Skip to content

Commit 2a2cc32

Browse files
prmerger-automator[bot]prmerger-automator[bot]
authored
Merge pull request #302323 from jenniferf-skc/RBACDevOpsAdd
Adding DevOps Infrastructure Contributor Role
2 parents 66e2927 + e5f8fd6 commit 2a2cc32

File tree

4 files changed

+87
-3
lines changed

4 files changed

+87
-3
lines changed

‎articles/role-based-access-control/built-in-roles.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ ms.workload: identity
77
author: jenniferf-skc
88
manager: pmwongera
99
ms.author: jfields
10-
ms.date: 07/02/2025
10+
ms.date: 07/07/2025
1111
ms.custom: generated
1212
---
1313

@@ -487,6 +487,7 @@ The following table provides a brief description of each built-in role. Click th
487487
> | <a name='deployment-environments-user'></a>[Deployment Environments User](./built-in-roles/devops.md#deployment-environments-user) | Provides access to manage environment resources. | 18e40d4e-8d2e-438d-97e1-9528336e149c |
488488
> | <a name='devcenter-dev-box-user'></a>[DevCenter Dev Box User](./built-in-roles/devops.md#devcenter-dev-box-user) | Provides access to create and manage dev boxes. | 45d50f46-0b78-4001-a660-4198cbe8cd05 |
489489
> | <a name='devcenter-project-admin'></a>[DevCenter Project Admin](./built-in-roles/devops.md#devcenter-project-admin) | Provides access to manage project resources. | 331c37c6-af14-46d9-b9f4-e1909e1b95a0 |
490+
> | <a name='devops-infrastructure-contributor-role'></a>[DevOps Infrastructure Contributor Role](./built-in-roles/devops.md#devops-infrastructure-contributor-role) | Read, write, delete and perform actions on Managed DevOps Pools | 76153a9e-0edb-49bc-8e01-93c47e6b5180 |
490491
> | <a name='devtest-labs-user'></a>[DevTest Labs User](./built-in-roles/devops.md#devtest-labs-user) | Lets you connect, start, restart, and shutdown your virtual machines in your Azure DevTest Labs. | 76283e04-6283-4c54-8f91-bcf1374a3c64 |
491492
> | <a name='lab-assistant'></a>[Lab Assistant](./built-in-roles/devops.md#lab-assistant) | Enables you to view an existing lab, perform actions on the lab VMs and send invitations to the lab. | ce40b423-cede-4313-a93f-9b28290b72e1 |
492493
> | <a name='lab-contributor'></a>[Lab Contributor](./built-in-roles/devops.md#lab-contributor) | Applied at lab level, enables you to manage the lab. Applied at a resource group, enables you to create and manage labs. | 5daaa2af-1fe8-407c-9122-bba179798270 |

‎articles/role-based-access-control/built-in-roles/devops.md

Lines changed: 57 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -522,6 +522,63 @@ Provides access to manage project resources.
522522
}
523523
```
524524

525+
## DevOps Infrastructure Contributor Role
526+
527+
Read, write, delete and perform actions on Managed DevOps Pools
528+
529+
> [!div class="mx-tableFixed"]
530+
> | Actions | Description |
531+
> | --- | --- |
532+
> | [Microsoft.DevOpsInfrastructure](../permissions/devops.md#microsoftdevopsinfrastructure)/register/action | Register the subscription for Microsoft.DevOpsInfrastructure |
533+
> | [Microsoft.DevOpsInfrastructure](../permissions/devops.md#microsoftdevopsinfrastructure)/unregister/action | Unregister the subscription for Microsoft.DevOpsInfrastructure |
534+
> | [Microsoft.DevOpsInfrastructure](../permissions/devops.md#microsoftdevopsinfrastructure)/*/read | |
535+
> | [Microsoft.DevOpsInfrastructure](../permissions/devops.md#microsoftdevopsinfrastructure)/Locations/OperationStatuses/write | Write OperationStatuses |
536+
> | [Microsoft.DevOpsInfrastructure](../permissions/devops.md#microsoftdevopsinfrastructure)/pools/write | Update a Pool |
537+
> | [Microsoft.DevOpsInfrastructure](../permissions/devops.md#microsoftdevopsinfrastructure)/pools/delete | Delete a Pool |
538+
> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
539+
> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
540+
> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/* | Create and manage a deployment |
541+
> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |
542+
> | **NotActions** | |
543+
> | *none* | |
544+
> | **DataActions** | |
545+
> | *none* | |
546+
> | **NotDataActions** | |
547+
> | *none* | |
548+
549+
```json
550+
{
551+
"assignableScopes": [
552+
"/"
553+
],
554+
"description": "Read, write, delete and perform actions on Managed DevOps Pools",
555+
"id": "/providers/Microsoft.Authorization/roleDefinitions/76153a9e-0edb-49bc-8e01-93c47e6b5180",
556+
"name": "76153a9e-0edb-49bc-8e01-93c47e6b5180",
557+
"permissions": [
558+
{
559+
"actions": [
560+
"Microsoft.DevOpsInfrastructure/register/action",
561+
"Microsoft.DevOpsInfrastructure/unregister/action",
562+
"Microsoft.DevOpsInfrastructure/*/read",
563+
"Microsoft.DevOpsInfrastructure/Locations/OperationStatuses/write",
564+
"Microsoft.DevOpsInfrastructure/pools/write",
565+
"Microsoft.DevOpsInfrastructure/pools/delete",
566+
"Microsoft.Authorization/*/read",
567+
"Microsoft.Insights/alertRules/*",
568+
"Microsoft.Resources/deployments/*",
569+
"Microsoft.Resources/subscriptions/resourceGroups/read"
570+
],
571+
"notActions": [],
572+
"dataActions": [],
573+
"notDataActions": []
574+
}
575+
],
576+
"roleName": "DevOps Infrastructure Contributor Role",
577+
"roleType": "BuiltInRole",
578+
"type": "Microsoft.Authorization/roleDefinitions"
579+
}
580+
```
581+
525582
## DevTest Labs User
526583

527584
Lets you connect, start, restart, and shutdown your virtual machines in your Azure DevTest Labs.

‎articles/role-based-access-control/permissions/devops.md

Lines changed: 26 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ ms.topic: generated-reference
66
author: jenniferf-skc
77
manager: pmwongera
88
ms.author: jfields
9-
ms.date: 05/25/2025
9+
ms.date: 07/07/2025
1010
ms.custom: generated
1111
---
1212

@@ -332,6 +332,31 @@ Azure service: [Azure Lab Services](/azure/lab-services/)
332332
> | Microsoft.DevTestLab/schedules/Execute/action | Execute a schedule. |
333333
> | Microsoft.DevTestLab/schedules/Retarget/action | Updates a schedule's target resource Id. |
334334
335+
## Microsoft.DevOpsInfrastructure
336+
337+
Read, write, delete and perform actions on Managed DevOps Pools
338+
339+
Azure service: [Managed DevOps Pools](/azure/devops/managed-devops-pools/overview)
340+
341+
> [!div class="mx-tableFixed"]
342+
> | Action | Description |
343+
> | --- | --- |
344+
> | Microsoft.DevOpsInfrastructure/register/action | Register the subscription for Microsoft.DevOpsInfrastructure |
345+
> | Microsoft.DevOpsInfrastructure/unregister/action | Unregister the subscription for Microsoft.DevOpsInfrastructure |
346+
> | Microsoft.DevOpsInfrastructure/images/versions/read | List ImageVersion resources by Image |
347+
> | Microsoft.DevOpsInfrastructure/Locations/OperationStatuses/read | Read OperationStatuses |
348+
> | Microsoft.DevOpsInfrastructure/Locations/OperationStatuses/write | Write OperationStatuses |
349+
> | Microsoft.DevOpsInfrastructure/locations/skus/read | List ResourceSku resources by subscription ID |
350+
> | Microsoft.DevOpsInfrastructure/locations/usages/read | List Quota resources by subscription ID |
351+
> | Microsoft.DevOpsInfrastructure/Operations/read | Read Operations |
352+
> | Microsoft.DevOpsInfrastructure/pools/read | List Pool resources by subscription ID |
353+
> | Microsoft.DevOpsInfrastructure/pools/read | List Pool resources by resource group |
354+
> | Microsoft.DevOpsInfrastructure/pools/read | Get a Pool |
355+
> | Microsoft.DevOpsInfrastructure/pools/write | Create a Pool |
356+
> | Microsoft.DevOpsInfrastructure/pools/delete | Delete a Pool |
357+
> | Microsoft.DevOpsInfrastructure/pools/write | Update a Pool |
358+
> | Microsoft.DevOpsInfrastructure/pools/resources/read | List ResourceDetailsObject resources by Pool |
359+
335360
## Microsoft.LabServices
336361

337362
Set up labs for classrooms, trials, development and testing, and other scenarios.

‎articles/role-based-access-control/resource-provider-operations.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ ms.workload: identity
77
author: jenniferf-skc
88
manager: pmwongera
99
ms.author: jfields
10-
ms.date: 05/25/2025
10+
ms.date: 07/07/2025
1111
ms.custom: generated
1212
---
1313

@@ -232,6 +232,7 @@ Click the resource provider name in the following list to see the list of permis
232232
> | --- | --- | --- |
233233
> | [Microsoft.Chaos](./permissions/devops.md#microsoftchaos) | | [Azure Chaos Studio](/azure/chaos-studio/) |
234234
> | [Microsoft.DevCenter](./permissions/devops.md#microsoftdevcenter) | | [Azure Deployment Environments](/azure/deployment-environments/overview-what-is-azure-deployment-environments) |
235+
> | [Microsoft.DevOpsInfrastructure](./permissions/devops.md#microsoftdevopsinfrastructure) | | [Managed DevOps Pools](/azure/devops/managed-devops-pools/overview) |
235236
> | [Microsoft.DevTestLab](./permissions/devops.md#microsoftdevtestlab) | Quickly create environments using reusable templates and artifacts. | [Azure Lab Services](/azure/lab-services/) |
236237
> | [Microsoft.LabServices](./permissions/devops.md#microsoftlabservices) | Set up labs for classrooms, trials, development and testing, and other scenarios. | [Azure Lab Services](/azure/lab-services/) |
237238
> | [Microsoft.LoadTestService](./permissions/devops.md#microsoftloadtestservice) | | [Azure Load Testing](/azure/load-testing/) |

0 commit comments

Comments
 (0)