Skip to content

Commit 4b0a5fa

Browse files
committed
Compute Fleet Contributor role
1 parent 9328ddf commit 4b0a5fa

File tree

2 files changed

+50
-0
lines changed

2 files changed

+50
-0
lines changed

articles/role-based-access-control/built-in-roles.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -45,6 +45,7 @@ The following table provides a brief description of each built-in role. Click th
4545
> | --- | --- | --- |
4646
> | <a name='azure-arc-vmware-vm-contributor'></a>[Azure Arc VMware VM Contributor](./built-in-roles/compute.md#azure-arc-vmware-vm-contributor) | Arc VMware VM Contributor has permissions to perform all VM actions. | b748a06d-6150-4f8a-aaa9-ce3940cd96cb |
4747
> | <a name='classic-virtual-machine-contributor'></a>[Classic Virtual Machine Contributor](./built-in-roles/compute.md#classic-virtual-machine-contributor) | Lets you manage classic virtual machines, but not access to them, and not the virtual network or storage account they're connected to. | d73bb868-a0df-4d4d-bd69-98a00b01fccb |
48+
> | <a name='compute-fleet-contributor'></a>[Compute Fleet Contributor](./built-in-roles/compute.md#compute-fleet-contributor) | Allows users to manage Compute Fleet resources. | 2bed379c-9fba-455b-99e4-6b911073bcf2 |
4849
> | <a name='compute-gallery-artifacts-publisher'></a>[Compute Gallery Artifacts Publisher](./built-in-roles/compute.md#compute-gallery-artifacts-publisher) | This is the role for publishing gallery artifacts. | 85a2d0d9-2eba-4c9c-b355-11c2cc0788ab |
4950
> | <a name='compute-gallery-image-reader'></a>[Compute Gallery Image Reader](./built-in-roles/compute.md#compute-gallery-image-reader) | This is the role for reading gallery images. | cf7c76d2-98a3-4358-a134-615aa78bf44d |
5051
> | <a name='compute-gallery-sharing-admin'></a>[Compute Gallery Sharing Admin](./built-in-roles/compute.md#compute-gallery-sharing-admin) | This role allows user to share gallery to another subscription/tenant or share it to the public. | 1ef6a3be-d0ac-425d-8c01-acb62866290b |

articles/role-based-access-control/built-in-roles/compute.md

Lines changed: 49 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -238,6 +238,55 @@ Lets you manage classic virtual machines, but not access to them, and not the vi
238238
}
239239
```
240240

241+
## Compute Fleet Contributor
242+
243+
Allows users to manage Compute Fleet resources.
244+
245+
> [!div class="mx-tableFixed"]
246+
> | Actions | Description |
247+
> | --- | --- |
248+
> | Microsoft.AzureFleet/fleets/* | |
249+
> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
250+
> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
251+
> | [Microsoft.ResourceHealth](../permissions/management-and-governance.md#microsoftresourcehealth)/availabilityStatuses/read | Gets the availability statuses for all resources in the specified scope |
252+
> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/* | Create and manage a deployment |
253+
> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |
254+
> | **NotActions** | |
255+
> | *none* | |
256+
> | **DataActions** | |
257+
> | *none* | |
258+
> | **NotDataActions** | |
259+
> | *none* | |
260+
261+
```json
262+
{
263+
"assignableScopes": [
264+
"/"
265+
],
266+
"description": "Allows users to manage Compute Fleet resources.",
267+
"id": "/providers/Microsoft.Authorization/roleDefinitions/2bed379c-9fba-455b-99e4-6b911073bcf2",
268+
"name": "2bed379c-9fba-455b-99e4-6b911073bcf2",
269+
"permissions": [
270+
{
271+
"actions": [
272+
"Microsoft.AzureFleet/fleets/*",
273+
"Microsoft.Authorization/*/read",
274+
"Microsoft.Insights/alertRules/*",
275+
"Microsoft.ResourceHealth/availabilityStatuses/read",
276+
"Microsoft.Resources/deployments/*",
277+
"Microsoft.Resources/subscriptions/resourceGroups/read"
278+
],
279+
"notActions": [],
280+
"dataActions": [],
281+
"notDataActions": []
282+
}
283+
],
284+
"roleName": "Compute Fleet Contributor",
285+
"roleType": "BuiltInRole",
286+
"type": "Microsoft.Authorization/roleDefinitions"
287+
}
288+
```
289+
241290
## Compute Gallery Artifacts Publisher
242291

243292
This is the role for publishing gallery artifacts.

0 commit comments

Comments
 (0)