Skip to content

Commit 7f1c453

Browse files
prmerger-automator[bot]prmerger-automator[bot]
authored
Merge pull request #292727 from Bradben/quantum-roles
Add new pages for quantum service roles
2 parents c6b6f41 + d92526d commit 7f1c453

File tree

4 files changed

+77
-1
lines changed

4 files changed

+77
-1
lines changed

‎articles/role-based-access-control/built-in-roles.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ ms.workload: identity
77
author: rolyon
88
manager: amycolannino
99
ms.author: rolyon
10-
ms.date: 12/12/2024
10+
ms.date: 01/07/2025
1111
ms.custom: generated
1212
---
1313

@@ -67,6 +67,7 @@ The following table provides a brief description of each built-in role. Click th
6767
> | <a name='disk-pool-operator'></a>[Disk Pool Operator](./built-in-roles/compute.md#disk-pool-operator) | Provide permission to StoragePool Resource Provider to manage disks added to a disk pool. | 60fc6e62-5479-42d4-8bf4-67625fcc2840 |
6868
> | <a name='disk-restore-operator'></a>[Disk Restore Operator](./built-in-roles/compute.md#disk-restore-operator) | Provides permission to backup vault to perform disk restore. | b50d9833-a0cb-478e-945f-707fcc997c13 |
6969
> | <a name='disk-snapshot-contributor'></a>[Disk Snapshot Contributor](./built-in-roles/compute.md#disk-snapshot-contributor) | Provides permission to backup vault to manage disk snapshots. | 7efff54f-a5b4-42b5-a1c5-5411624893ce |
70+
> | <a name='quantum-workspace-data-contributor'></a>[Quantum Workspace Data Contributor](./built-in-roles/compute.md#quantum-workspace-data-contributor) | Create, read, and modify jobs and other Workspace data. This role is in preview and subject to change. | c1410b24-3e69-4857-8f86-4d0a2e603250 |
7071
> | <a name='virtual-machine-administrator-login'></a>[Virtual Machine Administrator Login](./built-in-roles/compute.md#virtual-machine-administrator-login) | View Virtual Machines in the portal and login as administrator | 1c0163c0-47e6-4577-8991-ea5c82e286e4 |
7172
> | <a name='virtual-machine-contributor'></a>[Virtual Machine Contributor](./built-in-roles/compute.md#virtual-machine-contributor) | Create and manage virtual machines, manage disks, install and run software, reset password of the root user of the virtual machine using VM extensions, and manage local user accounts using VM extensions. This role does not grant you management access to the virtual network or storage account the virtual machines are connected to. This role does not allow you to assign roles in Azure RBAC. | 9980e02c-c2be-4d73-94e8-173b1dc7cf3c |
7273
> | <a name='virtual-machine-data-access-administrator-preview'></a>[Virtual Machine Data Access Administrator (preview)](./built-in-roles/compute.md#virtual-machine-data-access-administrator-preview) | Manage access to Virtual Machines by adding or removing role assignments for the Virtual Machine Administrator Login and Virtual Machine User Login roles. Includes an ABAC condition to constrain role assignments. | 66f75aeb-eabe-4b70-9f1e-c350c4c9ad04 |
@@ -537,6 +538,7 @@ The following table provides a brief description of each built-in role. Click th
537538
> | <a name='azure-stack-registration-owner'></a>[Azure Stack Registration Owner](./built-in-roles/hybrid-multicloud.md#azure-stack-registration-owner) | Lets you manage Azure Stack registrations. | 6f12a6df-dd06-4f3e-bcb1-ce8be600526a |
538539
> | <a name='hybrid-server-resource-administrator'></a>[Hybrid Server Resource Administrator](./built-in-roles/hybrid-multicloud.md#hybrid-server-resource-administrator) | Can read, write, delete, and re-onboard Hybrid servers to the Hybrid Resource Provider. | 48b40c6e-82e0-4eb3-90d5-19e40f49b624 |
539540
541+
540542
## Next steps
541543

542544
- [Assign Azure roles using the Azure portal](/azure/role-based-access-control/role-assignments-portal)

‎articles/role-based-access-control/built-in-roles/compute.md

Lines changed: 55 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1544,6 +1544,61 @@ Provides permission to backup vault to manage disk snapshots.
15441544
}
15451545
```
15461546

1547+
## Quantum Workspace Data Contributor
1548+
1549+
Create, read, and modify jobs and other Workspace data. This role is in preview and subject to change.
1550+
1551+
[Learn more](/azure/quantum/manage-workspace-access)
1552+
1553+
> [!div class="mx-tableFixed"]
1554+
> | Actions | Description |
1555+
> | --- | --- |
1556+
> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
1557+
> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
1558+
> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/* | Create and manage a deployment |
1559+
> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |
1560+
> | [Microsoft.Quantum](../permissions/compute.md#microsoftquantum)/Workspaces/read | Read Workspace |
1561+
> | [Microsoft.Quantum](../permissions/compute.md#microsoftquantum)/locations/offerings/read | Read providers supported |
1562+
> | **NotActions** | |
1563+
> | *none* | |
1564+
> | **DataActions** | |
1565+
> | [Microsoft.Quantum](../permissions/compute.md#microsoftquantum)/Workspaces/jobs/read | Read jobs and other data |
1566+
> | [Microsoft.Quantum](../permissions/compute.md#microsoftquantum)/Workspaces/jobs/write | Write jobs and other data |
1567+
> | **NotDataActions** | |
1568+
> | *none* | |
1569+
1570+
```json
1571+
{
1572+
"assignableScopes": [
1573+
"/"
1574+
],
1575+
"description": "Create, read, and modify jobs and other Workspace data. This role is in preview and subject to change.",
1576+
"id": "/providers/Microsoft.Authorization/roleDefinitions/c1410b24-3e69-4857-8f86-4d0a2e603250",
1577+
"name": "c1410b24-3e69-4857-8f86-4d0a2e603250",
1578+
"permissions": [
1579+
{
1580+
"actions": [
1581+
"Microsoft.Authorization/*/read",
1582+
"Microsoft.Insights/alertRules/*",
1583+
"Microsoft.Resources/deployments/*",
1584+
"Microsoft.Resources/subscriptions/resourceGroups/read",
1585+
"Microsoft.Quantum/Workspaces/read",
1586+
"Microsoft.Quantum/locations/offerings/read"
1587+
],
1588+
"notActions": [],
1589+
"dataActions": [
1590+
"Microsoft.Quantum/Workspaces/jobs/read",
1591+
"Microsoft.Quantum/Workspaces/jobs/write"
1592+
],
1593+
"notDataActions": []
1594+
}
1595+
],
1596+
"roleName": "Quantum Workspace Data Contributor",
1597+
"roleType": "BuiltInRole",
1598+
"type": "Microsoft.Authorization/roleDefinitions"
1599+
}
1600+
```
1601+
15471602
## Virtual Machine Administrator Login
15481603

15491604
View Virtual Machines in the portal and login as administrator

‎articles/role-based-access-control/permissions/compute.md

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1150,6 +1150,24 @@ Azure service: [Azure Virtual Desktop](/azure/virtual-desktop/)
11501150
> | Microsoft.DesktopVirtualization/appattachpackages/useapplications/action | Allow user permissioning on app attach packages in an application group |
11511151
> | Microsoft.DesktopVirtualization/applicationgroups/useapplications/action | Use ApplicationGroup |
11521152
1153+
## Microsoft.Quantum
1154+
1155+
Azure service: [Azure Quantum](/azure/quantum/overview-azure-quantum)
1156+
1157+
> [!div class="mx-tableFixed"]
1158+
> | Action | Description |
1159+
> | --- | --- |
1160+
> | Microsoft.Quantum/register/action | Registers the subscription for the quantum resource provider and enables the creation of quantum workspaces. |
1161+
> | Microsoft.Quantum/locations/offerings/read | Read providers supported |
1162+
> | Microsoft.Quantum/Workspaces/read | Read Workspace |
1163+
> | Microsoft.Quantum/Workspaces/write | Writes Workspace |
1164+
> | Microsoft.Quantum/Workspaces/delete | Deletes Workspace |
1165+
> | Microsoft.Quantum/Workspaces/regenerateKey/action | Regenerate workspace api key |
1166+
> | Microsoft.Quantum/Workspaces/listKeys/action | List workspace api keys |
1167+
> | **DataAction** | **Description** |
1168+
> | Microsoft.Quantum/Workspaces/jobs/read | Read jobs and other data |
1169+
> | Microsoft.Quantum/Workspaces/jobs/write | Write jobs and other data |
1170+
11531171
## Microsoft.ServiceFabric
11541172

11551173
Develop microservices and orchestrate containers on Windows or Linux.

‎articles/role-based-access-control/resource-provider-operations.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -47,6 +47,7 @@ Click the resource provider name in the following list to see the list of permis
4747
> | [Microsoft.ComputeSchedule](./permissions/compute.md#microsoftcomputeschedule) | | [Azure Virtual Desktop](/azure/virtual-desktop/overview) |
4848
> | [microsoft.connectedvmwarevsphere](./permissions/compute.md#microsoftconnectedvmwarevsphere) | | [Azure Arc-enabled VMware vSphere](/azure/azure-arc/vmware-vsphere/) |
4949
> | [Microsoft.DesktopVirtualization](./permissions/compute.md#microsoftdesktopvirtualization) | The best virtual desktop experience, delivered on Azure. | [Azure Virtual Desktop](/azure/virtual-desktop/) |
50+
> | [Microsoft.Quantum](./permissions/compute.md#microsoftquantum) | | [Azure Quantum](/azure/quantum/overview-azure-quantum) |
5051
> | [Microsoft.ServiceFabric](./permissions/compute.md#microsoftservicefabric) | Develop microservices and orchestrate containers on Windows or Linux. | [Service Fabric](/azure/service-fabric/) |
5152
5253
<a name='microsoftnetwork'></a>

0 commit comments

Comments
 (0)