Reader and Data Access
PrivilegiadaContributorIAM ScopeStorage·3 na definição · ≥ 3 efetivas
Dado verificado em · Fonte
Entradas na definição
3Actions
0NotActions
0DataActions
0Alcance efetivo
piso, não totalControl plane
3Data plane
0Na definição (nativo)
3Piso, não total: expandido contra 17.591 ações de 151 providers colhidas da documentação da Microsoft. A Azure Management API expõe mais — o número real é maior, nunca menor.
Role ID
c12c1c16-33a1-487b-954d-41c89c60f349Categoria
StorageRisk Tier
Contributor (CTB)Risk Tier: Contributor
Grants full write access to create and manage all resources but cannot assign roles or manage access to others.
Descrição
MicrosoftLets you view everything but will not let you delete or create a storage account or contained resource. It will also allow read/write access to all data contained in a storage account via access to storage account keys.
Role Definition (JSON)
{"Name": "Reader and Data Access","Id": "c12c1c16-33a1-487b-954d-41c89c60f349","IsCustom": false,"Description": "Lets you view everything but will not let you delete or create a storage account or contained resource. It will also allow read/write access to all data contained in a storage account via access to storage account keys.","Actions": [],"NotActions": [],"DataActions": [],"NotDataActions": [],"AssignableScopes": ["/"]
Assignable Scopes
/
PowerShell
Get-AzRoleDefinition -Name "Reader and Data Access"
Azure CLI
az role definition list --name "Reader and Data Access"