Data Operator for Managed Disks
Data PlaneIAM ScopeCompute·4 na definição · ≥ 0 efetivas
Dado verificado em · Fonte
Entradas na definição
4Actions
0NotActions
0DataActions
0Alcance efetivo
piso, não totalControl plane
0Data plane
4Na definição (nativo)
4Piso, não total: expandido contra 17.591 ações de 151 providers colhidas da documentação da Microsoft. A Azure Management API expõe mais — o número real é maior, nunca menor.
Role ID
959f8984-c045-4866-89c7-12bf9737be2eCategoria
ComputeRisk Tier
Data Plane (DP)Risk Tier: Data Plane
Grants access to data stored within services (blobs, queues, secrets, keys) without management plane control.
Descrição
MicrosoftProvides permissions to upload data to empty managed disks, read, or export data of managed disks (not attached to running VMs) and snapshots using SAS URIs and Azure AD authentication.
Role Definition (JSON)
{"Name": "Data Operator for Managed Disks","Id": "959f8984-c045-4866-89c7-12bf9737be2e","IsCustom": false,"Description": "Provides permissions to upload data to empty managed disks, read, or export data of managed disks (not attached to running VMs) and snapshots using SAS URIs and Azure AD authentication.","Actions": [],"NotActions": [],"DataActions": [],"NotDataActions": [],"AssignableScopes": ["/"]
Assignable Scopes
/
PowerShell
Get-AzRoleDefinition -Name "Data Operator for Managed Disks"
Azure CLI
az role definition list --name "Data Operator for Managed Disks"