Key Vault Data Access Administrator
PrivilegiadaDado verificado em · Fonte
Entradas na definição
10Actions
0NotActions
0DataActions
0Alcance efetivo
piso, não totalControl plane
72Data plane
0Na definição (nativo)
10Piso, não total: expandido contra 17.591 ações de 151 providers colhidas da documentação da Microsoft. A Azure Management API expõe mais — o número real é maior, nunca menor.
8b54135c-b56d-4d72-a534-26097cfdc8d8Grants the ability to manage security configurations, role assignments, or identity services without full resource control.
Descrição
MicrosoftManage access to Azure Key Vault by adding or removing role assignments for the Key Vault Administrator, Key Vault Certificates Officer, Key Vault Crypto Officer, Key Vault Crypto Service Encryption User, Key Vault Crypto User, Key Vault Reader, Key Vault Secrets Officer, or Key Vault Secrets User roles. Includes an ABAC condition to constrain role assignments.
Role Definition (JSON)
{"Name": "Key Vault Data Access Administrator","Id": "8b54135c-b56d-4d72-a534-26097cfdc8d8","IsCustom": false,"Description": "Manage access to Azure Key Vault by adding or removing role assignments for the Key Vault Administrator, Key Vault Certificates Officer, Key Vault Crypto Officer, Key Vault Crypto Service Encryption User, Key Vault Crypto User, Key Vault Reader, Key Vault Secrets Officer, or Key Vault Secrets User roles. Includes an ABAC condition to constrain role assignments.","Actions": [],"NotActions": [],"DataActions": [],"NotDataActions": [],"AssignableScopes": ["/"]
Assignable Scopes
PowerShell
Get-AzRoleDefinition -Name "Key Vault Data Access Administrator"
Azure CLI
az role definition list --name "Key Vault Data Access Administrator"