適用於DevOps的 Azure 內建角色

文章
04/25/2024

本文列出DevOps類別中的 Azure 內建角色。

DevTest Labs 使用者

可讓您在 Azure DevTest Labs 中連線、啟動、重新啟動和關閉虛擬機。

動作	描述
Microsoft.Authorization/*/read	讀取角色和角色指派
Microsoft.Compute/availabilitySets/read	取得可用性設定組的屬性
Microsoft.Compute/virtualMachines/*/read	讀取虛擬機器的屬性（VM 大小、執行時間狀態、VM 擴充功能等）
Microsoft.Compute/virtualMachines/deallocate/action	關閉虛擬機並釋放計算資源
Microsoft.Compute/virtualMachines/read	取得虛擬機器的屬性
Microsoft.Compute/virtualMachines/restart/action	重新啟動虛擬機
Microsoft.Compute/virtualMachines/start/action	啟動虛擬機器
Microsoft.DevTestLab/*/read	讀取實驗室的屬性
Microsoft.DevTestLab/labs/claimAnyVm/action	在實驗室中宣告隨機可宣告的虛擬機。
Microsoft.DevTestLab/labs/createEnvironment/action	在實驗室中建立虛擬機。
Microsoft.DevTestLab/labs/ensureCurrentUserProfile/action	請確定目前的用戶在實驗室中具有有效的配置檔。
Microsoft.DevTestLab/labs/formulas/delete	刪除公式。
Microsoft.DevTestLab/labs/formulas/read	讀取公式。
Microsoft.DevTestLab/labs/formulas/write	新增或修改公式。
Microsoft.DevTestLab/labs/policySets/evaluatePolicies/action	評估實驗室原則。
Microsoft.DevTestLab/labs/virtualMachines/claim/action	取得現有虛擬機的擁有權
Microsoft.DevTestLab/labs/virtualmachines/listApplicableSchedules/action	列出適用的啟動/停止排程，如果有的話。
Microsoft.DevTestLab/labs/virtualMachines/getRdpFileContents/action	取得字串，表示虛擬機之 RDP 檔案的內容
Microsoft.Network/loadBalancers/backendAddressPools/join/action	加入負載平衡器後端位址池。不可警示。
Microsoft.Network/loadBalancers/inboundNatRules/join/action	聯結負載平衡器輸入 nat 規則。不可警示。
Microsoft.Network/networkInterfaces/*/read	讀取網路介面的屬性（例如，網路介面所屬的所有負載平衡器）
Microsoft.Network/networkInterfaces/join/action	將虛擬機加入網路介面。不可警示。
Microsoft.Network/networkInterfaces/read	取得網路介面定義。
Microsoft.Network/networkInterfaces/write	建立網路介面或更新現有的網路介面。
Microsoft.Network/publicIPAddresses/*/read	讀取公用IP位址的屬性
Microsoft.Network/publicIPAddresses/join/action	加入公用IP位址。不可警示。
Microsoft.Network/publicIPAddresses/read	取得公用IP位址定義。
Microsoft.Network/virtualNetworks/subnets/join/action	加入虛擬網路。不可警示。
Microsoft.Resources/deployments/operations/read	取得或列出部署作業。
Microsoft.Resources/deployments/read	取得或列出部署。
Microsoft.Resources/subscriptions/resourceGroups/read	取得或列出資源群組。
微軟。儲存體/storageAccounts/listKeys/action	傳回指定記憶體帳戶的存取金鑰。
NotActions
Microsoft.Compute/virtualMachines/vmSizes/read	列出虛擬機可更新為的可用大小
DataActions
none
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you connect, start, restart, and shutdown your virtual machines in your Azure DevTest Labs.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/76283e04-6283-4c54-8f91-bcf1374a3c64",
  "name": "76283e04-6283-4c54-8f91-bcf1374a3c64",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Compute/availabilitySets/read",
        "Microsoft.Compute/virtualMachines/*/read",
        "Microsoft.Compute/virtualMachines/deallocate/action",
        "Microsoft.Compute/virtualMachines/read",
        "Microsoft.Compute/virtualMachines/restart/action",
        "Microsoft.Compute/virtualMachines/start/action",
        "Microsoft.DevTestLab/*/read",
        "Microsoft.DevTestLab/labs/claimAnyVm/action",
        "Microsoft.DevTestLab/labs/createEnvironment/action",
        "Microsoft.DevTestLab/labs/ensureCurrentUserProfile/action",
        "Microsoft.DevTestLab/labs/formulas/delete",
        "Microsoft.DevTestLab/labs/formulas/read",
        "Microsoft.DevTestLab/labs/formulas/write",
        "Microsoft.DevTestLab/labs/policySets/evaluatePolicies/action",
        "Microsoft.DevTestLab/labs/virtualMachines/claim/action",
        "Microsoft.DevTestLab/labs/virtualmachines/listApplicableSchedules/action",
        "Microsoft.DevTestLab/labs/virtualMachines/getRdpFileContents/action",
        "Microsoft.Network/loadBalancers/backendAddressPools/join/action",
        "Microsoft.Network/loadBalancers/inboundNatRules/join/action",
        "Microsoft.Network/networkInterfaces/*/read",
        "Microsoft.Network/networkInterfaces/join/action",
        "Microsoft.Network/networkInterfaces/read",
        "Microsoft.Network/networkInterfaces/write",
        "Microsoft.Network/publicIPAddresses/*/read",
        "Microsoft.Network/publicIPAddresses/join/action",
        "Microsoft.Network/publicIPAddresses/read",
        "Microsoft.Network/virtualNetworks/subnets/join/action",
        "Microsoft.Resources/deployments/operations/read",
        "Microsoft.Resources/deployments/read",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Storage/storageAccounts/listKeys/action"
      ],
      "notActions": [
        "Microsoft.Compute/virtualMachines/vmSizes/read"
      ],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "DevTest Labs User",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

實驗室助理

可讓您檢視現有的實驗室、在實驗室 VM 上執行動作，並將邀請傳送至實驗室。

深入了解

動作	描述
Microsoft.Authorization/*/read	讀取角色和角色指派
Microsoft.Insights/alertRules/*	建立和管理傳統計量警示
Microsoft.LabServices/labPlans/images/read	取得影像的屬性。
Microsoft.LabServices/labPlans/read	取得實驗室計劃的屬性。
Microsoft.LabServices/labs/read	取得實驗室的屬性。
Microsoft.LabServices/labs/schedules/read	取得排程的屬性。
Microsoft.LabServices/labs/users/read	取得用戶的屬性。
Microsoft.LabServices/labs/users/invite/action	傳送電子郵件邀請給使用者以加入實驗室。
Microsoft.LabServices/labs/virtualMachines/read	取得虛擬機的屬性。
Microsoft.LabServices/labs/virtualMachines/start/action	啟動虛擬機。
Microsoft.LabServices/labs/virtualMachines/stop/action	停止並解除分配虛擬機。
Microsoft.LabServices/labs/virtualMachines/reimage/action	將虛擬機重新映像到最後一個已發佈的映像。
Microsoft.LabServices/labs/virtualMachines/deploy/action	將虛擬機重新部署至不同的計算節點。
Microsoft.LabServices/locations/usages/read	取得位置中的使用量
Microsoft.LabServices/skus/read	取得實驗室服務 SKU 的屬性。
Microsoft.Resources/deployments/*	建立和管理部署
Microsoft.Resources/subscriptions/resourceGroups/read	取得或列出資源群組。
NotActions
none
DataActions
none
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "The lab assistant role",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/ce40b423-cede-4313-a93f-9b28290b72e1",
  "name": "ce40b423-cede-4313-a93f-9b28290b72e1",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.LabServices/labPlans/images/read",
        "Microsoft.LabServices/labPlans/read",
        "Microsoft.LabServices/labs/read",
        "Microsoft.LabServices/labs/schedules/read",
        "Microsoft.LabServices/labs/users/read",
        "Microsoft.LabServices/labs/users/invite/action",
        "Microsoft.LabServices/labs/virtualMachines/read",
        "Microsoft.LabServices/labs/virtualMachines/start/action",
        "Microsoft.LabServices/labs/virtualMachines/stop/action",
        "Microsoft.LabServices/labs/virtualMachines/reimage/action",
        "Microsoft.LabServices/labs/virtualMachines/redeploy/action",
        "Microsoft.LabServices/locations/usages/read",
        "Microsoft.LabServices/skus/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Lab Assistant",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

實驗室參與者

在實驗室層級套用，可讓您管理實驗室。套用至資源群組，可讓您建立和管理實驗室。

深入了解

動作	描述
Microsoft.Authorization/*/read	讀取角色和角色指派
Microsoft.Insights/alertRules/*	建立和管理傳統計量警示
Microsoft.LabServices/labPlans/images/read	取得影像的屬性。
Microsoft.LabServices/labPlans/read	取得實驗室計劃的屬性。
Microsoft.LabServices/labPlans/saveImage/action	從連結至實驗室計劃的資源庫中的虛擬機建立映像。
Microsoft.LabServices/labs/read	取得實驗室的屬性。
Microsoft.LabServices/labs/write	建立新的或更新現有的實驗室。
Microsoft.LabServices/labs/delete	刪除實驗室及其所有使用者、排程和虛擬機。
Microsoft.LabServices/labs/publish/action	藉由將範本虛擬機的映射傳播至實驗室中的所有虛擬機，以發佈實驗室。
Microsoft.LabServices/labs/syncGroup/action	更新指派給實驗室之 Active Directory 群組的用戶清單。
Microsoft.LabServices/labs/schedules/read	取得排程的屬性。
Microsoft.LabServices/labs/schedules/write	建立新的或更新現有的排程。
Microsoft.LabServices/labs/schedules/delete	刪除排程。
Microsoft.LabServices/labs/users/read	取得用戶的屬性。
Microsoft.LabServices/labs/users/write	建立新的或更新現有的使用者。
Microsoft.LabServices/labs/users/delete	刪除使用者。
Microsoft.LabServices/labs/users/invite/action	傳送電子郵件邀請給使用者以加入實驗室。
Microsoft.LabServices/labs/virtualMachines/read	取得虛擬機的屬性。
Microsoft.LabServices/labs/virtualMachines/start/action	啟動虛擬機。
Microsoft.LabServices/labs/virtualMachines/stop/action	停止並解除分配虛擬機。
Microsoft.LabServices/labs/virtualMachines/reimage/action	將虛擬機重新映像到最後一個已發佈的映像。
Microsoft.LabServices/labs/virtualMachines/deploy/action	將虛擬機重新部署至不同的計算節點。
Microsoft.LabServices/labs/virtualMachines/resetPassword/action	重設虛擬機上的本機用戶密碼。
Microsoft.LabServices/locations/usages/read	取得位置中的使用量
Microsoft.LabServices/skus/read	取得實驗室服務 SKU 的屬性。
Microsoft.Resources/deployments/*	建立和管理部署
Microsoft.Resources/subscriptions/resourceGroups/read	取得或列出資源群組。
NotActions
none
DataActions
Microsoft.LabServices/labPlans/createLab/action	從實驗室計劃建立新的實驗室。
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "The lab contributor role",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/5daaa2af-1fe8-407c-9122-bba179798270",
  "name": "5daaa2af-1fe8-407c-9122-bba179798270",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.LabServices/labPlans/images/read",
        "Microsoft.LabServices/labPlans/read",
        "Microsoft.LabServices/labPlans/saveImage/action",
        "Microsoft.LabServices/labs/read",
        "Microsoft.LabServices/labs/write",
        "Microsoft.LabServices/labs/delete",
        "Microsoft.LabServices/labs/publish/action",
        "Microsoft.LabServices/labs/syncGroup/action",
        "Microsoft.LabServices/labs/schedules/read",
        "Microsoft.LabServices/labs/schedules/write",
        "Microsoft.LabServices/labs/schedules/delete",
        "Microsoft.LabServices/labs/users/read",
        "Microsoft.LabServices/labs/users/write",
        "Microsoft.LabServices/labs/users/delete",
        "Microsoft.LabServices/labs/users/invite/action",
        "Microsoft.LabServices/labs/virtualMachines/read",
        "Microsoft.LabServices/labs/virtualMachines/start/action",
        "Microsoft.LabServices/labs/virtualMachines/stop/action",
        "Microsoft.LabServices/labs/virtualMachines/reimage/action",
        "Microsoft.LabServices/labs/virtualMachines/redeploy/action",
        "Microsoft.LabServices/labs/virtualMachines/resetPassword/action",
        "Microsoft.LabServices/locations/usages/read",
        "Microsoft.LabServices/skus/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.LabServices/labPlans/createLab/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Lab Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

實驗室建立者

可讓您在 Azure 實驗室帳戶下建立新的實驗室。

深入了解

動作	描述
Microsoft.Authorization/*/read	讀取角色和角色指派
Microsoft.LabServices/labAccounts/*/read
Microsoft.LabServices/labAccounts/createLab/action	在實驗室帳戶中建立實驗室。
Microsoft.LabServices/labAccounts/getPricingAndAvailability/action	取得實驗室帳戶大小、地理位置和操作系統組合的定價和可用性。
Microsoft.LabServices/labAccounts/getRestrictionsAndUsage/action	取得此訂用帳戶的核心限制和使用量
Microsoft.Insights/alertRules/*	建立和管理傳統計量警示
Microsoft.LabServices/labPlans/images/read	取得影像的屬性。
Microsoft.LabServices/labPlans/read	取得實驗室計劃的屬性。
Microsoft.LabServices/labPlans/saveImage/action	從連結至實驗室計劃的資源庫中的虛擬機建立映像。
Microsoft.LabServices/labs/read	取得實驗室的屬性。
Microsoft.LabServices/labs/schedules/read	取得排程的屬性。
Microsoft.LabServices/labs/users/read	取得用戶的屬性。
Microsoft.LabServices/labs/virtualMachines/read	取得虛擬機的屬性。
Microsoft.LabServices/locations/usages/read	取得位置中的使用量
Microsoft.LabServices/skus/read	取得實驗室服務 SKU 的屬性。
Microsoft.Resources/deployments/*	建立和管理部署
Microsoft.Resources/subscriptions/resourceGroups/read	取得或列出資源群組。
Microsoft.Support/*	建立及更新支援票證
NotActions
none
DataActions
Microsoft.LabServices/labPlans/createLab/action	從實驗室計劃建立新的實驗室。
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you create new labs under your Azure Lab Accounts.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/b97fb8bc-a8b2-4522-a38b-dd33c7e65ead",
  "name": "b97fb8bc-a8b2-4522-a38b-dd33c7e65ead",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.LabServices/labAccounts/*/read",
        "Microsoft.LabServices/labAccounts/createLab/action",
        "Microsoft.LabServices/labAccounts/getPricingAndAvailability/action",
        "Microsoft.LabServices/labAccounts/getRestrictionsAndUsage/action",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.LabServices/labPlans/images/read",
        "Microsoft.LabServices/labPlans/read",
        "Microsoft.LabServices/labPlans/saveImage/action",
        "Microsoft.LabServices/labs/read",
        "Microsoft.LabServices/labs/schedules/read",
        "Microsoft.LabServices/labs/users/read",
        "Microsoft.LabServices/labs/virtualMachines/read",
        "Microsoft.LabServices/locations/usages/read",
        "Microsoft.LabServices/skus/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Support/*"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.LabServices/labPlans/createLab/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Lab Creator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

實驗室操作員

讓您能夠管理現有的實驗室。

深入了解

動作	描述
Microsoft.Authorization/*/read	讀取角色和角色指派
Microsoft.Insights/alertRules/*	建立和管理傳統計量警示
Microsoft.LabServices/labPlans/images/read	取得影像的屬性。
Microsoft.LabServices/labPlans/read	取得實驗室計劃的屬性。
Microsoft.LabServices/labPlans/saveImage/action	從連結至實驗室計劃的資源庫中的虛擬機建立映像。
Microsoft.LabServices/labs/publish/action	藉由將範本虛擬機的映射傳播至實驗室中的所有虛擬機，以發佈實驗室。
Microsoft.LabServices/labs/read	取得實驗室的屬性。
Microsoft.LabServices/labs/schedules/read	取得排程的屬性。
Microsoft.LabServices/labs/schedules/write	建立新的或更新現有的排程。
Microsoft.LabServices/labs/schedules/delete	刪除排程。
Microsoft.LabServices/labs/users/read	取得用戶的屬性。
Microsoft.LabServices/labs/users/write	建立新的或更新現有的使用者。
Microsoft.LabServices/labs/users/delete	刪除使用者。
Microsoft.LabServices/labs/users/invite/action	傳送電子郵件邀請給使用者以加入實驗室。
Microsoft.LabServices/labs/virtualMachines/read	取得虛擬機的屬性。
Microsoft.LabServices/labs/virtualMachines/start/action	啟動虛擬機。
Microsoft.LabServices/labs/virtualMachines/stop/action	停止並解除分配虛擬機。
Microsoft.LabServices/labs/virtualMachines/reimage/action	將虛擬機重新映像到最後一個已發佈的映像。
Microsoft.LabServices/labs/virtualMachines/deploy/action	將虛擬機重新部署至不同的計算節點。
Microsoft.LabServices/labs/virtualMachines/resetPassword/action	重設虛擬機上的本機用戶密碼。
Microsoft.LabServices/locations/usages/read	取得位置中的使用量
Microsoft.LabServices/skus/read	取得實驗室服務 SKU 的屬性。
Microsoft.Resources/deployments/*	建立和管理部署
Microsoft.Resources/subscriptions/resourceGroups/read	取得或列出資源群組。
NotActions
none
DataActions
none
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "The lab operator role",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/a36e6959-b6be-4b12-8e9f-ef4b474d304d",
  "name": "a36e6959-b6be-4b12-8e9f-ef4b474d304d",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.LabServices/labPlans/images/read",
        "Microsoft.LabServices/labPlans/read",
        "Microsoft.LabServices/labPlans/saveImage/action",
        "Microsoft.LabServices/labs/publish/action",
        "Microsoft.LabServices/labs/read",
        "Microsoft.LabServices/labs/schedules/read",
        "Microsoft.LabServices/labs/schedules/write",
        "Microsoft.LabServices/labs/schedules/delete",
        "Microsoft.LabServices/labs/users/read",
        "Microsoft.LabServices/labs/users/write",
        "Microsoft.LabServices/labs/users/delete",
        "Microsoft.LabServices/labs/users/invite/action",
        "Microsoft.LabServices/labs/virtualMachines/read",
        "Microsoft.LabServices/labs/virtualMachines/start/action",
        "Microsoft.LabServices/labs/virtualMachines/stop/action",
        "Microsoft.LabServices/labs/virtualMachines/reimage/action",
        "Microsoft.LabServices/labs/virtualMachines/redeploy/action",
        "Microsoft.LabServices/labs/virtualMachines/resetPassword/action",
        "Microsoft.LabServices/locations/usages/read",
        "Microsoft.LabServices/skus/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Lab Operator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

實驗室服務參與者

可讓您完全控制資源群組中的所有實驗室服務案例。

深入了解

動作	描述
Microsoft.LabServices/*	建立和管理實驗室服務元件
Microsoft.Insights/alertRules/*	建立和管理傳統計量警示
Microsoft.Authorization/*/read	讀取角色和角色指派
Microsoft.Resources/deployments/*	建立和管理部署
Microsoft.Resources/subscriptions/resourceGroups/read	取得或列出資源群組。
NotActions
none
DataActions
Microsoft.LabServices/labPlans/createLab/action	從實驗室計劃建立新的實驗室。
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "The lab services contributor role",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/f69b8690-cc87-41d6-b77a-a4bc3c0a966f",
  "name": "f69b8690-cc87-41d6-b77a-a4bc3c0a966f",
  "permissions": [
    {
      "actions": [
        "Microsoft.LabServices/*",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.Authorization/*/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.LabServices/labPlans/createLab/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Lab Services Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

實驗室服務讀取器

可讓您檢視但未變更的所有實驗室計劃和實驗室資源。

深入了解

動作	描述
Microsoft.LabServices/*/read	讀取實驗室服務屬性
Microsoft.Authorization/*/read	讀取角色和角色指派
Microsoft.Resources/deployments/*	建立和管理部署
Microsoft.Resources/subscriptions/resourceGroups/read	取得或列出資源群組。
NotActions
none
DataActions
none
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "The lab services reader role",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/2a5c394f-5eb7-4d4f-9c8e-e8eae39faebc",
  "name": "2a5c394f-5eb7-4d4f-9c8e-e8eae39faebc",
  "permissions": [
    {
      "actions": [
        "Microsoft.LabServices/*/read",
        "Microsoft.Authorization/*/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Lab Services Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

負載測試參與者

檢視、建立、更新、刪除和執行負載測試。檢視和列出負載測試資源，但無法進行任何變更。

深入了解

動作	描述
Microsoft.LoadTestService/*/read	讀取負載測試資源
Microsoft.Authorization/*/read	讀取角色和角色指派
Microsoft.Resources/deployments/*	建立和管理部署
Microsoft.Resources/subscriptions/resourceGroups/read	取得或列出資源群組。
Microsoft.Insights/alertRules/*	建立和管理傳統計量警示
NotActions
none
DataActions
Microsoft.LoadTestService/loadtests/*	建立和管理負載測試
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "View, create, update, delete and execute load tests. View and list load test resources but can not make any changes.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/749a398d-560b-491b-bb21-08924219302e",
  "name": "749a398d-560b-491b-bb21-08924219302e",
  "permissions": [
    {
      "actions": [
        "Microsoft.LoadTestService/*/read",
        "Microsoft.Authorization/*/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Insights/alertRules/*"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.LoadTestService/loadtests/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Load Test Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

負載測試擁有者

在負載測試資源和負載測試上執行所有作業

深入了解

動作	描述
Microsoft.LoadTestService/*	建立和管理負載測試資源
Microsoft.Authorization/*/read	讀取角色和角色指派
Microsoft.Resources/deployments/*	建立和管理部署
Microsoft.Resources/subscriptions/resourceGroups/read	取得或列出資源群組。
Microsoft.Insights/alertRules/*	建立和管理傳統計量警示
NotActions
none
DataActions
Microsoft.LoadTestService/*	建立和管理負載測試資源
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "Execute all operations on load test resources and load tests",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/45bb0b16-2f0c-4e78-afaa-a07599b003f6",
  "name": "45bb0b16-2f0c-4e78-afaa-a07599b003f6",
  "permissions": [
    {
      "actions": [
        "Microsoft.LoadTestService/*",
        "Microsoft.Authorization/*/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Insights/alertRules/*"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.LoadTestService/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Load Test Owner",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

負載測試讀取器

檢視及列出所有負載測試和負載測試資源，但無法進行任何變更

深入了解

動作	描述
Microsoft.LoadTestService/*/read	讀取負載測試資源
Microsoft.Authorization/*/read	讀取角色和角色指派
Microsoft.Resources/deployments/*	建立和管理部署
Microsoft.Resources/subscriptions/resourceGroups/read	取得或列出資源群組。
Microsoft.Insights/alertRules/*	建立和管理傳統計量警示
NotActions
none
DataActions
Microsoft.LoadTestService/loadtests/readTest/action	讀取負載測試
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "View and list all load tests and load test resources but can not make any changes",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/3ae3fb29-0000-4ccd-bf80-542e7b26e081",
  "name": "3ae3fb29-0000-4ccd-bf80-542e7b26e081",
  "permissions": [
    {
      "actions": [
        "Microsoft.LoadTestService/*/read",
        "Microsoft.Authorization/*/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Insights/alertRules/*"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.LoadTestService/loadtests/readTest/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Load Test Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

下一步

使用 Azure 入口網站指派 Azure 角色

適用於DevOps的 Azure 內建角色

DevTest Labs 使用者

實驗室助理

實驗室參與者

實驗室建立者

實驗室操作員

實驗室服務參與者

實驗室服務讀取器

負載測試參與者

負載測試擁有者

負載測試讀取器

下一步

更多資源