Skip to content

Commit 00e2e76

Browse files
authored
Update Administrator RBAC definition (#126)
## Purpose Update the JSON file that defines the Administrator role for RBAC ## Does this introduce a breaking change? <!-- Mark one with an "x". --> ``` [ ] Yes [x] No ``` ## Pull Request Type What kind of change does this Pull Request introduce? <!-- Please check the one that applies to this PR using "x". --> ``` [x] Bugfix [ ] Feature [ ] Code style update (formatting, local variables) [ ] Refactoring (no functional changes, no api changes) [x] Documentation content changes [ ] Other... Please describe: ```
1 parent a0f191a commit 00e2e76

File tree

1 file changed

+25
-1
lines changed

1 file changed

+25
-1
lines changed

samples/custom-rbac/Administrator.json

Lines changed: 25 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,14 @@
88
"permissions": [
99
{
1010
"actions": [
11+
"Microsoft.AlertsManagement/alertRuleRecommendations/read",
12+
"Microsoft.AlertsManagement/prometheusRuleGroups/read",
13+
"Microsoft.AlertsManagement/prometheusRuleGroups/write",
14+
"Microsoft.AlertsManagement/register/action",
1115
"Microsoft.Authorization/roleAssignments/write",
16+
"Microsoft.Dashboard/grafana/read",
17+
"Microsoft.Dashboard/grafana/write",
18+
"Microsoft.Dashboard/register/action",
1219
"Microsoft.DeviceRegistry/assetEndpointProfiles/delete",
1320
"Microsoft.DeviceRegistry/assetEndpointProfiles/read",
1421
"Microsoft.DeviceRegistry/assetEndpointProfiles/write",
@@ -35,22 +42,38 @@
3542
"Microsoft.ExtendedLocation/customLocations/read",
3643
"Microsoft.ExtendedLocation/customLocations/write",
3744
"Microsoft.ExtendedLocation/register/action",
45+
"Microsoft.Insights/dataCollectionEndpoints/read",
46+
"Microsoft.Insights/dataCollectionEndpoints/write",
47+
"Microsoft.Insights/dataCollectionRuleAssociations/read",
48+
"Microsoft.Insights/dataCollectionRuleAssociations/write",
49+
"Microsoft.Insights/dataCollectionRules/read",
50+
"Microsoft.Insights/dataCollectionRules/write",
51+
"Microsoft.Insights/register/action",
3852
"Microsoft.IoTOperations/*",
3953
"Microsoft.KeyVault/vaults/read",
4054
"Microsoft.KeyVault/vaults/write",
4155
"Microsoft.Kubernetes/connectedClusters/listClusterUserCredential/action",
4256
"Microsoft.Kubernetes/connectedclusters/read",
57+
"Microsoft.Kubernetes/connectedclusters/write",
4358
"Microsoft.Kubernetes/register/action",
59+
"Microsoft.KubernetesConfiguration/extensionTypes/read",
4460
"Microsoft.KubernetesConfiguration/extensions/operations/read",
4561
"Microsoft.KubernetesConfiguration/extensions/read",
4662
"Microsoft.KubernetesConfiguration/extensions/write",
47-
"Microsoft.KubernetesConfiguration/extensionTypes/read",
4863
"Microsoft.KubernetesConfiguration/register/action",
4964
"Microsoft.ManagedIdentity/userAssignedIdentities/assign/action",
5065
"Microsoft.ManagedIdentity/userAssignedIdentities/federatedIdentityCredentials/read",
5166
"Microsoft.ManagedIdentity/userAssignedIdentities/federatedIdentityCredentials/write",
5267
"Microsoft.ManagedIdentity/userAssignedIdentities/read",
5368
"Microsoft.ManagedIdentity/userAssignedIdentities/write",
69+
"Microsoft.Monitor/accounts/read",
70+
"Microsoft.Monitor/accounts/write",
71+
"Microsoft.Monitor/register/action",
72+
"Microsoft.OperationalInsights/register/action",
73+
"Microsoft.OperationalInsights/workspaces/metricDefinitions/read",
74+
"Microsoft.OperationalInsights/workspaces/read",
75+
"Microsoft.OperationalInsights/workspaces/sharedKeys/action",
76+
"Microsoft.OperationalInsights/workspaces/write",
5477
"Microsoft.Resources/deployments/operationStatuses/read",
5578
"Microsoft.Resources/deployments/read",
5679
"Microsoft.Resources/deployments/validate/action",
@@ -59,6 +82,7 @@
5982
"Microsoft.Resources/subscriptions/read",
6083
"Microsoft.Resources/subscriptions/resourceGroups/read",
6184
"Microsoft.Resources/subscriptions/resourceGroups/resources/read",
85+
"Microsoft.Resources/subscriptions/resourceGroups/write",
6286
"Microsoft.SecretSyncController/azureKeyVaultSecretProviderClasses/read",
6387
"Microsoft.SecretSyncController/azureKeyVaultSecretProviderClasses/write",
6488
"Microsoft.SecretSyncController/register/action",

0 commit comments

Comments
 (0)