Voltar

Defender for Storage Data Scanner

Azure RBAC · Storage · Data Plane

Defender for Storage Data Scanner

Data PlaneIAM ScopeStorage·9 permissões

Dado verificado em · Fonte

Total de permissões

9

Actions

0

NotActions

0

DataActions

0
Role ID
1e7ca9b1-60d1-4db8-a914-f2ca1ff27c40
Categoria
Storage
Risk Tier
Data Plane (DP)
Risk Tier: Data Plane

Grants access to data stored within services (blobs, queues, secrets, keys) without management plane control.

Descrição

Microsoft

Grants access to read blobs and update index tags. This role is used by the data scanner of Defender for Storage.

Permissões

MicrosoftCarregando...Azure built-in roles

Role Definition (JSON)

{

  "Name": "Defender for Storage Data Scanner",

  "Id": "1e7ca9b1-60d1-4db8-a914-f2ca1ff27c40",

  "IsCustom": false,

  "Description": "Grants access to read blobs and update index tags. This role is used by the data scanner of Defender for Storage.",

  "Actions": [],

  "NotActions": [],

  "DataActions": [],

  "NotDataActions": [],

  "AssignableScopes": [

    "/"

  ]

Assignable Scopes

/

PowerShell

Get-AzRoleDefinition -Name "Defender for Storage Data Scanner"

Azure CLI

az role definition list --name "Defender for Storage Data Scanner"
Ver a documentação oficial na Microsoft Learn