Virtual Machine Data Access Administrator (preview)
PrivilegiadaAccess ManagementIAM ScopeCompute·14 na definição · ≥ 80 efetivas
Dado verificado em · Fonte
Entradas na definição
14Actions
0NotActions
0DataActions
0Alcance efetivo
piso, não totalControl plane
80Data plane
0Na definição (nativo)
14Piso, não total: expandido contra 17.591 ações de 151 providers colhidas da documentação da Microsoft. A Azure Management API expõe mais — o número real é maior, nunca menor.
Role ID
66f75aeb-eabe-4b70-9f1e-c350c4c9ad04Categoria
ComputeRisk Tier
Access Management (AM)Risk Tier: Access Management
Grants the ability to manage security configurations, role assignments, or identity services without full resource control.
Descrição
MicrosoftManage access to Virtual Machines by adding or removing role assignments for the Virtual Machine Administrator Login and Virtual Machine User Login roles. Includes an ABAC condition to constrain role assignments.
Role Definition (JSON)
{"Name": "Virtual Machine Data Access Administrator (preview)","Id": "66f75aeb-eabe-4b70-9f1e-c350c4c9ad04","IsCustom": false,"Description": "Manage access to Virtual Machines by adding or removing role assignments for the Virtual Machine Administrator Login and Virtual Machine User Login roles. Includes an ABAC condition to constrain role assignments.","Actions": [],"NotActions": [],"DataActions": [],"NotDataActions": [],"AssignableScopes": ["/"]
Assignable Scopes
/
PowerShell
Get-AzRoleDefinition -Name "Virtual Machine Data Access Administrator (preview)"
Azure CLI
az role definition list --name "Virtual Machine Data Access Administrator (preview)"