Voltar

Defender for Storage Data Scanner

Azure RBAC · Storage · Data Plane

Defender for Storage Data Scanner

Data PlaneIAM ScopeStorage·9 na definição · ≥ 3 efetivas

Dado verificado em · Fonte

Entradas na definição

9

Actions

0

NotActions

0

DataActions

0

Alcance efetivo

piso, não total

Control plane

3

Data plane

6

Na definição (nativo)

9

Piso, não total: expandido contra 17.591 ações de 151 providers colhidas da documentação da Microsoft. A Azure Management API expõe mais — o número real é maior, nunca menor.

Role ID
1e7ca9b1-60d1-4db8-a914-f2ca1ff27c40
Categoria
Storage
Risk Tier
Data Plane (DP)
Risk Tier: Data Plane

Grants access to data stored within services (blobs, queues, secrets, keys) without management plane control.

Descrição

Microsoft

Grants access to read blobs and update index tags. This role is used by the data scanner of Defender for Storage.

Permissões

MicrosoftCarregando...Azure built-in roles

Role Definition (JSON)

{

  "Name": "Defender for Storage Data Scanner",

  "Id": "1e7ca9b1-60d1-4db8-a914-f2ca1ff27c40",

  "IsCustom": false,

  "Description": "Grants access to read blobs and update index tags. This role is used by the data scanner of Defender for Storage.",

  "Actions": [],

  "NotActions": [],

  "DataActions": [],

  "NotDataActions": [],

  "AssignableScopes": [

    "/"

  ]

Assignable Scopes

/

PowerShell

Get-AzRoleDefinition -Name "Defender for Storage Data Scanner"

Azure CLI

az role definition list --name "Defender for Storage Data Scanner"
Ver a documentação oficial na Microsoft Learn