Skip to content

Commit 3ebbed2

Browse files
maud-lvmaud-lv
committed
Update following review
1 parent b4d7b07 commit 3ebbed2

File tree

2 files changed

+145
-102
lines changed

2 files changed

+145
-102
lines changed

‎articles/role-based-access-control/built-in-roles.md

Lines changed: 120 additions & 99 deletions
Original file line numberDiff line numberDiff line change
@@ -265,9 +265,9 @@ The following table provides a brief description of each built-in role. Click th
265265
> | [Blueprint Operator](#blueprint-operator) | Can assign existing published blueprints, but cannot create new blueprints. Note that this only works if the assignment is done with a user-assigned managed identity. | 437d2ced-4a38-4302-8479-ed2bcb43d090 |
266266
> | [Cost Management Contributor](#cost-management-contributor) | Can view costs and manage cost configuration (e.g. budgets, exports) | 434105ed-43f6-45c7-a02f-909b2ba83430 |
267267
> | [Cost Management Reader](#cost-management-reader) | Can view cost data and configuration (e.g. budgets, exports) | 72fafb9e-0641-4937-9268-a91bfd8191a3 |
268-
> | [Grafana Admin](#grafana-admin) | Can perform all Grafana operations, including managing data sources, creating dashboards and managing role assignments. | 22926164-76b3-42b3-bc55-97df8dab3e41 |
269-
> | [Grafana Editor](#grafana-editor) | Can view and edit a Grafana instance, including its dashboards and alerts. | a79a5197-3a5c-4973-a920-486035ffd60f |
270-
> | [Grafana Viewer](#grafana-viewer) | Can view a Grafana instance, including its dashboards and alerts. | 60921a7e-fef1-4a43-9b16-a26c52ad4769 |
268+
> | [Grafana Admin](#grafana-admin) | Perform all Grafana operations, including the ability to manage data sources, create dashboards, and manage role assignments within Grafana. | 22926164-76b3-42b3-bc55-97df8dab3e41 |
269+
> | [Grafana Editor](#grafana-editor) | View and edit a Grafana instance, including its dashboards and alerts. | a79a5197-3a5c-4973-a920-486035ffd60f |
270+
> | [Grafana Viewer](#grafana-viewer) | View a Grafana instance, including its dashboards and alerts. | 60921a7e-fef1-4a43-9b16-a26c52ad4769 |
271271
> | [Hierarchy Settings Administrator](#hierarchy-settings-administrator) | Allows users to edit and delete Hierarchy Settings | 350f8d15-c687-4448-8ae1-157740a3936d |
272272
> | [Kubernetes Cluster - Azure Arc Onboarding](#kubernetes-cluster---azure-arc-onboarding) | Role definition to authorize any user/service to create connectedClusters resource | 34e09817-6cbe-4d01-b1a2-e0eac5743d41 |
273273
> | [Kubernetes Extension Contributor](#kubernetes-extension-contributor) | Can create, update, get, list and delete Kubernetes Extensions, and get extension async operations | 85cb6faf-e071-4c9b-8136-154b5a04f717 |
@@ -13402,102 +13402,6 @@ Can view cost data and configuration (e.g. budgets, exports) [Learn more](../cos
1340213402
}
1340313403
```
1340413404

13405-
### Grafana Admin
13406-
13407-
Can perform all Grafana operations, including managing data sources, creating dashboards and managing role assignments.
13408-
13409-
> [!div class="mx-tableFixed"]
13410-
> | Actions | Description |
13411-
> | --- | --- |
13412-
> | [Microsoft.Dashboard](resource-provider-operations.md#microsoftdashboard)/grafana/ActAsGrafanaAdmin/action | Built-in Grafana admin role. |
13413-
13414-
```json
13415-
{
13416-
"id": "/providers/Microsoft.Authorization/roleDefinitions/22926164-76b3-42b3-bc55-97df8dab3e41",
13417-
"properties": {
13418-
"roleName": "Grafana Admin",
13419-
"description": "Built-in Grafana Admin role",
13420-
"assignableScopes": [
13421-
"/"
13422-
],
13423-
"permissions": [
13424-
{
13425-
"actions": [],
13426-
"notActions": [],
13427-
"dataActions": [
13428-
"Microsoft.Dashboard/grafana/ActAsGrafanaAdmin/action"
13429-
],
13430-
"notDataActions": []
13431-
}
13432-
]
13433-
}
13434-
}
13435-
```
13436-
13437-
### Grafana Editor
13438-
13439-
Can view and edit a Grafana instance, including its dashboards and alerts.
13440-
13441-
> [!div class="mx-tableFixed"]
13442-
> | Actions | Description |
13443-
> | --- | --- |
13444-
> | [Microsoft.Dashboard](resource-provider-operations.md#microsoftdashboard)/grafana/ActAsGrafanaEditor/action | Built-in Grafana Editor role. |
13445-
13446-
```json
13447-
{
13448-
"id": "/providers/Microsoft.Authorization/roleDefinitions/a79a5197-3a5c-4973-a920-486035ffd60f",
13449-
"properties": {
13450-
"roleName": "Grafana Editor",
13451-
"description": "Built-in Grafana Editor role",
13452-
"assignableScopes": [
13453-
"/"
13454-
],
13455-
"permissions": [
13456-
{
13457-
"actions": [],
13458-
"notActions": [],
13459-
"dataActions": [
13460-
"Microsoft.Dashboard/grafana/ActAsGrafanaEditor/action"
13461-
],
13462-
"notDataActions": []
13463-
}
13464-
]
13465-
}
13466-
}
13467-
```
13468-
13469-
### Grafana Viewer
13470-
13471-
Can view a Grafana instance, including its dashboards and alerts.
13472-
13473-
> [!div class="mx-tableFixed"]
13474-
> | Actions | Description |
13475-
> | --- | --- |
13476-
> | [Microsoft.Dashboard](resource-provider-operations.md#microsoftdashboard)/grafana/ActAsGrafanaViewer/action | Built-in Grafana Viewer role. |
13477-
13478-
```json
13479-
{
13480-
"id": "/providers/Microsoft.Authorization/roleDefinitions/60921a7e-fef1-4a43-9b16-a26c52ad4769",
13481-
"properties": {
13482-
"roleName": "Grafana Viewer",
13483-
"description": "Built-in Grafana Viewer role",
13484-
"assignableScopes": [
13485-
"/"
13486-
],
13487-
"permissions": [
13488-
{
13489-
"actions": [],
13490-
"notActions": [],
13491-
"dataActions": [
13492-
"Microsoft.Dashboard/grafana/ActAsGrafanaViewer/action"
13493-
],
13494-
"notDataActions": []
13495-
}
13496-
]
13497-
}
13498-
}
13499-
```
13500-
1350113405
### Hierarchy Settings Administrator
1350213406

1350313407
Allows users to edit and delete Hierarchy Settings
@@ -15431,6 +15335,123 @@ Lets you manage BizTalk services, but not access to them.
1543115335
}
1543215336
```
1543315337

15338+
### Grafana Admin
15339+
15340+
Perform all Grafana operations, including the ability to manage data sources, create dashboards, and manage role assignments within Grafana. [Learn more](../managed-grafana/how-to-share-grafana-workspace.md).
15341+
15342+
> [!div class="mx-tableFixed"]
15343+
> | Actions | Description |
15344+
> | --- | --- |
15345+
> | *none* | |
15346+
> | **NotActions** | |
15347+
> | *none* | |
15348+
> | **DataActions** | |
15349+
> | [Microsoft.Dashboard](resource-provider-operations.md#microsoftdashboard)/grafana/ActAsGrafanaAdmin/action | Act as Grafana Admin role |
15350+
> | **NotDataActions** | |
15351+
> | *none* | |
15352+
15353+
```json
15354+
{
15355+
"assignableScopes": [
15356+
"/"
15357+
],
15358+
"description": "Built-in Grafana admin role",
15359+
"id": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/22926164-76b3-42b3-bc55-97df8dab3e41",
15360+
"name": "22926164-76b3-42b3-bc55-97df8dab3e41",
15361+
"permissions": [
15362+
{
15363+
"actions": [],
15364+
"notActions": [],
15365+
"dataActions": [
15366+
"Microsoft.Dashboard/grafana/ActAsGrafanaAdmin/action"
15367+
],
15368+
"notDataActions": []
15369+
}
15370+
],
15371+
"roleName": "Grafana Admin",
15372+
"roleType": "BuiltInRole",
15373+
"type": "Microsoft.Authorization/roleDefinitions"
15374+
}
15375+
```
15376+
15377+
### Grafana Editor
15378+
15379+
View and edit a Grafana instance, including its dashboards and alerts. [Learn more](../managed-grafana/how-to-share-grafana-workspace.md).
15380+
15381+
> [!div class="mx-tableFixed"]
15382+
> | Actions | Description |
15383+
> | --- | --- |
15384+
> | *none* | |
15385+
> | **NotActions** | |
15386+
> | *none* | |
15387+
> | **DataActions** | |
15388+
> | [Microsoft.Dashboard](resource-provider-operations.md#microsoftdashboard)/grafana/ActAsGrafanaEditor/action | Act as Grafana Editor role. |
15389+
> | **NotDataActions** | |
15390+
> | *none* | |
15391+
15392+
```json
15393+
{
15394+
"assignableScopes": [
15395+
"/"
15396+
],
15397+
"description": "Built-in Grafana Editor role",
15398+
"id": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/a79a5197-3a5c-4973-a920-486035ffd60f",
15399+
"name": "a79a5197-3a5c-4973-a920-486035ffd60f",
15400+
"permissions": [
15401+
{
15402+
"actions": [],
15403+
"notActions": [],
15404+
"dataActions": [
15405+
"Microsoft.Dashboard/grafana/ActAsGrafanaEditor/action"
15406+
],
15407+
"notDataActions": []
15408+
}
15409+
],
15410+
"roleName": "Grafana Editor",
15411+
"roleType": "BuiltInRole",
15412+
"type": "Microsoft.Authorization/roleDefinitions"
15413+
}
15414+
```
15415+
15416+
### Grafana Viewer
15417+
15418+
View a Grafana instance, including its dashboards and alerts. [Learn more](../managed-grafana/how-to-share-grafana-workspace.md).
15419+
15420+
> [!div class="mx-tableFixed"
15421+
> | Actions | Description |
15422+
> | --- | --- |
15423+
> | *none* | |
15424+
> | **NotActions** | |
15425+
> | *none* | |
15426+
> | **DataActions** |
15427+
> | [Microsoft.Dashboard](resource-provider-operations.md#microsoftdashboard)/grafana/ActAsGrafanaViewer/action | Act as Grafana Viewer role.
15428+
> | **NotDataActions** |
15429+
> | *none* | |
15430+
15431+
```json
15432+
{
15433+
"assignableScopes": [
15434+
"/"
15435+
],
15436+
"description": "Built-in Grafana Viewer role",
15437+
"id": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/60921a7e-fef1-4a43-9b16-a26c52ad4769",
15438+
"name": "60921a7e-fef1-4a43-9b16-a26c52ad4769",
15439+
"permissions": [
15440+
{
15441+
"actions": [],
15442+
"notActions": [],
15443+
"dataActions": [
15444+
"Microsoft.Dashboard/grafana/ActAsGrafanaViewer/action"
15445+
],
15446+
"notDataActions": []
15447+
}
15448+
],
15449+
"roleName": "Grafana Viewer",
15450+
"roleType": "BuiltInRole",
15451+
"type": "Microsoft.Authorization/roleDefinitions"
15452+
}
15453+
```
15454+
1543415455
### Load Test Contributor
1543515456

1543615457
View, create, update, delete and execute load tests. View and list load test resources but can not make any changes. [Learn more](../load-testing/how-to-assign-roles.md)

‎articles/role-based-access-control/resource-provider-operations.md

Lines changed: 25 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -12647,9 +12647,31 @@ Azure service: [Azure Managed Grafana](../managed-grafana/index.yml)
1264712647
> [!div class="mx-tableFixed"]
1264812648
> | Action | Description |
1264912649
> | --- | --- |
12650-
> | Microsoft.Dashboard/grafana/ActAsGrafanaAdmin/action | Built-in Grafana Admin role. |
12651-
> | Microsoft.Dashboard/grafana/ActAsGrafanaEditor/action | Built-in Grafana Editor role. |
12652-
> | Microsoft.Dashboard/grafana/ActAsGrafanaViewer/action | Built-in Grafana Viewer role. |
12650+
> | Microsoft.Dashboard/grafana/action | Operate grafana |
12651+
> | Microsoft.Dashboard/checkNameAvailability/action | Checks if grafana resource name is available |
12652+
> | Microsoft.Dashboard/register/action | Registers the subscription for the Microsoft.Dashboard resource provider |
12653+
> | Microsoft.Dashboard/unregister/action | Unregisters the subscription for the Microsoft.Dashboard resource provider |
12654+
> | Microsoft.Dashboard/grafana/read | Read grafana |
12655+
> | Microsoft.Dashboard/grafana/write | Write grafana |
12656+
> | Microsoft.Dashboard/grafana/delete | Delete grafana |
12657+
> | Microsoft.Dashboard/grafana/PrivateEndpointConnectionsApproval/action | Approve PrivateEndpointConnection |
12658+
> | Microsoft.Dashboard/grafana/privateEndpointConnectionProxies/validate/action | Validate PrivateEndpointConnectionProxy |
12659+
> | Microsoft.Dashboard/grafana/privateEndpointConnectionProxies/read | Get PrivateEndpointConnectionProxy |
12660+
> | Microsoft.Dashboard/grafana/privateEndpointConnectionProxies/write | Create/Update PrivateEndpointConnectionProxy |
12661+
> | Microsoft.Dashboard/grafana/privateEndpointConnectionProxies/delete | Delete PrivateEndpointConnectionProxy |
12662+
> | Microsoft.Dashboard/grafana/privateEndpointConnections/read | Get PrivateEndpointConnection |
12663+
> | Microsoft.Dashboard/grafana/privateEndpointConnections/write | Update PrivateEndpointConnection |
12664+
> | Microsoft.Dashboard/grafana/privateEndpointConnections/delete | Delete PrivateEndpointConnection |
12665+
> | Microsoft.Dashboard/grafana/privateLinkResources/read | Get PrivateLinkResources |
12666+
> | Microsoft.Dashboard/locations/read | Get locations |
12667+
> | Microsoft.Dashboard/locations/operationStatuses/read | Get operation statuses |
12668+
> | Microsoft.Dashboard/locations/operationStatuses/write | Write operation statuses |
12669+
> | Microsoft.Dashboard/operations/read | List operations available on Microsoft.Dashboard resource provider |
12670+
> | Microsoft.Dashboard/registeredSubscriptions/read | Get registered subscription details |
12671+
> | **DataAction** | **Description** |
12672+
> | Microsoft.Dashboard/grafana/ActAsGrafanaAdmin/action | Act as Grafana Admin role |
12673+
> | Microsoft.Dashboard/grafana/ActAsGrafanaEditor/action | Act as Grafana Editor role |
12674+
> | Microsoft.Dashboard/grafana/ActAsGrafanaViewer/action | Act as Grafana Viewer role |
1265312675

1265412676
### Microsoft.DataProtection
1265512677

0 commit comments

Comments
 (0)