Azure Kubernetes Fleet Manager RBAC Reader for Member Clusters

Data PlaneIAM ScopeContainers·35 permissões

Dado verificado em 31/07/2026 · Fonte

Total de permissões

Actions

NotActions

DataActions

Role ID

463ad26c-fcce-4469-9c7f-5653d8acbab5

Categoria

Containers

Risk Tier

Data Plane (DP)

Risk Tier: Data Plane

Grants access to data stored within services (blobs, queues, secrets, keys) without management plane control.

Descrição

Microsoft

Allows read-only access to see most objects in a namespace. It does not allow viewing roles or role bindings. This role does not allow viewing Secrets, since reading the contents of Secrets enables access to ServiceAccount credentials in the namespace, which would allow API access as any ServiceAccount in the namespace (a form of privilege escalation). Applying this role at cluster scope will give access across all namespaces.

Permissões

MicrosoftCarregando...Azure built-in roles

Role Definition (JSON)

{
  "Name": "Azure Kubernetes Fleet Manager RBAC Reader for Member Clusters",
  "Id": "463ad26c-fcce-4469-9c7f-5653d8acbab5",
  "IsCustom": false,
  "Description": "Allows read-only access to see most objects in a namespace. It does not allow viewing roles or role bindings. This role does not allow viewing Secrets, since reading the contents of Secrets enables access to ServiceAccount credentials in the namespace, which would allow API access as any ServiceAccount in the namespace (a form of privilege escalation).  Applying this role at cluster scope will give access across all namespaces.",
  "Actions": [],
  "NotActions": [],
  "DataActions": [],
  "NotDataActions": [],
  "AssignableScopes": [
    "/"
  ]

Assignable Scopes

PowerShell

Get-AzRoleDefinition -Name "Azure Kubernetes Fleet Manager RBAC Reader for Member Clusters"

Azure CLI

az role definition list --name "Azure Kubernetes Fleet Manager RBAC Reader for Member Clusters"

Ver a documentação oficial na Microsoft Learn