Skip to content

Commit 0023163

Browse files
committed
Merge branch 'patch-1' of https://github.com/shiniizuka/azure-docs into nw-rbac
2 parents 47e04df + 5f01bf0 commit 0023163

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

articles/network-watcher/required-rbac-permissions.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,9 @@ ms.author: halkazwini
1414

1515
Azure role-based access control (Azure RBAC) enables you to assign only the specific actions to members of your organization that they require to complete their assigned responsibilities. To use Network Watcher capabilities, the account you log into Azure with, must be assigned to the [Owner](../role-based-access-control/built-in-roles.md?toc=%2fazure%2fnetwork-watcher%2ftoc.json#owner), [Contributor](../role-based-access-control/built-in-roles.md?toc=%2fazure%2fnetwork-watcher%2ftoc.json#contributor), or [Network contributor](../role-based-access-control/built-in-roles.md?toc=%2fazure%2fnetwork-watcher%2ftoc.json#network-contributor) built-in roles, or assigned to a [custom role](../role-based-access-control/custom-roles.md?toc=%2fazure%2fnetwork-watcher%2ftoc.json) that is assigned the actions listed for each Network Watcher capability in the sections that follow. To learn more about Network Watcher's capabilities, see [What is Network Watcher?](network-watcher-monitoring-overview.md).
1616

17+
> [!IMPORTANT]
18+
> [Network contributor](../role-based-access-control/built-in-roles.md?toc=%2fazure%2fnetwork-watcher%2ftoc.json#network-contributor) does not cover Microsoft.Storage/* or Microsoft.Compute/* actions listed in Additional actions section.
19+
1720
## Network Watcher
1821

1922
| Action | Description |
@@ -106,4 +109,4 @@ Network Watcher capabilities also require the following actions:
106109
| Microsoft.Compute/virtualMachineScaleSets/Read, </br> Microsoft.Compute/virtualMachineScaleSets/Write| Used to access virtual machine scale sets, do packet captures and upload them to storage account|
107110
| Microsoft.Compute/virtualMachineScaleSets/extensions/Read, </br> Microsoft.Compute/virtualMachineScaleSets/extensions/Write| Used to check if Network Watcher extension is present, and install if required |
108111
| Microsoft.Insights/alertRules/* | Used to set up metric alerts |
109-
| Microsoft.Support/* | Used to create and update support tickets from Network Watcher |
112+
| Microsoft.Support/* | Used to create and update support tickets from Network Watcher |

0 commit comments

Comments
 (0)