices/workspaces/computes/* | |
Microsoft.MachineLearningServices/workspaces/notebooks/vm/* | |
NotActions | |
none | |
DataActions | |
none | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Can access and perform CRUD operations on Machine Learning Services managed compute resources (including Notebook VMs).",
"id": "/providers/Microsoft.Authorization/roleDefinitions/e503ece1-11d0-4e8e-8e2c-7a6c3bf38815",
"name": "e503ece1-11d0-4e8e-8e2c-7a6c3bf38815",
"permissions": [
{
"actions": [
"Microsoft.MachineLearningServices/workspaces/computes/*",
"Microsoft.MachineLearningServices/workspaces/notebooks/vm/*"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "AzureML Compute Operator",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Scienziato dei dati di AzureML
Può eseguire tutte le azioni all'interno di un'area di lavoro di Azure Machine Learning, ad eccezione della creazione o dell'eliminazione delle risorse di calcolo e della modifica dell'area di lavoro stessa.
Azioni | Descrizione |
---|---|
Microsoft.MachineLearningServices/workspaces/*/read | |
Microsoft.MachineLearningServices/workspaces/*/action | |
Microsoft.MachineLearningServices/workspaces/*/delete | |
Microsoft.MachineLearningServices/workspaces/*/write | |
NotActions | |
Microsoft.MachineLearningServices/workspaces/delete | Elimina le aree di lavoro di Machine Learning Services |
Microsoft.MachineLearningServices/workspaces/write | Crea o aggiorna le aree di lavoro di Machine Learning Services |
Microsoft.MachineLearningServices/workspaces/computes/*/write | |
Microsoft.MachineLearningServices/workspaces/computes/*/delete | |
Microsoft.MachineLearningServices/workspaces/computes/listKeys/action | Elenca i segreti per le risorse di calcolo nell'area di lavoro di Machine Learning Services |
Microsoft.MachineLearningServices/workspaces/listKeys/action | Elenca i segreti per un'area di lavoro di Machine Learning Services |
Microsoft.MachineLearningServices/workspaces/hubs/write | Crea o aggiorna un'area di lavoro dell'hub di Machine Learning Services |
Microsoft.MachineLearningServices/workspaces/hubs/delete | Elimina le aree di lavoro dell'hub di Machine Learning Services |
Microsoft.MachineLearningServices/workspaces/featurestores/write | Crea o Aggiornamenti gli archivi funzionalità di Machine Learning Services |
Microsoft.MachineLearningServices/workspaces/featurestores/delete | Elimina gli archivi funzionalità di Machine Learning Services |
DataActions | |
none | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Can perform all actions within an Azure Machine Learning workspace, except for creating or deleting compute resources and modifying the workspace itself.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/f6c7c914-8db3-469d-8ca1-694a8f32e121",
"name": "f6c7c914-8db3-469d-8ca1-694a8f32e121",
"permissions": [
{
"actions": [
"Microsoft.MachineLearningServices/workspaces/*/read",
"Microsoft.MachineLearningServices/workspaces/*/action",
"Microsoft.MachineLearningServices/workspaces/*/delete",
"Microsoft.MachineLearningServices/workspaces/*/write"
],
"notActions": [
"Microsoft.MachineLearningServices/workspaces/delete",
"Microsoft.MachineLearningServices/workspaces/write",
"Microsoft.MachineLearningServices/workspaces/computes/*/write",
"Microsoft.MachineLearningServices/workspaces/computes/*/delete",
"Microsoft.MachineLearningServices/workspaces/computes/listKeys/action",
"Microsoft.MachineLearningServices/workspaces/listKeys/action",
"Microsoft.MachineLearningServices/workspaces/hubs/write",
"Microsoft.MachineLearningServices/workspaces/hubs/delete",
"Microsoft.MachineLearningServices/workspaces/featurestores/write",
"Microsoft.MachineLearningServices/workspaces/featurestores/delete"
],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "AzureML Data Scientist",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Collaboratore Servizi cognitivi
Consente di creare, leggere, aggiornare, eliminare e gestire le chiavi di Servizi cognitivi.
Azioni | Descrizione |
---|---|
Microsoft.Authorization/*/read | Leggere i ruoli e le assegnazioni di ruoli |
Microsoft.CognitiveServices/* | |
Microsoft.Features/features/read | Ottiene le funzionalità di una sottoscrizione. |
Microsoft.Features/providers/features/read | Ottiene la funzionalità di una sottoscrizione in un provider di risorse specificato. |
Microsoft.Features/providers/features/register/action | Registra la funzionalità per una sottoscrizione in un provider di risorse specificato. |
Microsoft.Insights/alertRules/* | Creare e gestire un avviso classico per le metriche |
Microsoft.Insights/diagnostic Impostazioni/* | Crea, aggiorna o legge l'impostazione di diagnostica per Analysis Server |
Microsoft.Insights/logDefinitions/read | Consente di leggere le definizioni del log |
Microsoft.Insights/metricdefinitions/read | Consente di leggere le definizioni della metrica |
Microsoft.Insights/metrics/read | Esegue la lettura delle metriche |
Microsoft.ResourceHealth/availabilityStatuses/read | Ottiene gli stati di disponibilità per tutte le risorse nell'ambito specificato |
Microsoft.Resources/deployments/* | Creare e gestire una distribuzione |
Microsoft.Resources/deployments/operations/read | Ottiene o elenca le operazioni di distribuzione. |
Microsoft.Resources/subscriptions/operationresults/read | Ottiene i risultati dell'operazione di sottoscrizione. |
Microsoft.Resources/subscriptions/read | Ottiene l'elenco delle sottoscrizioni. |
Microsoft.Resources/subscriptions/resourcegroups/deployments/* | |
Microsoft.Resources/subscriptions/resourceGroups/read | Ottiene o elenca i gruppi di risorse. |
Microsoft.Support/* | Creare e aggiornare un ticket di supporto |
NotActions | |
none | |
DataActions | |
none | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Lets you create, read, update, delete and manage keys of Cognitive Services.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68",
"name": "25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68",
"permissions": [
{
"actions": [
"Microsoft.Authorization/*/read",
"Microsoft.CognitiveServices/*",
"Microsoft.Features/features/read",
"Microsoft.Features/providers/features/read",
"Microsoft.Features/providers/features/register/action",
"Microsoft.Insights/alertRules/*",
"Microsoft.Insights/diagnosticSettings/*",
"Microsoft.Insights/logDefinitions/read",
"Microsoft.Insights/metricdefinitions/read",
"Microsoft.Insights/metrics/read",
"Microsoft.ResourceHealth/availabilityStatuses/read",
"Microsoft.Resources/deployments/*",
"Microsoft.Resources/deployments/operations/read",
"Microsoft.Resources/subscriptions/operationresults/read",
"Microsoft.Resources/subscriptions/read",
"Microsoft.Resources/subscriptions/resourcegroups/deployments/*",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.Support/*"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "Cognitive Services Contributor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Collaboratore Visione personalizzata Servizi cognitivi
Accesso completo al progetto, inclusa la possibilità di visualizzare, creare, modificare o eliminare progetti.
Azioni | Descrizione |
---|---|
Microsoft.CognitiveServices/*/read | |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/CustomVision/* | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Full access to the project, including the ability to view, create, edit, or delete projects.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/c1ff6cc2-c111-46fe-8896-e0ef812ad9f3",
"name": "c1ff6cc2-c111-46fe-8896-e0ef812ad9f3",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/*"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services Custom Vision Contributor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Distribuzione di Servizi cognitivi Visione personalizzata
Pubblicare, annullare la pubblicazione o l'esportazione di modelli. La distribuzione può visualizzare il progetto ma non può eseguire l'aggiornamento.
Azioni | Descrizione |
---|---|
Microsoft.CognitiveServices/*/read | |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/CustomVision/*/read | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/* | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/publish/* | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/export/* | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/quicktest/* | |
Microsoft.CognitiveServices/accounts/CustomVision/classify/* | |
Microsoft.CognitiveServices/accounts/CustomVision/detect/* | |
NotDataActions | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read | Esporta un progetto. |
{
"assignableScopes": [
"/"
],
"description": "Publish, unpublish or export models. Deployment can view the project but can't update.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/5c4089e1-6d96-4d2f-b296-c1bc7137275f",
"name": "5c4089e1-6d96-4d2f-b296-c1bc7137275f",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/*/read",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/*",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/publish/*",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/export/*",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/quicktest/*",
"Microsoft.CognitiveServices/accounts/CustomVision/classify/*",
"Microsoft.CognitiveServices/accounts/CustomVision/detect/*"
],
"notDataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read"
]
}
],
"roleName": "Cognitive Services Custom Vision Deployment",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Labeler di Servizi cognitivi Visione personalizzata
Visualizzare, modificare le immagini di training e creare, aggiungere, rimuovere o eliminare i tag di immagine. Gli etichettatori possono visualizzare il progetto, ma non possono aggiornare elementi diversi da immagini e tag di training.
Azioni | Descrizione |
---|---|
Microsoft.CognitiveServices/*/read | |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/CustomVision/*/read | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action | Ottenere le immagini inviate all'endpoint di stima. |
Microsoft.CognitiveServices/accounts/CustomVision/projects/images/* | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/tags/* | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/images/suggested/* | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/tagsandregions/suggestions/action | Questa API otterrà tag e aree suggeriti per una matrice/batch di immagini senza tag insieme alle confidenza per i tag. Restituisce una matrice vuota se non vengono trovati tag. |
NotDataActions | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read | Esporta un progetto. |
{
"assignableScopes": [
"/"
],
"description": "View, edit training images and create, add, remove, or delete the image tags. Labelers can view the project but can't update anything other than training images and tags.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/88424f51-ebe7-446f-bc41-7fa16989e96c",
"name": "88424f51-ebe7-446f-bc41-7fa16989e96c",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/*/read",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/images/*",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/tags/*",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/images/suggested/*",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/tagsandregions/suggestions/action"
],
"notDataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read"
]
}
],
"roleName": "Cognitive Services Custom Vision Labeler",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Lettore di servizi cognitivi Visione personalizzata
Azioni di sola lettura nel progetto. I lettori non possono creare o aggiornare il progetto.
Azioni | Descrizione |
---|---|
Microsoft.CognitiveServices/*/read | |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/CustomVision/*/read | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action | Ottenere le immagini inviate all'endpoint di stima. |
NotDataActions | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read | Esporta un progetto. |
{
"assignableScopes": [
"/"
],
"description": "Read-only actions in the project. Readers can't create or update the project.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/93586559-c37d-4a6b-ba08-b9f0940c2d73",
"name": "93586559-c37d-4a6b-ba08-b9f0940c2d73",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/*/read",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action"
],
"notDataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read"
]
}
],
"roleName": "Cognitive Services Custom Vision Reader",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Servizi cognitivi Visione personalizzata Trainer
Visualizzare, modificare i progetti ed eseguire il training dei modelli, inclusa la possibilità di pubblicare, annullare la pubblicazione, esportare i modelli. I formatori non possono creare o eliminare il progetto.
Azioni | Descrizione |
---|---|
Microsoft.CognitiveServices/*/read | |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/CustomVision/* | |
NotDataActions | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/action | Creare un progetto. |
Microsoft.CognitiveServices/accounts/CustomVision/projects/delete | Eliminare un progetto specifico. |
Microsoft.CognitiveServices/accounts/CustomVision/projects/import/action | Importa un progetto. |
Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read | Esporta un progetto. |
{
"assignableScopes": [
"/"
],
"description": "View, edit projects and train the models, including the ability to publish, unpublish, export the models. Trainers can't create or delete the project.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/0a5ae4ab-0d65-4eeb-be61-29fc9b54394b",
"name": "0a5ae4ab-0d65-4eeb-be61-29fc9b54394b",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/*"
],
"notDataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/projects/action",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/delete",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/import/action",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read"
]
}
],
"roleName": "Cognitive Services Custom Vision Trainer",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Ruolo con autorizzazioni di lettura per i dati di Servizi cognitivi (anteprima)
Consente di leggere i dati di Servizi cognitivi.
Azioni | Descrizione |
---|---|
none | |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/*/read | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Lets you read Cognitive Services data.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/b59867f0-fa02-499b-be73-45a86b5b3e1c",
"name": "b59867f0-fa02-499b-be73-45a86b5b3e1c",
"permissions": [
{
"actions": [],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/*/read"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services Data Reader (Preview)",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Riconoscimento viso di Servizi cognitivi
Consente di eseguire rilevare, verificare, identificare, raggruppare e trovare operazioni simili nell'API Viso. Questo ruolo non consente operazioni di creazione o eliminazione, che lo rendono particolarmente adatto per gli endpoint che necessitano solo di funzionalità di inferenza, seguendo le procedure consigliate "privilegi minimi".
Azioni | Descrizione |
---|---|
none | |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/Face/detect/action | Rilevare i visi umani in un'immagine, restituire rettangoli del viso e facoltativamente con faceId, punti di riferimento e attributi. |
Microsoft.CognitiveServices/accounts/Face/verify/action | Verificare se due visi appartengono a una stessa persona o se un viso appartiene a una persona. |
Microsoft.CognitiveServices/accounts/Face/identify/action | Identificazione da 1 a molti per trovare le corrispondenze più vicine della persona di query specifica faccia da un gruppo di persone o da un gruppo di persone di grandi dimensioni. |
Microsoft.CognitiveServices/accounts/Face/group/action | Dividere i visi candidati in gruppi in base alla somiglianza del viso. |
Microsoft.CognitiveServices/accounts/Face/findsimilars/action | Dato faceId del viso di query, per cercare i visi simili da una matrice faceId, un elenco di visi o un elenco di visi di grandi dimensioni. faceId |
Microsoft.CognitiveServices/accounts/Face/detectliveness/cognitive/action | Esegue il rilevamento del liveness su un viso di destinazione in una sequenza di immagini a infrarossi, colori e/o profondità e restituisce la classificazione di vivacità del viso di destinazione come "viso reale", "faccia spoofing" o "incerta" se non è possibile effettuare una classificazione con gli input specificati. |
Microsoft.CognitiveServices/accounts/Face/detectliveness/singlemodal/action | Esegue il rilevamento del liveness su un viso di destinazione in una sequenza di immagini della stessa modalità (ad esempio, colore o infrarosso) e restituisce la classificazione di vivacità del viso di destinazione come "viso reale", "faccia spoofing" o "incerta" se non è possibile creare una classificazione con gli input specificati. |
Microsoft.CognitiveServices/accounts/Face/detectlivenesswithverify/singlemodal/action | Rileva la dinamica di un viso di destinazione in una sequenza di immagini dello stesso tipo di flusso (ad esempio, colore) e quindi confronta con VerifyImage per restituire il punteggio di attendibilità per gli scenari di identità. |
Microsoft.CognitiveServices/accounts/Face/*/sessions/action | |
Microsoft.CognitiveServices/accounts/Face/*/sessions/delete | |
Microsoft.CognitiveServices/accounts/Face/*/sessions/read | |
Microsoft.CognitiveServices/accounts/Face/*/sessions/audit/read | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Lets you perform detect, verify, identify, group, and find similar operations on Face API. This role does not allow create or delete operations, which makes it well suited for endpoints that only need inferencing capabilities, following 'least privilege' best practices.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/9894cab4-e18a-44aa-828b-cb588cd6f2d7",
"name": "9894cab4-e18a-44aa-828b-cb588cd6f2d7",
"permissions": [
{
"actions": [],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/Face/detect/action",
"Microsoft.CognitiveServices/accounts/Face/verify/action",
"Microsoft.CognitiveServices/accounts/Face/identify/action",
"Microsoft.CognitiveServices/accounts/Face/group/action",
"Microsoft.CognitiveServices/accounts/Face/findsimilars/action",
"Microsoft.CognitiveServices/accounts/Face/detectliveness/multimodal/action",
"Microsoft.CognitiveServices/accounts/Face/detectliveness/singlemodal/action",
"Microsoft.CognitiveServices/accounts/Face/detectlivenesswithverify/singlemodal/action",
"Microsoft.CognitiveServices/accounts/Face/*/sessions/action",
"Microsoft.CognitiveServices/accounts/Face/*/sessions/delete",
"Microsoft.CognitiveServices/accounts/Face/*/sessions/read",
"Microsoft.CognitiveServices/accounts/Face/*/sessions/audit/read"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services Face Recognizer",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Servizi cognitivi Advisor metriche Amministratore
Accesso completo al progetto, inclusa la configurazione a livello di sistema.
Azioni | Descrizione |
---|---|
Microsoft.CognitiveServices/*/read | |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/MetricsAdvisor/* | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Full access to the project, including the system level configuration.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/cb43c632-a144-4ec5-977c-e80c4affc34a",
"name": "cb43c632-a144-4ec5-977c-e80c4affc34a",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/MetricsAdvisor/*"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services Metrics Advisor Administrator",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Collaboratore Servizi cognitivi OpenAI
Accesso completo, inclusa la possibilità di ottimizzare, distribuire e generare testo
Azioni | Descrizione |
---|---|
Microsoft.CognitiveServices/*/read | |
Microsoft.CognitiveServices/accounts/deployments/write | Scrive le distribuzioni. |
Microsoft.CognitiveServices/accounts/deployments/delete | Elimina le distribuzioni. |
Microsoft.CognitiveServices/accounts/raiPolicies/read | Ottiene tutti i criteri applicabili nell'account, inclusi i criteri predefiniti. |
Microsoft.CognitiveServices/accounts/raiPolicies/write | Creare o aggiornare un criterio di intelligenza artificiale responsabile personalizzato. |
Microsoft.CognitiveServices/accounts/raiPolicies/delete | Elimina un criterio di intelligenza artificiale responsabile personalizzato a cui non fa riferimento una distribuzione esistente. |
Microsoft.CognitiveServices/accounts/commitmentplans/read | Legge i piani di impegno. |
Microsoft.CognitiveServices/accounts/commitmentplans/write | Scrive i piani di impegno. |
Microsoft.CognitiveServices/accounts/commitmentplans/delete | Elimina i piani di impegno. |
Microsoft.Authorization/roleAssignments/read | Ottiene informazioni su un'assegnazione di ruolo. |
Microsoft.Authorization/roleDefinitions/read | Ottiene informazioni su una definizione di ruolo. |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/OpenAI/* | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Full access including the ability to fine-tune, deploy and generate text",
"id": "/providers/Microsoft.Authorization/roleDefinitions/a001fd3d-188f-4b5d-821b-7da978bf7442",
"name": "a001fd3d-188f-4b5d-821b-7da978bf7442",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.CognitiveServices/accounts/deployments/write",
"Microsoft.CognitiveServices/accounts/deployments/delete",
"Microsoft.CognitiveServices/accounts/raiPolicies/read",
"Microsoft.CognitiveServices/accounts/raiPolicies/write",
"Microsoft.CognitiveServices/accounts/raiPolicies/delete",
"Microsoft.CognitiveServices/accounts/commitmentplans/read",
"Microsoft.CognitiveServices/accounts/commitmentplans/write",
"Microsoft.CognitiveServices/accounts/commitmentplans/delete",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleDefinitions/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/OpenAI/*"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services OpenAI Contributor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Utente Servizi cognitivi OpenAI
Accesso in lettura per visualizzare file, modelli, distribuzioni. Possibilità di creare chiamate di completamento e incorporamento.
Azioni | Descrizione |
---|---|
Microsoft.CognitiveServices/*/read | |
Microsoft.Authorization/roleAssignments/read | Ottiene informazioni su un'assegnazione di ruolo. |
Microsoft.Authorization/roleDefinitions/read | Ottiene informazioni su una definizione di ruolo. |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/OpenAI/*/read | |
Microsoft.CognitiveServices/accounts/OpenAI/engines/completions/action | Creare un completamento da un modello scelto |
Microsoft.CognitiveServices/accounts/OpenAI/engines/search/action | Cercare i documenti più rilevanti usando il motore corrente. |
Microsoft.CognitiveServices/accounts/OpenAI/engines/generate/action | (Destinato solo ai browser). Trasmettere testo generato dal modello tramite richiesta GET. Questo metodo viene fornito perché il metodo EventSource nativo del browser può inviare solo richieste GET. Supporta un set di opzioni di configurazione più limitato rispetto alla variante POST. |
Microsoft.CognitiveServices/accounts/OpenAI/deployments/audio/action | Restituisce la trascrizione o la traduzione per un determinato file audio. |
Microsoft.CognitiveServices/accounts/OpenAI/deployments/search/action | Cercare i documenti più rilevanti usando il motore corrente. |
Microsoft.CognitiveServices/accounts/OpenAI/deployments/completions/action | Creare un completamento da un modello scelto. |
Microsoft.CognitiveServices/accounts/OpenAI/deployments/chat/completions/action | Crea un completamento per il messaggio di chat |
Microsoft.CognitiveServices/accounts/OpenAI/deployments/extensions/chat/completions/action | Crea un completamento per il messaggio di chat con estensioni |
Microsoft.CognitiveServices/accounts/OpenAI/deployments/embeddings/action | Restituisce gli incorporamenti per un determinato prompt. |
Microsoft.CognitiveServices/accounts/OpenAI/images/generations/action | Creare generazioni di immagini. |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Ability to view files, models, deployments. Readers can't make any changes They can inference and create images",
"id": "/providers/Microsoft.Authorization/roleDefinitions/5e0bd9bd-7b93-4f28-af87-19fc36ad61bd",
"name": "5e0bd9bd-7b93-4f28-af87-19fc36ad61bd",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleDefinitions/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/OpenAI/*/read",
"Microsoft.CognitiveServices/accounts/OpenAI/engines/completions/action",
"Microsoft.CognitiveServices/accounts/OpenAI/engines/search/action",
"Microsoft.CognitiveServices/accounts/OpenAI/engines/generate/action",
"Microsoft.CognitiveServices/accounts/OpenAI/deployments/audio/action",
"Microsoft.CognitiveServices/accounts/OpenAI/deployments/search/action",
"Microsoft.CognitiveServices/accounts/OpenAI/deployments/completions/action",
"Microsoft.CognitiveServices/accounts/OpenAI/deployments/chat/completions/action",
"Microsoft.CognitiveServices/accounts/OpenAI/deployments/extensions/chat/completions/action",
"Microsoft.CognitiveServices/accounts/OpenAI/deployments/embeddings/action",
"Microsoft.CognitiveServices/accounts/OpenAI/images/generations/action"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services OpenAI User",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Ruolo con autorizzazioni di modifica di QnA Maker di Servizi cognitivi
Verrà ora creato, modificato, importato ed esportato un KB. Non è possibile pubblicare o eliminare una Knowledge Base.
Azioni | Descrizione |
---|---|
Microsoft.CognitiveServices/*/read | |
Microsoft.Authorization/roleAssignments/read | Ottiene informazioni su un'assegnazione di ruolo. |
Microsoft.Authorization/roleDefinitions/read | Ottiene informazioni su una definizione di ruolo. |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read | Ottiene l'elenco delle knowledge base o i dettagli di una knowledge base specifica. |
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read | Scaricare la knowledge base. |
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/create/write | Operazione asincrona per creare una nuova knowledge base. |
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/write | Operazione asincrona per modificare una knowledge base o Sostituire il contenuto della knowledge base. |
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action | GenerateAnswer chiama per eseguire una query sulla knowledge base. |
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/train/action | Eseguire il training della chiamata per aggiungere suggerimenti alla knowledge base. |
Microsoft.CognitiveServices/accounts/QnAMaker/alterazioni/lettura | Scaricare le modifiche dal runtime. |
Microsoft.CognitiveServices/accounts/QnAMaker/alterazioni/scrittura | Sostituire i dati delle modifiche. |
Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read | Ottiene le chiavi dell'endpoint per un endpoint |
Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/refreshkeys/action | Genera nuovamente una chiave endpoint. |
Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read | Ottiene le impostazioni dell'endpoint per un endpoint |
Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/write | Aggiornare i seetting dell'endpoint per un endpoint. |
Microsoft.CognitiveServices/accounts/QnAMaker/operations/read | Recupera i dettagli di una specifica operazione a esecuzione prolungata. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read | Ottiene l'elenco delle knowledge base o i dettagli di una knowledge base specifica. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read | Scaricare la knowledge base. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/create/write | Operazione asincrona per creare una nuova knowledge base. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/write | Operazione asincrona per modificare una knowledge base o Sostituire il contenuto della knowledge base. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action | GenerateAnswer chiama per eseguire una query sulla knowledge base. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/train/action | Eseguire il training della chiamata per aggiungere suggerimenti alla knowledge base. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterazioni/lettura | Scaricare le modifiche dal runtime. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterazioni/scrittura | Sostituire i dati delle modifiche. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read | Ottiene le chiavi dell'endpoint per un endpoint |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/refreshkeys/action | Genera nuovamente una chiave endpoint. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read | Ottiene le impostazioni dell'endpoint per un endpoint |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/write | Aggiornare i seetting dell'endpoint per un endpoint. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/operations/read | Recupera i dettagli di una specifica operazione a esecuzione prolungata. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/read | Ottiene l'elenco delle knowledge base o i dettagli di una knowledge base specifica. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/download/read | Scaricare la knowledge base. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/create/write | Operazione asincrona per creare una nuova knowledge base. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/write | Operazione asincrona per modificare una knowledge base o Sostituire il contenuto della knowledge base. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/generateanswer/action | GenerateAnswer chiama per eseguire una query sulla knowledge base. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/train/action | Eseguire il training della chiamata per aggiungere suggerimenti alla knowledge base. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterazioni/lettura | Scaricare le modifiche dal runtime. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterazioni/scrittura | Sostituire i dati delle modifiche. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/read | Ottiene le chiavi dell'endpoint per un endpoint |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/refreshkeys/action | Genera nuovamente una chiave endpoint. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/read | Ottiene le impostazioni dell'endpoint per un endpoint |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/write | Aggiornare i seetting dell'endpoint per un endpoint. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/operations/read | Recupera i dettagli di una specifica operazione a esecuzione prolungata. |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Let's you create, edit, import and export a KB. You cannot publish or delete a KB.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/f4cc2bf9-21be-47a1-bdf1-5c5804381025",
"name": "f4cc2bf9-21be-47a1-bdf1-5c5804381025",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleDefinitions/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/create/write",
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/write",
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action",
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/train/action",
"Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/alterations/write",
"Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/refreshkeys/action",
"Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/write",
"Microsoft.CognitiveServices/accounts/QnAMaker/operations/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/create/write",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/write",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/train/action",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/write",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/refreshkeys/action",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/write",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/operations/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/download/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/create/write",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/write",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/generateanswer/action",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/train/action",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/write",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/refreshkeys/action",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/write",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/operations/read"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services QnA Maker Editor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Ruolo con autorizzazioni di lettura per QnA Maker di Servizi cognitivi
Si legge e si testa solo una knowledge base.
Azioni | Descrizione |
---|---|
Microsoft.CognitiveServices/*/read | |
Microsoft.Authorization/roleAssignments/read | Ottiene informazioni su un'assegnazione di ruolo. |
Microsoft.Authorization/roleDefinitions/read | Ottiene informazioni su una definizione di ruolo. |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read | Ottiene l'elenco delle knowledge base o i dettagli di una knowledge base specifica. |
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read | Scaricare la knowledge base. |
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action | GenerateAnswer chiama per eseguire una query sulla knowledge base. |
Microsoft.CognitiveServices/accounts/QnAMaker/alterazioni/lettura | Scaricare le modifiche dal runtime. |
Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read | Ottiene le chiavi dell'endpoint per un endpoint |
Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read | Ottiene le impostazioni dell'endpoint per un endpoint |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read | Ottiene l'elenco delle knowledge base o i dettagli di una knowledge base specifica. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read | Scaricare la knowledge base. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action | GenerateAnswer chiama per eseguire una query sulla knowledge base. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterazioni/lettura | Scaricare le modifiche dal runtime. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read | Ottiene le chiavi dell'endpoint per un endpoint |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read | Ottiene le impostazioni dell'endpoint per un endpoint |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/read | Ottiene l'elenco delle knowledge base o i dettagli di una knowledge base specifica. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/download/read | Scaricare la knowledge base. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/generateanswer/action | GenerateAnswer chiama per eseguire una query sulla knowledge base. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterazioni/lettura | Scaricare le modifiche dal runtime. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/read | Ottiene le chiavi dell'endpoint per un endpoint |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/read | Ottiene le impostazioni dell'endpoint per un endpoint |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Let's you read and test a KB only.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/466ccd10-b268-4a11-b098-b4849f024126",
"name": "466ccd10-b268-4a11-b098-b4849f024126",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleDefinitions/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action",
"Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/download/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/generateanswer/action",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/read"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services QnA Maker Reader",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Lettore di utilizzi di Servizi cognitivi
Autorizzazione minima per visualizzare gli utilizzi di Servizi cognitivi.
Azioni | Descrizione |
---|---|
Microsoft.CognitiveServices/locations/usages/read | Leggere tutti i dati di utilizzo |
NotActions | |
none | |
DataActions | |
none | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Minimal permission to view Cognitive Services usages.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/bba48692-92b0-4667-a9ad-c31c7b334ac2",
"name": "bba48692-92b0-4667-a9ad-c31c7b334ac2",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/locations/usages/read"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "Cognitive Services Usages Reader",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Utente Servizi cognitivi
Consente di leggere ed elencare le chiavi di Servizi cognitivi.
Azioni | Descrizione |
---|---|
Microsoft.CognitiveServices/*/read | |
Microsoft.CognitiveServices/accounts/listkeys/action | List keys |
Microsoft.Insights/alertRules/read | Legge un avviso della metrica (versione classica) |
Microsoft.Insights/diagnostic Impostazioni/read | Legge un'impostazione di diagnostica della risorsa |
Microsoft.Insights/logDefinitions/read | Consente di leggere le definizioni del log |
Microsoft.Insights/metricdefinitions/read | Consente di leggere le definizioni della metrica |
Microsoft.Insights/metrics/read | Esegue la lettura delle metriche |
Microsoft.ResourceHealth/availabilityStatuses/read | Ottiene gli stati di disponibilità per tutte le risorse nell'ambito specificato |
Microsoft.Resources/deployments/operations/read | Ottiene o elenca le operazioni di distribuzione. |
Microsoft.Resources/subscriptions/operationresults/read | Ottiene i risultati dell'operazione di sottoscrizione. |
Microsoft.Resources/subscriptions/read | Ottiene l'elenco delle sottoscrizioni. |
Microsoft.Resources/subscriptions/resourceGroups/read | Ottiene o elenca i gruppi di risorse. |
Microsoft.Support/* | Creare e aggiornare un ticket di supporto |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/* | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Lets you read and list keys of Cognitive Services.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/a97b65f3-24c7-4388-baec-2e87135dc908",
"name": "a97b65f3-24c7-4388-baec-2e87135dc908",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.CognitiveServices/accounts/listkeys/action",
"Microsoft.Insights/alertRules/read",
"Microsoft.Insights/diagnosticSettings/read",
"Microsoft.Insights/logDefinitions/read",
"Microsoft.Insights/metricdefinitions/read",
"Microsoft.Insights/metrics/read",
"Microsoft.ResourceHealth/availabilityStatuses/read",
"Microsoft.Resources/deployments/operations/read",
"Microsoft.Resources/subscriptions/operationresults/read",
"Microsoft.Resources/subscriptions/read",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.Support/*"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/*"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services User",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Collaboratore ai dati dell'indice di ricerca
Concede l'accesso completo ai dati dell'indice di Ricerca cognitiva di Azure.
Azioni | Descrizione |
---|---|
none | |
NotActions | |
none | |
DataActions | |
Microsoft.Search/searchServices/indexes/documents/* | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Grants full access to Azure Cognitive Search index data.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/8ebe5a00-799e-43f5-93ac-243d3dce84a7",
"name": "8ebe5a00-799e-43f5-93ac-243d3dce84a7",
"permissions": [
{
"actions": [],
"notActions": [],
"dataActions": [
"Microsoft.Search/searchServices/indexes/documents/*"
],
"notDataActions": []
}
],
"roleName": "Search Index Data Contributor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Lettore di dati dell'indice di ricerca
Concede l'accesso in lettura ai dati dell'indice Ricerca cognitiva di Azure.
Azioni | Descrizione |
---|---|
none | |
NotActions | |
none | |
DataActions | |
Microsoft.Search/searchServices/indexes/documents/read | Leggere documenti o termini di query suggeriti da un indice. |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Grants read access to Azure Cognitive Search index data.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/1407120a-92aa-4202-b7e9-c0e197c71c8f",
"name": "1407120a-92aa-4202-b7e9-c0e197c71c8f",
"permissions": [
{
"actions": [],
"notActions": [],
"dataActions": [
"Microsoft.Search/searchServices/indexes/documents/read"
],
"notDataActions": []
}
],
"roleName": "Search Index Data Reader",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Collaboratore servizi di ricerca
Consente di gestire i servizi di Ricerca, ma non di accedervi.
Azioni | Descrizione |
---|---|
Microsoft.Authorization/*/read | Leggere i ruoli e le assegnazioni di ruoli |
Microsoft.Insights/alertRules/* | Creare e gestire un avviso classico per le metriche |
Microsoft.ResourceHealth/availabilityStatuses/read | Ottiene gli stati di disponibilità per tutte le risorse nell'ambito specificato |
Microsoft.Resources/deployments/* | Creare e gestire una distribuzione |
Microsoft.Resources/subscriptions/resourceGroups/read | Ottiene o elenca i gruppi di risorse. |
Microsoft.Search/searchServices/* | È in grado di creare e gestire servizi di ricerca |
Microsoft.Support/* | Creare e aggiornare un ticket di supporto |
NotActions | |
none | |
DataActions | |
none | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Lets you manage Search services, but not access to them.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/7ca78c08-252a-4471-8644-bb5ff32d4ba0",
"name": "7ca78c08-252a-4471-8644-bb5ff32d4ba0",
"permissions": [
{
"actions": [
"Microsoft.Authorization/*/read",
"Microsoft.Insights/alertRules/*",
"Microsoft.ResourceHealth/availabilityStatuses/read",
"Microsoft.Resources/deployments/*",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.Search/searchServices/*",
"Microsoft.Support/*"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "Search Service Contributor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}