Container Registry Configuration Reader and Data Access Configuration Reader
PrivilegiadaDado verificado em · Fonte
Entradas na definição
33Actions
0NotActions
0DataActions
0Alcance efetivo
piso, não totalControl plane
34Data plane
0Na definição (nativo)
33Piso, não total: expandido contra 17.591 ações de 151 providers colhidas da documentação da Microsoft. A Azure Management API expõe mais — o número real é maior, nunca menor.
69b07be0-09bf-439a-b9a6-e73de851bd59Grants full write access to create and manage all resources but cannot assign roles or manage access to others.
Descrição
MicrosoftProvides permissions to list container registries and registry configuration properties. Provides permissions to list data access configuration such as admin user credentials, scope maps, and tokens, which can be used to read, write or delete repositories and images. Does not provide direct permissions to read, list, or write registry contents including repositories and images. Does not provide permissions to modify data plane content such as imports, Artifact Cache or Sync, and Transfer Pipelines. Does not provide permissions for managing Tasks.
Role Definition (JSON)
{"Name": "Container Registry Configuration Reader and Data Access Configuration Reader","Id": "69b07be0-09bf-439a-b9a6-e73de851bd59","IsCustom": false,"Description": "Provides permissions to list container registries and registry configuration properties. Provides permissions to list data access configuration such as admin user credentials, scope maps, and tokens, which can be used to read, write or delete repositories and images. Does not provide direct permissions to read, list, or write registry contents including repositories and images. Does not provide permissions to modify data plane content such as imports, Artifact Cache or Sync, and Transfer Pipelines. Does not provide permissions for managing Tasks.","Actions": [],"NotActions": [],"DataActions": [],"NotDataActions": [],"AssignableScopes": ["/"]
Assignable Scopes
PowerShell
Get-AzRoleDefinition -Name "Container Registry Configuration Reader and Data Access Configuration Reader"
Azure CLI
az role definition list --name "Container Registry Configuration Reader and Data Access Configuration Reader"