Azure Kubernetes Service RBAC Writer

Data PlaneIAM ScopeContainers·39 permissões

Dado verificado em 31/07/2026 · Fonte

Total de permissões

Actions

NotActions

DataActions

Role ID

a7ffa36f-339b-4b5c-8bdf-e2c188b2c0eb

Categoria

Containers

Risk Tier

Data Plane (DP)

Risk Tier: Data Plane

Grants access to data stored within services (blobs, queues, secrets, keys) without management plane control.

Descrição

Microsoft

Allows read/write access to most objects in a namespace.This role does not allow viewing or modifying roles or role bindings. However, this role allows accessing Secrets and running Pods as any ServiceAccount in the namespace, so it can be used to gain the API access levels of any ServiceAccount in the namespace. Applying this role at cluster scope will give access across all namespaces.

Permissões

MicrosoftCarregando...Azure built-in roles

Role Definition (JSON)

{
  "Name": "Azure Kubernetes Service RBAC Writer",
  "Id": "a7ffa36f-339b-4b5c-8bdf-e2c188b2c0eb",
  "IsCustom": false,
  "Description": "Allows read/write access to most objects in a namespace.This role does not allow viewing or modifying roles or role bindings. However, this role allows accessing Secrets and running Pods as any ServiceAccount in the namespace, so it can be used to gain the API access levels of any ServiceAccount in the namespace. Applying this role at cluster scope will give access across all namespaces.",
  "Actions": [],
  "NotActions": [],
  "DataActions": [],
  "NotDataActions": [],
  "AssignableScopes": [
    "/"
  ]

Assignable Scopes

PowerShell

Get-AzRoleDefinition -Name "Azure Kubernetes Service RBAC Writer"

Azure CLI

az role definition list --name "Azure Kubernetes Service RBAC Writer"

Ver a documentação oficial na Microsoft Learn