Inbyggda Azure-roller för AI + maskininlärning

Artikel
10/28/2024

I den här artikeln visas de inbyggda Azure-rollerna i kategorin AI + maskininlärning.

AgFood Platform Sensor Partner Deltagare

Ger bidragsåtkomst för att hantera sensorrelaterade entiteter i AgFood Platform Service

Åtgärder	Description
ingen
NotActions
ingen
DataActions
Microsoft.AgFoodPlatform/farmBeats/sensorPartnerScope/*
NotDataActions
Microsoft.AgFoodPlatform/farmBeats/sensorPartnerScope/sensors/delete	Tar bort en befintlig AgFoodPlatform-sensorresurs som är begränsad till anroparens sensorpartneromfång.

{
  "assignableScopes": [
    "/"
  ],
  "description": "Provides contribute access to manage sensor related entities in AgFood Platform Service",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/6b77f0a0-0d89-41cc-acd1-579c22c17a67",
  "name": "6b77f0a0-0d89-41cc-acd1-579c22c17a67",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.AgFoodPlatform/farmBeats/sensorPartnerScope/*"
      ],
      "notDataActions": [
        "Microsoft.AgFoodPlatform/farmBeats/sensorPartnerScope/sensors/delete"
      ]
    }
  ],
  "roleName": "AgFood Platform Sensor Partner Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

AgFood Platform Service Admin

Ger administratörsåtkomst till AgFood Platform Service

Läs mer

Åtgärder	Description
ingen
NotActions
ingen
DataActions
Microsoft.AgFoodPlatform/*	Skapa, uppdatera, läsa och ta bort alla AgFood Platform-resurser.
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Provides admin access to AgFood Platform Service",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/f8da80de-1ff9-4747-ad80-a19b7f6079e3",
  "name": "f8da80de-1ff9-4747-ad80-a19b7f6079e3",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.AgFoodPlatform/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "AgFood Platform Service Admin",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

AgFood Platform Service-deltagare

Ger bidragsåtkomst till AgFood Platform Service

Läs mer

Åtgärder	Description
ingen
NotActions
ingen
DataActions
Microsoft.AgFoodPlatform/*/action
Microsoft.AgFoodPlatform/*/read	Läs eventuella AgFood Platform-resurser.
Microsoft.AgFoodPlatform/*/write	Skapa och uppdatera agfoodplattformsresurser.
NotDataActions
Microsoft.AgFoodPlatform/farmBeats/farmers/write	Skapar eller uppdaterar AgFoodPlatform-bönder.
Microsoft.AgFoodPlatform/farmBeats/deletionJobs/*/write
Microsoft.AgFoodPlatform/farmBeats/parties/write	Skapar eller uppdaterar AgFoodPlatform-parter.
Microsoft.AgFoodPlatform/farmBeats/datauppsättningar/skrivning	Skapar eller uppdaterar AgFoodPlatform-datauppsättningar.
Microsoft.AgFoodPlatform/farmBeats/datasetRecords/write	Skapar eller uppdaterar AgFoodPlatform-datauppsättningsposter.
Microsoft.AgFoodPlatform/farmBeats/datauppsättningar/access/*/action

{
  "assignableScopes": [
    "/"
  ],
  "description": "Provides contribute access to AgFood Platform Service",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/8508508a-4469-4e45-963b-2518ee0bb728",
  "name": "8508508a-4469-4e45-963b-2518ee0bb728",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.AgFoodPlatform/*/action",
        "Microsoft.AgFoodPlatform/*/read",
        "Microsoft.AgFoodPlatform/*/write"
      ],
      "notDataActions": [
        "Microsoft.AgFoodPlatform/farmBeats/farmers/write",
        "Microsoft.AgFoodPlatform/farmBeats/deletionJobs/*/write",
        "Microsoft.AgFoodPlatform/farmBeats/parties/write",
        "Microsoft.AgFoodPlatform/farmBeats/datasets/write",
        "Microsoft.AgFoodPlatform/farmBeats/datasetRecords/write",
        "Microsoft.AgFoodPlatform/farmBeats/datasets/access/*/action"
      ]
    }
  ],
  "roleName": "AgFood Platform Service Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

AgFood Platform Service Reader

Ger läsåtkomst till AgFood Platform Service

Läs mer

Åtgärder	Description
ingen
NotActions
ingen
DataActions
Microsoft.AgFoodPlatform/*/list/action
Microsoft.AgFoodPlatform/*/read	Läs eventuella AgFood Platform-resurser.
Microsoft.AgFoodPlatform/*/search/action
Microsoft.AgFoodPlatform/*/download/action
Microsoft.AgFoodPlatform/*/overlap/action
Microsoft.AgFoodPlatform/*/checkConsent/action
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Provides read access to AgFood Platform Service",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/7ec7ccdc-f61e-41fe-9aaf-980df0a44eba",
  "name": "7ec7ccdc-f61e-41fe-9aaf-980df0a44eba",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.AgFoodPlatform/*/list/action",
        "Microsoft.AgFoodPlatform/*/read",
        "Microsoft.AgFoodPlatform/*/search/action",
        "Microsoft.AgFoodPlatform/*/download/action",
        "Microsoft.AgFoodPlatform/*/overlap/action",
        "Microsoft.AgFoodPlatform/*/checkConsent/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "AgFood Platform Service Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Azure AI-utvecklare

Kan utföra alla åtgärder i en Azure AI-resurs förutom att hantera själva resursen.

Läs mer

Åtgärder	beskrivning
Microsoft.MachineLearningServices/workspaces/*/read
Microsoft.MachineLearningServices/workspaces/*/action
Microsoft.MachineLearningServices/workspaces/*/delete
Microsoft.MachineLearningServices/workspaces/*/write
Microsoft.MachineLearningServices/locations/*/read
Microsoft.Authorization/*/read	Läsa roller och rolltilldelningar
Microsoft.Resources/deployments/*	Skapa och hantera en distribution
NotActions
Microsoft.MachineLearningServices/workspaces/delete	Tar bort Machine Learning Services-arbetsytor
Microsoft.MachineLearningServices/workspaces/write	Skapar eller uppdaterar en Machine Learning Services-arbetsyta
Microsoft.MachineLearningServices/workspaces/listKeys/action	Lista hemligheter för en Machine Learning Services-arbetsyta
Microsoft.MachineLearningServices/workspaces/hubs/write	Skapar eller uppdaterar en Machine Learning Services Hub-arbetsyta
Microsoft.MachineLearningServices/workspaces/hubs/delete	Tar bort Machine Learning Services Hub-arbetsytor
Microsoft.MachineLearningServices/workspaces/featurestores/write	Skapar eller uppdaterar Machine Learning Services FeatureStore(er)
Microsoft.MachineLearningServices/workspaces/featurestores/delete	Tar bort Machine Learning Services FeatureStore(er)
DataActions
Microsoft.CognitiveServices/accounts/OpenAI/*
Microsoft.CognitiveServices/accounts/SpeechServices/*
Microsoft.CognitiveServices/accounts/ContentSafety/*
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Can perform all actions within an Azure AI resource besides managing the resource itself.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/64702f94-c441-49e6-a78b-ef80e0188fee",
  "name": "64702f94-c441-49e6-a78b-ef80e0188fee",
  "permissions": [
    {
      "actions": [
        "Microsoft.MachineLearningServices/workspaces/*/read",
        "Microsoft.MachineLearningServices/workspaces/*/action",
        "Microsoft.MachineLearningServices/workspaces/*/delete",
        "Microsoft.MachineLearningServices/workspaces/*/write",
        "Microsoft.MachineLearningServices/locations/*/read",
        "Microsoft.Authorization/*/read",
        "Microsoft.Resources/deployments/*"
      ],
      "notActions": [
        "Microsoft.MachineLearningServices/workspaces/delete",
        "Microsoft.MachineLearningServices/workspaces/write",
        "Microsoft.MachineLearningServices/workspaces/listKeys/action",
        "Microsoft.MachineLearningServices/workspaces/hubs/write",
        "Microsoft.MachineLearningServices/workspaces/hubs/delete",
        "Microsoft.MachineLearningServices/workspaces/featurestores/write",
        "Microsoft.MachineLearningServices/workspaces/featurestores/delete"
      ],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/OpenAI/*",
        "Microsoft.CognitiveServices/accounts/SpeechServices/*",
        "Microsoft.CognitiveServices/accounts/ContentSafety/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Azure AI Developer",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Godkännare för Azure AI Enterprise-nätverksanslutning

Kan godkänna privata slutpunktsanslutningar till vanliga beroenderesurser i Azure AI

Läs mer

Åtgärder	beskrivning
Microsoft.ContainerRegistry/registries/privateEndpointConnectionsApproval/action	Godkänner automatiskt en privat slutpunktsanslutning
Microsoft.ContainerRegistry/registries/privateEndpointConnections/read	Hämtar egenskaperna för privat slutpunktsanslutning eller listar alla privata slutpunktsanslutningar för det angivna containerregistret
Microsoft.ContainerRegistry/registries/privateEndpointConnections/write	Godkänner/avvisar den privata slutpunktsanslutningen
Microsoft.Cache/redis/read	Visa Redis Caches inställningar och konfiguration i hanteringsportalen
Microsoft.Cache/redis/privateEndpointConnections/read	Läsa en privat slutpunktsanslutning
Microsoft.Cache/redis/privateEndpointConnections/write	Skriva en privat slutpunktsanslutning
Microsoft.Cache/redis/privateLinkResources/read	Läs "groupId" för redis-underresurs som en privat länk kan anslutas till
Microsoft.Cache/redis/privateEndpointConnectionsApproval/action	Godkänna privata slutpunktsanslutningar
Microsoft.Cache/redisEnterprise/read	Visa Redis Enterprise-cachens inställningar och konfiguration i hanteringsportalen
Microsoft.Cache/redisEnterprise/privateEndpointConnections/read	Läsa en privat slutpunktsanslutning
Microsoft.Cache/redisEnterprise/privateEndpointConnections/write	Skriva en privat slutpunktsanslutning
Microsoft.Cache/redisEnterprise/privateLinkResources/read	Läs "groupId" för redis-underresurs som en privat länk kan anslutas till
Microsoft.Cache/redisEnterprise/privateEndpointConnectionsApproval/action	Godkänna privata slutpunktsanslutningar
Microsoft.CognitiveServices/accounts/read	Läser API-konton.
Microsoft.CognitiveServices/accounts/privateEndpointConnections/read	Läser privata slutpunktsanslutningar.
Microsoft.CognitiveServices/accounts/privateEndpointConnections/write	Skriver en privat slutpunktsanslutning.
Microsoft.CognitiveServices/accounts/privateLinkResources/read	Läser privata länkresurser för ett konto.
Microsoft.DocumentDB/databaseAccounts/privateEndpointConnectionsApproval/action	Hantera en privat slutpunktsanslutning för databaskontot
Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections/read	Läsa en privat slutpunktsanslutning eller visa en lista över alla privata slutpunktsanslutningar för ett databaskonto
Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections/write	Skapa eller uppdatera en privat slutpunktsanslutning för ett databaskonto
Microsoft.DocumentDB/databaseAccounts/privateLinkResources/read	Läs en privat länkresurs eller visa en lista över alla privata länkresurser för ett databaskonto
Microsoft.DocumentDB/databaseAccounts/read	Läser ett databaskonto.
Microsoft.KeyVault/vaults/privateEndpointConnectionsApproval/action	Godkänna eller avvisa en anslutning till en privat slutpunktsresurs för Microsoft.Network-providern
Microsoft.KeyVault/vaults/privateEndpointConnections/read	Visa tillståndet för en anslutning till en privat slutpunktsresurs för Microsoft.Network-providern
Microsoft.KeyVault/vaults/privateEndpointConnections/write	Ändra tillståndet för en anslutning till en privat slutpunktsresurs för Microsoft.Network-providern
Microsoft.KeyVault/vaults/privateLinkResources/read	Hämta tillgängliga privata länkresurser för den angivna instansen av Key Vault
Microsoft.KeyVault/vaults/read	Visa egenskaperna för ett nyckelvalv
Microsoft.MachineLearningServices/workspaces/privateEndpointConnectionsApproval/action	Godkänna eller avvisa en anslutning till en privat slutpunktsresurs för Microsoft.Network-providern
Microsoft.MachineLearningServices/workspaces/privateEndpointConnections/read	Visa tillståndet för en anslutning till en privat slutpunktsresurs för Microsoft.Network-providern
Microsoft.MachineLearningServices/workspaces/privateEndpointConnections/write	Ändra tillståndet för en anslutning till en privat slutpunktsresurs för Microsoft.Network-providern
Microsoft.MachineLearningServices/workspaces/privateLinkResources/read	Hämtar tillgängliga privata länkresurser för den angivna instansen av Machine Learning Services-arbetsytor
Microsoft.MachineLearningServices/workspaces/read	Hämtar Machine Learning Services-arbetsytor
Microsoft.Storage/storageAccounts/privateEndpointConnections/read	Hämta privat slutpunktsanslutning
Microsoft.Storage/storageAccounts/privateEndpointConnections/write	Placera privat slutpunktsanslutning
Microsoft.Storage/storageAccounts/privateLinkResources/read	Hämta StorageAccount groupids
Microsoft.Storage/storageAccounts/read	Returnerar listan över lagringskonton eller hämtar egenskaperna för det angivna lagringskontot.
Microsoft.Sql/servers/privateEndpointConnectionsApproval/action	Avgör om användaren får godkänna en privat slutpunktsanslutning
Microsoft.Sql/servers/privateEndpointConnections/read	Returnerar listan över privata slutpunktsanslutningar eller hämtar egenskaperna för den angivna privata slutpunktsanslutningen.
Microsoft.Sql/servers/privateEndpointConnections/write	Godkänner eller avvisar en befintlig privat slutpunktsanslutning
Microsoft.Sql/servers/privateLinkResources/read	Hämta private link-resurserna för motsvarande SQL-server
Microsoft.Sql/servers/read	Returnera listan över servrar eller hämta egenskaperna för den angivna servern.
NotActions
ingen
DataActions
ingen
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Can approve private endpoint connections to Azure AI common dependency resources",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/b556d68e-0be0-4f35-a333-ad7ee1ce17ea",
  "name": "b556d68e-0be0-4f35-a333-ad7ee1ce17ea",
  "permissions": [
    {
      "actions": [
        "Microsoft.ContainerRegistry/registries/privateEndpointConnectionsApproval/action",
        "Microsoft.ContainerRegistry/registries/privateEndpointConnections/read",
        "Microsoft.ContainerRegistry/registries/privateEndpointConnections/write",
        "Microsoft.Cache/redis/read",
        "Microsoft.Cache/redis/privateEndpointConnections/read",
        "Microsoft.Cache/redis/privateEndpointConnections/write",
        "Microsoft.Cache/redis/privateLinkResources/read",
        "Microsoft.Cache/redis/privateEndpointConnectionsApproval/action",
        "Microsoft.Cache/redisEnterprise/read",
        "Microsoft.Cache/redisEnterprise/privateEndpointConnections/read",
        "Microsoft.Cache/redisEnterprise/privateEndpointConnections/write",
        "Microsoft.Cache/redisEnterprise/privateLinkResources/read",
        "Microsoft.Cache/redisEnterprise/privateEndpointConnectionsApproval/action",
        "Microsoft.CognitiveServices/accounts/read",
        "Microsoft.CognitiveServices/accounts/privateEndpointConnections/read",
        "Microsoft.CognitiveServices/accounts/privateEndpointConnections/write",
        "Microsoft.CognitiveServices/accounts/privateLinkResources/read",
        "Microsoft.DocumentDB/databaseAccounts/privateEndpointConnectionsApproval/action",
        "Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections/read",
        "Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections/write",
        "Microsoft.DocumentDB/databaseAccounts/privateLinkResources/read",
        "Microsoft.DocumentDB/databaseAccounts/read",
        "Microsoft.KeyVault/vaults/privateEndpointConnectionsApproval/action",
        "Microsoft.KeyVault/vaults/privateEndpointConnections/read",
        "Microsoft.KeyVault/vaults/privateEndpointConnections/write",
        "Microsoft.KeyVault/vaults/privateLinkResources/read",
        "Microsoft.KeyVault/vaults/read",
        "Microsoft.MachineLearningServices/workspaces/privateEndpointConnectionsApproval/action",
        "Microsoft.MachineLearningServices/workspaces/privateEndpointConnections/read",
        "Microsoft.MachineLearningServices/workspaces/privateEndpointConnections/write",
        "Microsoft.MachineLearningServices/workspaces/privateLinkResources/read",
        "Microsoft.MachineLearningServices/workspaces/read",
        "Microsoft.Storage/storageAccounts/privateEndpointConnections/read",
        "Microsoft.Storage/storageAccounts/privateEndpointConnections/write",
        "Microsoft.Storage/storageAccounts/privateLinkResources/read",
        "Microsoft.Storage/storageAccounts/read",
        "Microsoft.Sql/servers/privateEndpointConnectionsApproval/action",
        "Microsoft.Sql/servers/privateEndpointConnections/read",
        "Microsoft.Sql/servers/privateEndpointConnections/write",
        "Microsoft.Sql/servers/privateLinkResources/read",
        "Microsoft.Sql/servers/read"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Azure AI Enterprise Network Connection Approver",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Distributionsoperatör för Azure AI-slutsatsdragning

Kan utföra alla åtgärder som krävs för att skapa en resursdistribution i en resursgrupp.

Läs mer

Åtgärder	Beskrivning
Microsoft.Authorization/*/read	Läsa roller och rolltilldelningar
Microsoft.Resources/deployments/*	Skapa och hantera en distribution
Microsoft.Insights/AutoscaleSettings/write	Skapa eller uppdatera en autoskalningsinställning
NotActions
ingen
DataActions
ingen
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Can perform all actions required to create a resource deployment within a resource group.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/3afb7f49-54cb-416e-8c09-6dc049efa503",
  "name": "3afb7f49-54cb-416e-8c09-6dc049efa503",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Insights/AutoscaleSettings/write"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Azure AI Inference Deployment Operator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

AzureML-beräkningsoperator

Kan komma åt och utföra CRUD-åtgärder på hanterade beräkningsresurser för Machine Learning Services (inklusive virtuella notebook-datorer).

Läs mer

Åtgärder	beskrivning
Microsoft.MachineLearningServices/workspaces/computes/*
Microsoft.MachineLearningServices/workspaces/notebooks/vm/*
NotActions
ingen
DataActions
ingen
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Can access and perform CRUD operations on Machine Learning Services managed compute resources (including Notebook VMs).",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/e503ece1-11d0-4e8e-8e2c-7a6c3bf38815",
  "name": "e503ece1-11d0-4e8e-8e2c-7a6c3bf38815",
  "permissions": [
    {
      "actions": [
        "Microsoft.MachineLearningServices/workspaces/computes/*",
        "Microsoft.MachineLearningServices/workspaces/notebooks/vm/*"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "AzureML Compute Operator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

AzureML-dataforskare

Kan utföra alla åtgärder på en Azure Machine Learning-arbetsyta, förutom att skapa eller ta bort beräkningsresurser och ändra själva arbetsytan.

Läs mer

Åtgärder	beskrivning
Microsoft.MachineLearningServices/workspaces/*/read
Microsoft.MachineLearningServices/workspaces/*/action
Microsoft.MachineLearningServices/workspaces/*/delete
Microsoft.MachineLearningServices/workspaces/*/write
NotActions
Microsoft.MachineLearningServices/workspaces/delete	Tar bort Machine Learning Services-arbetsytor
Microsoft.MachineLearningServices/workspaces/write	Skapar eller uppdaterar en Machine Learning Services-arbetsyta
Microsoft.MachineLearningServices/workspaces/computes/*/write
Microsoft.MachineLearningServices/workspaces/computes/*/delete
Microsoft.MachineLearningServices/workspaces/computes/listKeys/action	Lista hemligheter för beräkningsresurser i Machine Learning Services-arbetsytan
Microsoft.MachineLearningServices/workspaces/listKeys/action	Lista hemligheter för en Machine Learning Services-arbetsyta
Microsoft.MachineLearningServices/workspaces/hubs/write	Skapar eller uppdaterar en Machine Learning Services Hub-arbetsyta
Microsoft.MachineLearningServices/workspaces/hubs/delete	Tar bort Machine Learning Services Hub-arbetsytor
Microsoft.MachineLearningServices/workspaces/featurestores/write	Skapar eller uppdaterar Machine Learning Services FeatureStore(er)
Microsoft.MachineLearningServices/workspaces/featurestores/delete	Tar bort Machine Learning Services FeatureStore(er)
DataActions
ingen
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Can perform all actions within an Azure Machine Learning workspace, except for creating or deleting compute resources and modifying the workspace itself.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/f6c7c914-8db3-469d-8ca1-694a8f32e121",
  "name": "f6c7c914-8db3-469d-8ca1-694a8f32e121",
  "permissions": [
    {
      "actions": [
        "Microsoft.MachineLearningServices/workspaces/*/read",
        "Microsoft.MachineLearningServices/workspaces/*/action",
        "Microsoft.MachineLearningServices/workspaces/*/delete",
        "Microsoft.MachineLearningServices/workspaces/*/write"
      ],
      "notActions": [
        "Microsoft.MachineLearningServices/workspaces/delete",
        "Microsoft.MachineLearningServices/workspaces/write",
        "Microsoft.MachineLearningServices/workspaces/computes/*/write",
        "Microsoft.MachineLearningServices/workspaces/computes/*/delete",
        "Microsoft.MachineLearningServices/workspaces/computes/listKeys/action",
        "Microsoft.MachineLearningServices/workspaces/listKeys/action",
        "Microsoft.MachineLearningServices/workspaces/hubs/write",
        "Microsoft.MachineLearningServices/workspaces/hubs/delete",
        "Microsoft.MachineLearningServices/workspaces/featurestores/write",
        "Microsoft.MachineLearningServices/workspaces/featurestores/delete"
      ],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "AzureML Data Scientist",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

AzureML Metrics Writer (förhandsversion)

Gör att du kan skriva mått till AzureML-arbetsytan

Läs mer

Åtgärder	beskrivning
Microsoft.MachineLearningServices/workspaces/metrics/*/write
NotActions
ingen
DataActions
ingen
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you write metrics to AzureML workspace",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/635dd51f-9968-44d3-b7fb-6d9a6bd613ae",
  "name": "635dd51f-9968-44d3-b7fb-6d9a6bd613ae",
  "permissions": [
    {
      "actions": [
        "Microsoft.MachineLearningServices/workspaces/metrics/*/write"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "AzureML Metrics Writer (preview)",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

AzureML-registeranvändare

Kan utföra alla åtgärder på Machine Learning Services Registry-tillgångar samt hämta registerresurser.

Läs mer

Åtgärder	beskrivning
Microsoft.MachineLearningServices/register/read	Hämtar Machine Learning Services-registret(ies)
Microsoft.MachineLearningServices/registries/assets/*
NotActions
ingen
DataActions
ingen
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Can perform all actions on Machine Learning Services Registry assets as well as get Registry resources.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/1823dd4f-9b8c-4ab6-ab4e-7397a3684615",
  "name": "1823dd4f-9b8c-4ab6-ab4e-7397a3684615",
  "permissions": [
    {
      "actions": [
        "Microsoft.MachineLearningServices/registries/read",
        "Microsoft.MachineLearningServices/registries/assets/*"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "AzureML Registry User",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services-deltagare

Gör att du kan skapa, läsa, uppdatera, ta bort och hantera nycklar för Cognitive Services.

Läs mer

Åtgärder	Beskrivning
Microsoft.Authorization/*/read	Läsa roller och rolltilldelningar
Microsoft.CognitiveServices/*
Microsoft.Features/features/read	Hämtar funktionerna i en prenumeration.
Microsoft.Features/providers/features/read	Hämtar funktionen för en prenumeration i en viss resursprovider.
Microsoft.Features/providers/features/register/action	Registrerar funktionen för en prenumeration i en viss resursprovider.
Microsoft.Insights/alertRules/*	Skapa och hantera en klassisk måttavisering
Microsoft.Insights/diagnosticSettings/*	Skapar, uppdaterar eller läser diagnostikinställningen för Analysis Server
Microsoft.Insights/logDefinitions/read	Läsa loggdefinitioner
Microsoft.Insights/metricdefinitions/read	Läsa måttdefinitioner
Microsoft.Insights/metrics/read	Läsa mått
Microsoft.ResourceHealth/availabilityStatuses/read	Hämtar tillgänglighetsstatusar för alla resurser i det angivna omfånget
Microsoft.Resources/deployments/*	Skapa och hantera en distribution
Microsoft.Resources/deployments/operations/read	Hämtar eller listar distributionsåtgärder.
Microsoft.Resources/subscriptions/operationresults/read	Hämta resultatet av prenumerationsåtgärden.
Microsoft.Resources/subscriptions/read	Hämtar listan över prenumerationer.
Microsoft.Resources/subscriptions/resourcegroups/deployments/*
Microsoft.Resources/subscriptions/resourceGroups/read	Hämtar eller listar resursgrupper.
Microsoft.Support/*	Skapa och uppdatera ett supportärende
NotActions
ingen
DataActions
ingen
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you create, read, update, delete and manage keys of Cognitive Services.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68",
  "name": "25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.CognitiveServices/*",
        "Microsoft.Features/features/read",
        "Microsoft.Features/providers/features/read",
        "Microsoft.Features/providers/features/register/action",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.Insights/diagnosticSettings/*",
        "Microsoft.Insights/logDefinitions/read",
        "Microsoft.Insights/metricdefinitions/read",
        "Microsoft.Insights/metrics/read",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/deployments/operations/read",
        "Microsoft.Resources/subscriptions/operationresults/read",
        "Microsoft.Resources/subscriptions/read",
        "Microsoft.Resources/subscriptions/resourcegroups/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Support/*"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services Custom Vision-deltagare

Fullständig åtkomst till projektet, inklusive möjligheten att visa, skapa, redigera eller ta bort projekt.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/CustomVision/*
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Full access to the project, including the ability to view, create, edit, or delete projects.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/c1ff6cc2-c111-46fe-8896-e0ef812ad9f3",
  "name": "c1ff6cc2-c111-46fe-8896-e0ef812ad9f3",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/CustomVision/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services Custom Vision Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Distribution av Custom Vision för Cognitive Services

Publicera, avpublicera eller exportera modeller. Distributionen kan visa projektet men kan inte uppdateras.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/CustomVision/*/read
Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/*
Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/publish/*
Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/export/*
Microsoft.CognitiveServices/accounts/CustomVision/projects/quicktest/*
Microsoft.CognitiveServices/accounts/CustomVision/classify/*
Microsoft.CognitiveServices/accounts/CustomVision/detect/*
NotDataActions
Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read	Exporterar ett projekt.

{
  "assignableScopes": [
    "/"
  ],
  "description": "Publish, unpublish or export models. Deployment can view the project but can't update.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/5c4089e1-6d96-4d2f-b296-c1bc7137275f",
  "name": "5c4089e1-6d96-4d2f-b296-c1bc7137275f",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/CustomVision/*/read",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/*",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/publish/*",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/export/*",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/quicktest/*",
        "Microsoft.CognitiveServices/accounts/CustomVision/classify/*",
        "Microsoft.CognitiveServices/accounts/CustomVision/detect/*"
      ],
      "notDataActions": [
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read"
      ]
    }
  ],
  "roleName": "Cognitive Services Custom Vision Deployment",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services Custom Vision Labeler

Visa, redigera träningsbilder och skapa, lägga till, ta bort eller ta bort bildtaggar. Etiketter kan visa projektet men kan inte uppdatera något annat än träningsbilder och taggar.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/CustomVision/*/read
Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action	Hämta bilder som skickades till förutsägelseslutpunkten.
Microsoft.CognitiveServices/accounts/CustomVision/projects/images/*
Microsoft.CognitiveServices/accounts/CustomVision/projects/tags/*
Microsoft.CognitiveServices/accounts/CustomVision/projects/images/suggested/*
Microsoft.CognitiveServices/accounts/CustomVision/projects/tagsandregions/suggestions/action	Det här API:et hämtar föreslagna taggar och regioner för en matris/batch med otaggade bilder tillsammans med förtroenden för taggarna. Den returnerar en tom matris om inga taggar hittas.
NotDataActions
Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read	Exporterar ett projekt.

{
  "assignableScopes": [
    "/"
  ],
  "description": "View, edit training images and create, add, remove, or delete the image tags. Labelers can view the project but can't update anything other than training images and tags.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/88424f51-ebe7-446f-bc41-7fa16989e96c",
  "name": "88424f51-ebe7-446f-bc41-7fa16989e96c",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/CustomVision/*/read",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/images/*",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/tags/*",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/images/suggested/*",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/tagsandregions/suggestions/action"
      ],
      "notDataActions": [
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read"
      ]
    }
  ],
  "roleName": "Cognitive Services Custom Vision Labeler",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services Custom Vision Reader

Skrivskyddade åtgärder i projektet. Läsare kan inte skapa eller uppdatera projektet.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/CustomVision/*/read
Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action	Hämta bilder som skickades till förutsägelseslutpunkten.
NotDataActions
Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read	Exporterar ett projekt.

{
  "assignableScopes": [
    "/"
  ],
  "description": "Read-only actions in the project. Readers can't create or update the project.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/93586559-c37d-4a6b-ba08-b9f0940c2d73",
  "name": "93586559-c37d-4a6b-ba08-b9f0940c2d73",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/CustomVision/*/read",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action"
      ],
      "notDataActions": [
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read"
      ]
    }
  ],
  "roleName": "Cognitive Services Custom Vision Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services Custom Vision Trainer

Visa, redigera projekt och träna modellerna, inklusive möjligheten att publicera, avpublicera, exportera modellerna. Utbildare kan inte skapa eller ta bort projektet.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/CustomVision/*
NotDataActions
Microsoft.CognitiveServices/accounts/CustomVision/projects/action	Skapa ett projekt.
Microsoft.CognitiveServices/accounts/CustomVision/projects/delete	Ta bort ett visst projekt.
Microsoft.CognitiveServices/accounts/CustomVision/projects/import/action	Importerar ett projekt.
Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read	Exporterar ett projekt.

{
  "assignableScopes": [
    "/"
  ],
  "description": "View, edit projects and train the models, including the ability to publish, unpublish, export the models. Trainers can't create or delete the project.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/0a5ae4ab-0d65-4eeb-be61-29fc9b54394b",
  "name": "0a5ae4ab-0d65-4eeb-be61-29fc9b54394b",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/CustomVision/*"
      ],
      "notDataActions": [
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/action",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/delete",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/import/action",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read"
      ]
    }
  ],
  "roleName": "Cognitive Services Custom Vision Trainer",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services-dataläsare

Låter dig läsa Cognitive Services-data.

Läs mer

Åtgärder	Description
ingen
NotActions
ingen
DataActions
Microsoft.CognitiveServices/*/read
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you read Cognitive Services data.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/b59867f0-fa02-499b-be73-45a86b5b3e1c",
  "name": "b59867f0-fa02-499b-be73-45a86b5b3e1c",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/*/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services Data Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Ansiktsigenkänning för Cognitive Services

Gör att du kan identifiera, verifiera, identifiera, gruppera och hitta liknande åtgärder i Ansikts-API. Den här rollen tillåter inte åtgärder för att skapa eller ta bort, vilket gör den lämplig för slutpunkter som bara behöver slutsatsdragningsfunktioner, enligt bästa praxis för "lägsta behörighet".

Åtgärder	Description
ingen
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/Face/detect/action	Identifiera mänskliga ansikten i en bild, returnera ansiktsrektanglar och eventuellt med faceId, landmärken och attribut.
Microsoft.CognitiveServices/accounts/Face/verify/action	Kontrollera om två ansikten tillhör samma person eller om ett ansikte tillhör en person.
Microsoft.CognitiveServices/accounts/Face/identify/action	1-till-många-identifiering för att hitta de närmaste matchningarna för den specifika frågepersonens ansikte från en persongrupp eller stor persongrupp.
Microsoft.CognitiveServices/accounts/Face/group/action	Dela upp kandidatansikten i grupper baserat på ansiktslikhet.
Microsoft.CognitiveServices/accounts/Face/findsimilars/action	Med tanke på frågeansiktets faceId kan du söka i liknande ansikten från en faceId-matris, en ansiktslista eller en stor ansiktslista. faceId
Microsoft.CognitiveServices/accounts/Face/detectliveness/multimodal/action	Utför livenessidentifiering på ett mål ansikte i en sekvens av infraröda, färg och /eller djup bilder, och returnerar liveness klassificering av mål ansikte som antingen "riktiga ansikte", "förfalskning ansikte" eller "osäker" om en klassificering inte kan göras med de angivna indata.
Microsoft.CognitiveServices/accounts/Face/detectliveness/singlemodal/action	Utför livenessidentifiering på ett mål ansikte i en sekvens av bilder av samma modalitet (t.ex. färg eller infraröd), och returnerar liveness klassificeringen av mål ansikte som antingen "riktiga ansikte", "förfalskning ansikte" eller "osäker" om en klassificering inte kan göras med de angivna indata.
Microsoft.CognitiveServices/accounts/Face/detectlivenesswithverify/singlemodal/action	Identifierar liveness för ett målansikte i en sekvens med bilder av samma strömtyp (t.ex. färg) och jämför sedan med VerifyImage för att returnera konfidenspoäng för identitetsscenarier.
Microsoft.CognitiveServices/accounts/Face/*/sessions/action
Microsoft.CognitiveServices/accounts/Face/*/sessions/delete
Microsoft.CognitiveServices/accounts/Face/*/sessions/read
Microsoft.CognitiveServices/accounts/Face/*/sessions/audit/read
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you perform detect, verify, identify, group, and find similar operations on Face API. This role does not allow create or delete operations, which makes it well suited for endpoints that only need inferencing capabilities, following 'least privilege' best practices.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/9894cab4-e18a-44aa-828b-cb588cd6f2d7",
  "name": "9894cab4-e18a-44aa-828b-cb588cd6f2d7",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/Face/detect/action",
        "Microsoft.CognitiveServices/accounts/Face/verify/action",
        "Microsoft.CognitiveServices/accounts/Face/identify/action",
        "Microsoft.CognitiveServices/accounts/Face/group/action",
        "Microsoft.CognitiveServices/accounts/Face/findsimilars/action",
        "Microsoft.CognitiveServices/accounts/Face/detectliveness/multimodal/action",
        "Microsoft.CognitiveServices/accounts/Face/detectliveness/singlemodal/action",
        "Microsoft.CognitiveServices/accounts/Face/detectlivenesswithverify/singlemodal/action",
        "Microsoft.CognitiveServices/accounts/Face/*/sessions/action",
        "Microsoft.CognitiveServices/accounts/Face/*/sessions/delete",
        "Microsoft.CognitiveServices/accounts/Face/*/sessions/read",
        "Microsoft.CognitiveServices/accounts/Face/*/sessions/audit/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services Face Recognizer",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services Avancerad läsare-användare

Ger åtkomst till att skapa Avancerad läsare sessioner och anropa API:er

Läs mer

Åtgärder	Description
ingen
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/ImmersiveReader/getcontentmodelforreader/action	Skapar en Avancerad läsare session
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Provides access to create Immersive Reader sessions and call APIs",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/b2de6794-95db-4659-8781-7e080d3f2b9d",
  "name": "b2de6794-95db-4659-8781-7e080d3f2b9d",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/ImmersiveReader/getcontentmodelforreader/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services Immersive Reader User",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services-språkägare

Har åtkomst till alla läs-, test-, skriv-, distributions- och borttagningsfunktioner under Språkportalen

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
Microsoft.CognitiveServices/accounts/listkeys/action	Visa en lista med nycklar
Microsoft.Authorization/roleAssignments/read	Hämta information om en rolltilldelning.
Microsoft.Authorization/roleDefinitions/read	Hämta information om en rolldefinition.
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/LanguageAuthoring/*
Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/*
Microsoft.CognitiveServices/accounts/Language/*
Microsoft.CognitiveServices/accounts/TextAnalytics/*
NotDataActions
Microsoft.CognitiveServices/accounts/TextAnalytics/QnaMaker/*

{
  "assignableScopes": [
    "/"
  ],
  "description": "Has access to all Read, Test, Write, Deploy and Delete functions under Language portal",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/f07febfe-79bc-46b1-8b37-790e26e6e498",
  "name": "f07febfe-79bc-46b1-8b37-790e26e6e498",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read",
        "Microsoft.CognitiveServices/accounts/listkeys/action",
        "Microsoft.Authorization/roleAssignments/read",
        "Microsoft.Authorization/roleDefinitions/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/LanguageAuthoring/*",
        "Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/*",
        "Microsoft.CognitiveServices/accounts/Language/*",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/*"
      ],
      "notDataActions": [
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnaMaker/*"
      ]
    }
  ],
  "roleName": "Cognitive Services Language Owner",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services Language Reader

Har åtkomst till läs- och testfunktioner under Språkportalen

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
Microsoft.Authorization/roleAssignments/read	Hämta information om en rolltilldelning.
Microsoft.Authorization/roleDefinitions/read	Hämta information om en rolldefinition.
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/LanguageAuthoring/*/read
Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/*/read
Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/projects/export/action	Utlöser ett jobb för att exportera projektdata i JSON-format.
Microsoft.CognitiveServices/accounts/Language/*/read
Microsoft.CognitiveServices/accounts/Language/*/projects/export/action
Microsoft.CognitiveServices/accounts/Language/query-text/action	Svara på text.
Microsoft.CognitiveServices/accounts/Language/query-dataverse/action	Fråga Dataverse.
Microsoft.CognitiveServices/accounts/Language/analyze-text/jobs/action	Skicka en samling textdokument för analys. Ange en eller flera unika uppgifter som ska köras.
Microsoft.CognitiveServices/accounts/Language/analyze-text/action	Skicka en samling textdokument för analys. Ange en enda unik uppgift som ska köras omedelbart.
Microsoft.CognitiveServices/accounts/Language/analyze-text/jobscancel/action	Avbryt ett tidskrävande textanalysjobb.
Microsoft.CognitiveServices/accounts/Language/analyze-conversations/action	Analyserar indatakonversationen.
Microsoft.CognitiveServices/accounts/Language/analyze-conversations/jobscancel/action	Avbryt ett tidskrävande analysjobb i konversationen.
Microsoft.CognitiveServices/accounts/Language/analyze-conversations/jobs/action	Skicka en lång konversation för analys. Ange en eller flera unika uppgifter som ska köras som en tidskrävande åtgärd.
Microsoft.CognitiveServices/accounts/Language/query-knowledgebases/action	Svar på Kunskapsbas.
Microsoft.CognitiveServices/accounts/Language/generate/action	Språkgenerering.
Microsoft.CognitiveServices/accounts/TextAnalytics/*
NotDataActions
Microsoft.CognitiveServices/accounts/TextAnalytics/QnaMaker/*

{
  "assignableScopes": [
    "/"
  ],
  "description": "Has access to Read and Test functions under Language portal",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/7628b7b8-a8b2-4cdc-b46f-e9b35248918e",
  "name": "7628b7b8-a8b2-4cdc-b46f-e9b35248918e",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read",
        "Microsoft.Authorization/roleAssignments/read",
        "Microsoft.Authorization/roleDefinitions/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/LanguageAuthoring/*/read",
        "Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/*/read",
        "Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/projects/export/action",
        "Microsoft.CognitiveServices/accounts/Language/*/read",
        "Microsoft.CognitiveServices/accounts/Language/*/projects/export/action",
        "Microsoft.CognitiveServices/accounts/Language/query-text/action",
        "Microsoft.CognitiveServices/accounts/Language/query-dataverse/action",
        "Microsoft.CognitiveServices/accounts/Language/analyze-text/jobs/action",
        "Microsoft.CognitiveServices/accounts/Language/analyze-text/action",
        "Microsoft.CognitiveServices/accounts/Language/analyze-text/jobscancel/action",
        "Microsoft.CognitiveServices/accounts/Language/analyze-conversations/action",
        "Microsoft.CognitiveServices/accounts/Language/analyze-conversations/jobscancel/action",
        "Microsoft.CognitiveServices/accounts/Language/analyze-conversations/jobs/action",
        "Microsoft.CognitiveServices/accounts/Language/query-knowledgebases/action",
        "Microsoft.CognitiveServices/accounts/Language/generate/action",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/*"
      ],
      "notDataActions": [
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnaMaker/*"
      ]
    }
  ],
  "roleName": "Cognitive Services Language Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services Language Writer

Har åtkomst till alla läs-, test- och skrivfunktioner under Språkportalen

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
Microsoft.Authorization/roleAssignments/read	Hämta information om en rolltilldelning.
Microsoft.Authorization/roleDefinitions/read	Hämta information om en rolldefinition.
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/LanguageAuthoring/*
Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/*
Microsoft.CognitiveServices/accounts/Language/*
Microsoft.CognitiveServices/accounts/TextAnalytics/*
NotDataActions
Microsoft.CognitiveServices/accounts/LanguageAuthoring/projects/publish/action	Utlösa publiceringsjobb.
Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/projects/deployments/write	Utlösa jobb för att skapa ny distribution eller ersätta en befintlig distribution.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnaMaker/*
Microsoft.CognitiveServices/accounts/Language/*/projects/delete
Microsoft.CognitiveServices/accounts/Language/*/projects/deployments/write
Microsoft.CognitiveServices/accounts/Language/*/projects/deployments/delete
Microsoft.CognitiveServices/accounts/Language/*/projects/deployments/swap/action

{
  "assignableScopes": [
    "/"
  ],
  "description": " Has access to all Read, Test, and Write functions under Language Portal",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/f2310ca1-dc64-4889-bb49-c8e0fa3d47a8",
  "name": "f2310ca1-dc64-4889-bb49-c8e0fa3d47a8",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read",
        "Microsoft.Authorization/roleAssignments/read",
        "Microsoft.Authorization/roleDefinitions/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/LanguageAuthoring/*",
        "Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/*",
        "Microsoft.CognitiveServices/accounts/Language/*",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/*"
      ],
      "notDataActions": [
        "Microsoft.CognitiveServices/accounts/LanguageAuthoring/projects/publish/action",
        "Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/projects/deployments/write",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnaMaker/*",
        "Microsoft.CognitiveServices/accounts/Language/*/projects/delete",
        "Microsoft.CognitiveServices/accounts/Language/*/projects/deployments/write",
        "Microsoft.CognitiveServices/accounts/Language/*/projects/deployments/delete",
        "Microsoft.CognitiveServices/accounts/Language/*/projects/deployments/swap/action"
      ]
    }
  ],
  "roleName": "Cognitive Services Language Writer",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Luis-ägare för Cognitive Services

Har åtkomst till alla funktioner för läsning, testning, skrivning, distribution och borttagning under LUIS

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
Microsoft.CognitiveServices/accounts/listkeys/action	Visa en lista med nycklar
Microsoft.Authorization/roleAssignments/read	Hämta information om en rolltilldelning.
Microsoft.Authorization/roleDefinitions/read	Hämta information om en rolldefinition.
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/LUIS/*
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": " Has access to all Read, Test, Write, Deploy and Delete functions under LUIS",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/f72c8140-2111-481c-87ff-72b910f6e3f8",
  "name": "f72c8140-2111-481c-87ff-72b910f6e3f8",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read",
        "Microsoft.CognitiveServices/accounts/listkeys/action",
        "Microsoft.Authorization/roleAssignments/read",
        "Microsoft.Authorization/roleDefinitions/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/LUIS/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services LUIS Owner",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Luis-läsare för Cognitive Services

Har åtkomst till läs- och testfunktioner under LUIS.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
Microsoft.Authorization/roleAssignments/read	Hämta information om en rolltilldelning.
Microsoft.Authorization/roleDefinitions/read	Hämta information om en rolldefinition.
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/LUIS/*/read
Microsoft.CognitiveServices/accounts/LUIS/apps/testdatasets/write	Uppdaterar de senaste testresultaten för en befintlig batchtestdatauppsättning för ett visst program.
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Has access to Read and Test functions under LUIS.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/18e81cdc-4e98-4e29-a639-e7d10c5a6226",
  "name": "18e81cdc-4e98-4e29-a639-e7d10c5a6226",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read",
        "Microsoft.Authorization/roleAssignments/read",
        "Microsoft.Authorization/roleDefinitions/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/LUIS/*/read",
        "Microsoft.CognitiveServices/accounts/LUIS/apps/testdatasets/write"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services LUIS Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Luis-författare för Cognitive Services

Har åtkomst till alla läs-, test- och skrivfunktioner under LUIS

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
Microsoft.Authorization/roleAssignments/read	Hämta information om en rolltilldelning.
Microsoft.Authorization/roleDefinitions/read	Hämta information om en rolldefinition.
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/LUIS/*
NotDataActions
Microsoft.CognitiveServices/accounts/LUIS/apps/delete	Tar bort ett program.
Microsoft.CognitiveServices/accounts/LUIS/apps/move/action	Flyttar appen till en annan LUIS-redigeringsresurs i Azure.
Microsoft.CognitiveServices/accounts/LUIS/apps/publish/action	Publicerar en specifik version av programmet.
Microsoft.CognitiveServices/accounts/LUIS/apps/settings/write	Uppdaterar programinställningarna
Microsoft.CognitiveServices/accounts/LUIS/apps/azureaccounts/action	Tilldelar ett Azure-konto till programmet.
Microsoft.CognitiveServices/accounts/LUIS/apps/azureaccounts/delete	Hämtar LUIS Azure-konton för användaren med hjälp av sin Azure Resource Manager-token.

{
  "assignableScopes": [
    "/"
  ],
  "description": "Has access to all Read, Test, and Write functions under LUIS",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/6322a993-d5c9-4bed-b113-e49bbea25b27",
  "name": "6322a993-d5c9-4bed-b113-e49bbea25b27",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read",
        "Microsoft.Authorization/roleAssignments/read",
        "Microsoft.Authorization/roleDefinitions/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/LUIS/*"
      ],
      "notDataActions": [
        "Microsoft.CognitiveServices/accounts/LUIS/apps/delete",
        "Microsoft.CognitiveServices/accounts/LUIS/apps/move/action",
        "Microsoft.CognitiveServices/accounts/LUIS/apps/publish/action",
        "Microsoft.CognitiveServices/accounts/LUIS/apps/settings/write",
        "Microsoft.CognitiveServices/accounts/LUIS/apps/azureaccounts/action",
        "Microsoft.CognitiveServices/accounts/LUIS/apps/azureaccounts/delete"
      ]
    }
  ],
  "roleName": "Cognitive Services LUIS Writer",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Administratör för Cognitive Services Metrics Advisor

Fullständig åtkomst till projektet, inklusive konfiguration på systemnivå.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/MetricsAdvisor/*
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Full access to the project, including the system level configuration.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/cb43c632-a144-4ec5-977c-e80c4affc34a",
  "name": "cb43c632-a144-4ec5-977c-e80c4affc34a",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/MetricsAdvisor/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services Metrics Advisor Administrator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services Metrics Advisor-användare

Åtkomst till projektet.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/MetricsAdvisor/*
NotDataActions
Microsoft.CognitiveServices/accounts/MetricsAdvisor/stats/*

{
  "assignableScopes": [
    "/"
  ],
  "description": "Access to the project.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/3b20f47b-3825-43cb-8114-4bd2201156a8",
  "name": "3b20f47b-3825-43cb-8114-4bd2201156a8",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/MetricsAdvisor/*"
      ],
      "notDataActions": [
        "Microsoft.CognitiveServices/accounts/MetricsAdvisor/stats/*"
      ]
    }
  ],
  "roleName": "Cognitive Services Metrics Advisor User",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services OpenAI-deltagare

Fullständig åtkomst, inklusive möjligheten att finjustera, distribuera och generera text

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
Microsoft.CognitiveServices/accounts/deployments/write	Skriver distributioner.
Microsoft.CognitiveServices/accounts/deployments/delete	Tar bort distributioner.
Microsoft.CognitiveServices/accounts/raiPolicies/read	Hämtar alla tillämpliga principer under kontot, inklusive standardprinciper.
Microsoft.CognitiveServices/accounts/raiPolicies/write	Skapa eller uppdatera en anpassad ansvarsfull AI-princip.
Microsoft.CognitiveServices/accounts/raiPolicies/delete	Tar bort en anpassad ansvarsfull AI-princip som inte refereras till av en befintlig distribution.
Microsoft.CognitiveServices/accounts/commitmentplans/read	Läser åtagandeplaner.
Microsoft.CognitiveServices/accounts/commitmentplans/write	Skriver åtagandeplaner.
Microsoft.CognitiveServices/accounts/commitmentplans/delete	Tar bort åtagandeplaner.
Microsoft.Authorization/roleAssignments/read	Hämta information om en rolltilldelning.
Microsoft.Authorization/roleDefinitions/read	Hämta information om en rolldefinition.
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/OpenAI/*
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Full access including the ability to fine-tune, deploy and generate text",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/a001fd3d-188f-4b5d-821b-7da978bf7442",
  "name": "a001fd3d-188f-4b5d-821b-7da978bf7442",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read",
        "Microsoft.CognitiveServices/accounts/deployments/write",
        "Microsoft.CognitiveServices/accounts/deployments/delete",
        "Microsoft.CognitiveServices/accounts/raiPolicies/read",
        "Microsoft.CognitiveServices/accounts/raiPolicies/write",
        "Microsoft.CognitiveServices/accounts/raiPolicies/delete",
        "Microsoft.CognitiveServices/accounts/commitmentplans/read",
        "Microsoft.CognitiveServices/accounts/commitmentplans/write",
        "Microsoft.CognitiveServices/accounts/commitmentplans/delete",
        "Microsoft.Authorization/roleAssignments/read",
        "Microsoft.Authorization/roleDefinitions/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/OpenAI/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services OpenAI Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services OpenAI-användare

Läsbehörighet för att visa filer, modeller, distributioner. Möjligheten att skapa slutförande- och inbäddningsanrop.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
Microsoft.Authorization/roleAssignments/read	Hämta information om en rolltilldelning.
Microsoft.Authorization/roleDefinitions/read	Hämta information om en rolldefinition.
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/OpenAI/*/read
Microsoft.CognitiveServices/accounts/OpenAI/engines/completions/action	Skapa ett slutförande från en vald modell
Microsoft.CognitiveServices/accounts/OpenAI/engines/search/action	Sök efter de mest relevanta dokumenten med hjälp av den aktuella motorn.
Microsoft.CognitiveServices/accounts/OpenAI/engines/generate/action	(Endast avsett för webbläsare.) Strömma genererad text från modellen via GET-begäran. Den här metoden tillhandahålls eftersom den webbläsarbaserade EventSource-metoden endast kan skicka GET-begäranden. Den stöder en mer begränsad uppsättning konfigurationsalternativ än POST-varianten.
Microsoft.CognitiveServices/accounts/OpenAI/deployments/audio/action	Returnera avskriften eller översättningen för en viss ljudfil.
Microsoft.CognitiveServices/accounts/OpenAI/deployments/search/action	Sök efter de mest relevanta dokumenten med hjälp av den aktuella motorn.
Microsoft.CognitiveServices/accounts/OpenAI/deployments/completions/action	Skapa ett slutförande från en vald modell.
Microsoft.CognitiveServices/accounts/OpenAI/deployments/chat/completions/action	Skapar ett slutförande för chattmeddelandet
Microsoft.CognitiveServices/accounts/OpenAI/deployments/extensions/chat/completions/action	Skapar ett slutförande för chattmeddelandet med tillägg
Microsoft.CognitiveServices/accounts/OpenAI/deployments/embeddings/action	Returnera inbäddningarna för en viss fråga.
Microsoft.CognitiveServices/accounts/OpenAI/images/generations/action	Skapa avbildningsgenerationer.
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Ability to view files, models, deployments. Readers can't make any changes They can inference and create images",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/5e0bd9bd-7b93-4f28-af87-19fc36ad61bd",
  "name": "5e0bd9bd-7b93-4f28-af87-19fc36ad61bd",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read",
        "Microsoft.Authorization/roleAssignments/read",
        "Microsoft.Authorization/roleDefinitions/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/OpenAI/*/read",
        "Microsoft.CognitiveServices/accounts/OpenAI/engines/completions/action",
        "Microsoft.CognitiveServices/accounts/OpenAI/engines/search/action",
        "Microsoft.CognitiveServices/accounts/OpenAI/engines/generate/action",
        "Microsoft.CognitiveServices/accounts/OpenAI/deployments/audio/action",
        "Microsoft.CognitiveServices/accounts/OpenAI/deployments/search/action",
        "Microsoft.CognitiveServices/accounts/OpenAI/deployments/completions/action",
        "Microsoft.CognitiveServices/accounts/OpenAI/deployments/chat/completions/action",
        "Microsoft.CognitiveServices/accounts/OpenAI/deployments/extensions/chat/completions/action",
        "Microsoft.CognitiveServices/accounts/OpenAI/deployments/embeddings/action",
        "Microsoft.CognitiveServices/accounts/OpenAI/images/generations/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services OpenAI User",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

QnA Maker-redigeraren för Cognitive Services

Nu ska vi skapa, redigera, importera och exportera en KB. Du kan inte publicera eller ta bort en KB.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
Microsoft.Authorization/roleAssignments/read	Hämta information om en rolltilldelning.
Microsoft.Authorization/roleDefinitions/read	Hämta information om en rolldefinition.
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read	Hämtar en lista över kunskapsbaser eller information om en specifik kunskapsbas.
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read	Ladda ned kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/create/write	Asynkron åtgärd för att skapa en ny kunskapsbas.
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/write	Asynkron åtgärd för att ändra en kunskapsbas eller Ersätt innehåll i kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action	GenerateAnswer-anrop för att fråga kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/train/action	Träna anrop för att lägga till förslag i kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read	Ladda ned ändringar från körning.
Microsoft.CognitiveServices/accounts/QnAMaker/alterations/write	Ersätt ändringsdata.
Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read	Hämtar slutpunktsnycklar för en slutpunkt
Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/refreshkeys/action	Återskapar en slutpunktsnyckel.
Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read	Hämtar slutpunktsinställningar för en slutpunkt
Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/write	Uppdatera slutpunktens seettings för en slutpunkt.
Microsoft.CognitiveServices/accounts/QnAMaker/operations/read	Hämtar information om en specifik tidskrävande åtgärd.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read	Hämtar en lista över kunskapsbaser eller information om en specifik kunskapsbas.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read	Ladda ned kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/create/write	Asynkron åtgärd för att skapa en ny kunskapsbas.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/write	Asynkron åtgärd för att ändra en kunskapsbas eller Ersätt innehåll i kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action	GenerateAnswer-anrop för att fråga kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/train/action	Träna anrop för att lägga till förslag i kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read	Ladda ned ändringar från körning.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/write	Ersätt ändringsdata.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read	Hämtar slutpunktsnycklar för en slutpunkt
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/refreshkeys/action	Återskapar en slutpunktsnyckel.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read	Hämtar slutpunktsinställningar för en slutpunkt
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/write	Uppdatera slutpunktens seettings för en slutpunkt.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/operations/read	Hämtar information om en specifik tidskrävande åtgärd.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/read	Hämtar en lista över kunskapsbaser eller information om en specifik kunskapsbas.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/download/read	Ladda ned kunskapsbasen.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/create/write	Asynkron åtgärd för att skapa en ny kunskapsbas.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/write	Asynkron åtgärd för att ändra en kunskapsbas eller Ersätt innehåll i kunskapsbasen.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/generateanswer/action	GenerateAnswer-anrop för att fråga kunskapsbasen.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/train/action	Träna anrop för att lägga till förslag i kunskapsbasen.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/read	Ladda ned ändringar från körning.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/write	Ersätt ändringsdata.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/read	Hämtar slutpunktsnycklar för en slutpunkt
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/refreshkeys/action	Återskapar en slutpunktsnyckel.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/read	Hämtar slutpunktsinställningar för en slutpunkt
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/write	Uppdatera slutpunktens seettings för en slutpunkt.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/operations/read	Hämtar information om en specifik tidskrävande åtgärd.
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Let's you create, edit, import and export a KB. You cannot publish or delete a KB.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/f4cc2bf9-21be-47a1-bdf1-5c5804381025",
  "name": "f4cc2bf9-21be-47a1-bdf1-5c5804381025",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read",
        "Microsoft.Authorization/roleAssignments/read",
        "Microsoft.Authorization/roleDefinitions/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/create/write",
        "Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/write",
        "Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action",
        "Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/train/action",
        "Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker/alterations/write",
        "Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/refreshkeys/action",
        "Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/write",
        "Microsoft.CognitiveServices/accounts/QnAMaker/operations/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/create/write",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/write",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/train/action",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/write",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/refreshkeys/action",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/write",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/operations/read",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/read",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/download/read",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/create/write",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/write",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/generateanswer/action",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/train/action",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/read",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/write",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/read",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/refreshkeys/action",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/read",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/write",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/operations/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services QnA Maker Editor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

QnA Maker-läsare för Cognitive Services

Nu ska du bara läsa och testa en KB.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
Microsoft.Authorization/roleAssignments/read	Hämta information om en rolltilldelning.
Microsoft.Authorization/roleDefinitions/read	Hämta information om en rolldefinition.
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read	Hämtar en lista över kunskapsbaser eller information om en specifik kunskapsbas.
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read	Ladda ned kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action	GenerateAnswer-anrop för att fråga kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read	Ladda ned ändringar från körning.
Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read	Hämtar slutpunktsnycklar för en slutpunkt
Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read	Hämtar slutpunktsinställningar för en slutpunkt
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read	Hämtar en lista över kunskapsbaser eller information om en specifik kunskapsbas.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read	Ladda ned kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action	GenerateAnswer-anrop för att fråga kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read	Ladda ned ändringar från körning.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read	Hämtar slutpunktsnycklar för en slutpunkt
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read	Hämtar slutpunktsinställningar för en slutpunkt
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/read	Hämtar en lista över kunskapsbaser eller information om en specifik kunskapsbas.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/download/read	Ladda ned kunskapsbasen.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/generateanswer/action	GenerateAnswer-anrop för att fråga kunskapsbasen.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/read	Ladda ned ändringar från körning.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/read	Hämtar slutpunktsnycklar för en slutpunkt
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/read	Hämtar slutpunktsinställningar för en slutpunkt
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Let's you read and test a KB only.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/466ccd10-b268-4a11-b098-b4849f024126",
  "name": "466ccd10-b268-4a11-b098-b4849f024126",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read",
        "Microsoft.Authorization/roleAssignments/read",
        "Microsoft.Authorization/roleDefinitions/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action",
        "Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/read",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/download/read",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/generateanswer/action",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/read",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/read",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services QnA Maker Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services Speech-deltagare

Fullständig åtkomst till Speech-projekt, inklusive läsning, skrivning och borttagning av alla entiteter, för taligenkänning i realtid och batch-transkriptionsuppgifter, talsyntes i realtid och långa ljuduppgifter, anpassat tal och anpassad röst.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
Microsoft.Authorization/roleAssignments/read	Hämta information om en rolltilldelning.
Microsoft.Authorization/roleDefinitions/read	Hämta information om en rolldefinition.
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/SpeechServices/*
Microsoft.CognitiveServices/accounts/CustomVoice/*
Microsoft.CognitiveServices/accounts/AudioContentCreation/*
Microsoft.CognitiveServices/accounts/VideoTranslation/*
Microsoft.CognitiveServices/accounts/CustomAvatar/*
Microsoft.CognitiveServices/accounts/BatchAvatar/*
Microsoft.CognitiveServices/accounts/BatchTextToSpeech/*
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Full access to Speech projects, including read, write and delete all entities, for real-time speech recognition and batch transcription tasks, real-time speech synthesis and long audio tasks, custom speech and custom voice.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/0e75ca1e-0464-4b4d-8b93-68208a576181",
  "name": "0e75ca1e-0464-4b4d-8b93-68208a576181",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read",
        "Microsoft.Authorization/roleAssignments/read",
        "Microsoft.Authorization/roleDefinitions/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/SpeechServices/*",
        "Microsoft.CognitiveServices/accounts/CustomVoice/*",
        "Microsoft.CognitiveServices/accounts/AudioContentCreation/*",
        "Microsoft.CognitiveServices/accounts/VideoTranslation/*",
        "Microsoft.CognitiveServices/accounts/CustomAvatar/*",
        "Microsoft.CognitiveServices/accounts/BatchAvatar/*",
        "Microsoft.CognitiveServices/accounts/BatchTextToSpeech/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services Speech Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services Speech-användare

Åtkomst till API:er för taligenkänning i realtid och batch-transkription, talsyntes i realtid och långa ljud-API:er, samt för att läsa data/test/modell/slutpunkt för anpassade modeller, men kan inte skapa, ta bort eller ändra data/test/modell/slutpunkt för anpassade modeller.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
Microsoft.Authorization/roleAssignments/read	Hämta information om en rolltilldelning.
Microsoft.Authorization/roleDefinitions/read	Hämta information om en rolldefinition.
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/SpeechServices/*/read
Microsoft.CognitiveServices/accounts/SpeechServices/*/transcriptions/read
Microsoft.CognitiveServices/accounts/SpeechServices/*/transcriptions/write
Microsoft.CognitiveServices/accounts/SpeechServices/*/transcriptions/delete
Microsoft.CognitiveServices/accounts/SpeechServices/*/transcriptions/action
Microsoft.CognitiveServices/accounts/SpeechServices/*/frontend/action
Microsoft.CognitiveServices/accounts/SpeechServices/textberoende/*/action
Microsoft.CognitiveServices/accounts/SpeechServices/textoberoende/*/action
Microsoft.CognitiveServices/accounts/CustomVoice/*/read
Microsoft.CognitiveServices/accounts/CustomVoice/evaluations/*
Microsoft.CognitiveServices/accounts/CustomVoice/longaudiosynthesis/*
Microsoft.CognitiveServices/accounts/AudioContentCreation/*
Microsoft.CognitiveServices/accounts/VideoTranslation/*
Microsoft.CognitiveServices/accounts/CustomAvatar/*/read
Microsoft.CognitiveServices/accounts/BatchAvatar/*
Microsoft.CognitiveServices/accounts/BatchTextToSpeech/*
NotDataActions
Microsoft.CognitiveServices/accounts/CustomVoice/datasets/files/read	Hämtar filerna för datamängden som identifieras av det angivna ID:t.
Microsoft.CognitiveServices/accounts/CustomVoice/datasets/utterances/read	Hämtar yttranden för den angivna träningsuppsättningen.

{
  "assignableScopes": [
    "/"
  ],
  "description": "Access to the real-time speech recognition and batch transcription APIs, real-time speech synthesis and long audio APIs, as well as to read the data/test/model/endpoint for custom models, but can't create, delete or modify the data/test/model/endpoint for custom models.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/f2dc8367-1007-4938-bd23-fe263f013447",
  "name": "f2dc8367-1007-4938-bd23-fe263f013447",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read",
        "Microsoft.Authorization/roleAssignments/read",
        "Microsoft.Authorization/roleDefinitions/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/SpeechServices/*/read",
        "Microsoft.CognitiveServices/accounts/SpeechServices/*/transcriptions/read",
        "Microsoft.CognitiveServices/accounts/SpeechServices/*/transcriptions/write",
        "Microsoft.CognitiveServices/accounts/SpeechServices/*/transcriptions/delete",
        "Microsoft.CognitiveServices/accounts/SpeechServices/*/transcriptions/action",
        "Microsoft.CognitiveServices/accounts/SpeechServices/*/frontend/action",
        "Microsoft.CognitiveServices/accounts/SpeechServices/text-dependent/*/action",
        "Microsoft.CognitiveServices/accounts/SpeechServices/text-independent/*/action",
        "Microsoft.CognitiveServices/accounts/CustomVoice/*/read",
        "Microsoft.CognitiveServices/accounts/CustomVoice/evaluations/*",
        "Microsoft.CognitiveServices/accounts/CustomVoice/longaudiosynthesis/*",
        "Microsoft.CognitiveServices/accounts/AudioContentCreation/*",
        "Microsoft.CognitiveServices/accounts/VideoTranslation/*",
        "Microsoft.CognitiveServices/accounts/CustomAvatar/*/read",
        "Microsoft.CognitiveServices/accounts/BatchAvatar/*",
        "Microsoft.CognitiveServices/accounts/BatchTextToSpeech/*"
      ],
      "notDataActions": [
        "Microsoft.CognitiveServices/accounts/CustomVoice/datasets/files/read",
        "Microsoft.CognitiveServices/accounts/CustomVoice/datasets/utterances/read"
      ]
    }
  ],
  "roleName": "Cognitive Services Speech User",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services Usages Reader

Minimal behörighet att visa Cognitive Services-användning.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/locations/usages/read	Läsa alla användningsdata
NotActions
ingen
DataActions
ingen
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Minimal permission to view Cognitive Services usages.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/bba48692-92b0-4667-a9ad-c31c7b334ac2",
  "name": "bba48692-92b0-4667-a9ad-c31c7b334ac2",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/locations/usages/read"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services Usages Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services-användare

Gör att du kan läsa och lista nycklar för Cognitive Services.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
Microsoft.CognitiveServices/accounts/listkeys/action	Visa en lista med nycklar
Microsoft.Insights/alertRules/read	Läsa en klassisk måttavisering
Microsoft.Insights/diagnosticSettings/read	Läsa en resursdiagnostikinställning
Microsoft.Insights/logDefinitions/read	Läsa loggdefinitioner
Microsoft.Insights/metricdefinitions/read	Läsa måttdefinitioner
Microsoft.Insights/metrics/read	Läsa mått
Microsoft.ResourceHealth/availabilityStatuses/read	Hämtar tillgänglighetsstatusar för alla resurser i det angivna omfånget
Microsoft.Resources/deployments/operations/read	Hämtar eller listar distributionsåtgärder.
Microsoft.Resources/subscriptions/operationresults/read	Hämta resultatet av prenumerationsåtgärden.
Microsoft.Resources/subscriptions/read	Hämtar listan över prenumerationer.
Microsoft.Resources/subscriptions/resourceGroups/read	Hämtar eller listar resursgrupper.
Microsoft.Support/*	Skapa och uppdatera ett supportärende
NotActions
ingen
DataActions
Microsoft.CognitiveServices/*
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you read and list keys of Cognitive Services.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/a97b65f3-24c7-4388-baec-2e87135dc908",
  "name": "a97b65f3-24c7-4388-baec-2e87135dc908",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read",
        "Microsoft.CognitiveServices/accounts/listkeys/action",
        "Microsoft.Insights/alertRules/read",
        "Microsoft.Insights/diagnosticSettings/read",
        "Microsoft.Insights/logDefinitions/read",
        "Microsoft.Insights/metricdefinitions/read",
        "Microsoft.Insights/metrics/read",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Resources/deployments/operations/read",
        "Microsoft.Resources/subscriptions/operationresults/read",
        "Microsoft.Resources/subscriptions/read",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Support/*"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services User",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Administratör för hälsorobot

Användare med administratörsåtkomst kan logga in, visa och redigera alla robotresurser, scenarier och konfigurationsinställningar, inklusive robotinstansnycklarna och hemligheterna.

Läs mer

Åtgärder	Description
ingen
NotActions
ingen
DataActions
Microsoft.HealthBot/healthBots/Admin/Action	Logga in på hanteringsportalen, visa och redigera alla robotresurser, scenarier, konfigurationsinställningar, instansnycklar och hemligheter.
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Users with admin access can sign in, view and edit all of the bot resources, scenarios and configuration setting including the bot instance keys & secrets.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/f1082fec-a70f-419f-9230-885d2550fb38",
  "name": "f1082fec-a70f-419f-9230-885d2550fb38",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.HealthBot/healthBots/Admin/Action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Health Bot Admin",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Redigeraren för hälsorobot

Användare med redigeringsåtkomst kan logga in, visa och redigera alla robotresurser, scenarier och konfigurationsinställningar förutom robotinstansnycklarna och hemligheterna och slutanvändarnas indata (inklusive Feedback, okända yttranden och konversationsloggar). Skrivskyddad åtkomst till robotkunskaper och kanaler.

Läs mer

Åtgärder	Description
ingen
NotActions
ingen
DataActions
Microsoft.HealthBot/healthBots/Editor/Action	Logga in på hanteringsportalen, visa och redigera alla robotresurser, scenarier och konfigurationsinställningar förutom robotinstansnycklarna och hemligheterna och slutanvändarnas indata. Skrivskyddad åtkomst till robotkunskaper och kanaler.
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Users with editor access can sign in, view and edit all the bot resources, scenarios and configuration setting except for the bot instance keys & secrets and the end-user inputs (including Feedback, Unrecognized utterances and Conversation logs). A read-only access to the bot skills and channels.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/af854a69-80ce-4ff7-8447-f1118a2e0ca8",
  "name": "af854a69-80ce-4ff7-8447-f1118a2e0ca8",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.HealthBot/healthBots/Editor/Action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Health Bot Editor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Hälsorobotläsare

Användare med läsåtkomst kan logga in, ha skrivskyddad åtkomst till robotresurser, scenarier och konfigurationsinställningar förutom botinstansnycklarna och hemligheterna (inklusive autentisering, dataanslutning och kanalnycklar) och slutanvändarens indata (inklusive feedback, okända yttranden och konversationsloggar).

Läs mer

Åtgärder	Description
ingen
NotActions
ingen
DataActions
Microsoft.HealthBot/healthBots/Reader/Action	Logga in på hanteringsportalen med skrivskyddad åtkomst till resurser, scenarier och konfigurationsinställningar förutom robotinstansnycklarna och hemligheterna och slutanvändarnas indata.
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Users with reader access can sign in, have read-only access to the bot resources, scenarios and configuration setting except for the bot instance keys & secrets (including Authentication, Data Connection and Channels keys) and the end-user inputs (including Feedback, Unrecognized utterances and Conversation logs).",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/eb5a76d5-50e7-4c33-a449-070e7c9c4cf2",
  "name": "eb5a76d5-50e7-4c33-a449-070e7c9c4cf2",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.HealthBot/healthBots/Reader/Action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Health Bot Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Search Index Data Contributor

Ger fullständig åtkomst till Azure Cognitive Search-indexdata.

Åtgärder	Description
ingen
NotActions
ingen
DataActions
Microsoft.Search/searchServices/index/documents/*
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Grants full access to Azure Cognitive Search index data.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/8ebe5a00-799e-43f5-93ac-243d3dce84a7",
  "name": "8ebe5a00-799e-43f5-93ac-243d3dce84a7",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.Search/searchServices/indexes/documents/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Search Index Data Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Dataläsare för sökindex

Ger läsbehörighet till Azure Cognitive Search-indexdata.

Åtgärder	Description
ingen
NotActions
ingen
DataActions
Microsoft.Search/searchServices/index/documents/read	Läs dokument eller föreslagna frågevillkor från ett index.
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Grants read access to Azure Cognitive Search index data.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/1407120a-92aa-4202-b7e9-c0e197c71c8f",
  "name": "1407120a-92aa-4202-b7e9-c0e197c71c8f",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.Search/searchServices/indexes/documents/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Search Index Data Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Söktjänstdeltagare

Gör att du kan hantera tjänsten Search, men inte åtkomst till dem.

Läs mer

Åtgärder	Beskrivning
Microsoft.Authorization/*/read	Läsa roller och rolltilldelningar
Microsoft.Insights/alertRules/*	Skapa och hantera en klassisk måttavisering
Microsoft.ResourceHealth/availabilityStatuses/read	Hämtar tillgänglighetsstatusar för alla resurser i det angivna omfånget
Microsoft.Resources/deployments/*	Skapa och hantera en distribution
Microsoft.Resources/subscriptions/resourceGroups/read	Hämtar eller listar resursgrupper.
Microsoft.Search/searchServices/*	Skapa och hantera söktjänster
Microsoft.Support/*	Skapa och uppdatera ett supportärende
NotActions
ingen
DataActions
ingen
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you manage Search services, but not access to them.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/7ca78c08-252a-4471-8644-bb5ff32d4ba0",
  "name": "7ca78c08-252a-4471-8644-bb5ff32d4ba0",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Search/searchServices/*",
        "Microsoft.Support/*"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Search Service Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Nästa steg

Tilldela Azure-roller med hjälp av Azure-portalen

Dela via

Inbyggda Azure-roller för AI + maskininlärning

AgFood Platform Sensor Partner Deltagare

AgFood Platform Service Admin

AgFood Platform Service-deltagare

AgFood Platform Service Reader

Azure AI-utvecklare

Godkännare för Azure AI Enterprise-nätverksanslutning

Distributionsoperatör för Azure AI-slutsatsdragning

AzureML-beräkningsoperator

AzureML-dataforskare

AzureML Metrics Writer (förhandsversion)

AzureML-registeranvändare

Cognitive Services-deltagare

Cognitive Services Custom Vision-deltagare

Distribution av Custom Vision för Cognitive Services

Cognitive Services Custom Vision Labeler

Cognitive Services Custom Vision Reader

Cognitive Services Custom Vision Trainer

Cognitive Services-dataläsare

Ansiktsigenkänning för Cognitive Services

Cognitive Services Avancerad läsare-användare

Cognitive Services-språkägare

Cognitive Services Language Reader

Cognitive Services Language Writer

Luis-ägare för Cognitive Services

Luis-läsare för Cognitive Services

Luis-författare för Cognitive Services

Administratör för Cognitive Services Metrics Advisor

Cognitive Services Metrics Advisor-användare

Cognitive Services OpenAI-deltagare

Cognitive Services OpenAI-användare

QnA Maker-redigeraren för Cognitive Services

QnA Maker-läsare för Cognitive Services

Cognitive Services Speech-deltagare

Cognitive Services Speech-användare

Cognitive Services Usages Reader

Cognitive Services-användare

Administratör för hälsorobot

Redigeraren för hälsorobot

Hälsorobotläsare

Search Index Data Contributor

Dataläsare för sökindex

Söktjänstdeltagare

Nästa steg

Feedback

Ytterligare resurser