Skip to content

Commit 9915185

Browse files
prmerger-automator[bot]prmerger-automator[bot]
authored
Merge pull request #297256 from rolyon/rolyon-roles-durable-task
[Azure RBAC] Durable Task roles
2 parents 1e6b578 + cb6e919 commit 9915185

File tree

4 files changed

+153
-0
lines changed

4 files changed

+153
-0
lines changed

‎articles/role-based-access-control/built-in-roles.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -377,6 +377,9 @@ The following table provides a brief description of each built-in role. Click th
377377
> | <a name='deid-realtime-data-user'></a>[DeID Realtime Data User](./built-in-roles/integration.md#deid-realtime-data-user) | Execute requests against DeID realtime endpoint. This role is in preview and subject to change. | bb6577c4-ea0a-40b2-8962-ea18cb8ecd4e |
378378
> | <a name='dicom-data-owner'></a>[DICOM Data Owner](./built-in-roles/integration.md#dicom-data-owner) | Full access to DICOM data. | 58a3b984-7adf-4c20-983a-32417c86fbc8 |
379379
> | <a name='dicom-data-reader'></a>[DICOM Data Reader](./built-in-roles/integration.md#dicom-data-reader) | Read and search DICOM data. | e89c7a3c-2f64-4fa1-a847-3e4c9ba4283a |
380+
> | <a name='durable-task-data-contributor'></a>[Durable Task Data Contributor](./built-in-roles/integration.md#durable-task-data-contributor) | Durable Task role for all data access operations. | 0ad04412-c4d5-4796-b79c-f76d14c8d402 |
381+
> | <a name='durable-task-data-reader'></a>[Durable Task Data Reader](./built-in-roles/integration.md#durable-task-data-reader) | Read all Durable Task Scheduler data. | d6a5505f-6ebb-45a4-896e-ac8274cfc0ac |
382+
> | <a name='durable-task-worker'></a>[Durable Task Worker](./built-in-roles/integration.md#durable-task-worker) | Used by worker applications to interact with the Durable Task service | 80d0d6b0-f522-40a4-8886-a5a11720c375 |
380383
> | <a name='eventgrid-contributor'></a>[EventGrid Contributor](./built-in-roles/integration.md#eventgrid-contributor) | Lets you manage EventGrid operations. | 1e241071-0855-49ea-94dc-649edcd759de |
381384
> | <a name='eventgrid-data-sender'></a>[EventGrid Data Sender](./built-in-roles/integration.md#eventgrid-data-sender) | Allows send access to event grid events. | d5a91429-5739-47e2-a06b-3470a27159e7 |
382385
> | <a name='eventgrid-eventsubscription-contributor'></a>[EventGrid EventSubscription Contributor](./built-in-roles/integration.md#eventgrid-eventsubscription-contributor) | Lets you manage EventGrid event subscription operations. | 428e0ff0-5e57-4d9c-a221-2c70d0e0a443 |

‎articles/role-based-access-control/built-in-roles/integration.md

Lines changed: 125 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1690,6 +1690,131 @@ Read and search DICOM data.
16901690
}
16911691
```
16921692

1693+
## Durable Task Data Contributor
1694+
1695+
Durable Task role for all data access operations.
1696+
1697+
[Learn more](/azure/azure-functions/durable/durable-task-scheduler/develop-with-durable-task-scheduler)
1698+
1699+
> [!div class="mx-tableFixed"]
1700+
> | Actions | Description |
1701+
> | --- | --- |
1702+
> | *none* | |
1703+
> | **NotActions** | |
1704+
> | *none* | |
1705+
> | **DataActions** | |
1706+
> | [Microsoft.DurableTask](../permissions/integration.md#microsoftdurabletask)/* | |
1707+
> | **NotDataActions** | |
1708+
> | *none* | |
1709+
1710+
```json
1711+
{
1712+
"assignableScopes": [
1713+
"/"
1714+
],
1715+
"description": "Durable Task role for all data access operations.",
1716+
"id": "/providers/Microsoft.Authorization/roleDefinitions/0ad04412-c4d5-4796-b79c-f76d14c8d402",
1717+
"name": "0ad04412-c4d5-4796-b79c-f76d14c8d402",
1718+
"permissions": [
1719+
{
1720+
"actions": [],
1721+
"notActions": [],
1722+
"dataActions": [
1723+
"Microsoft.DurableTask/*"
1724+
],
1725+
"notDataActions": []
1726+
}
1727+
],
1728+
"roleName": "Durable Task Data Contributor",
1729+
"roleType": "BuiltInRole",
1730+
"type": "Microsoft.Authorization/roleDefinitions"
1731+
}
1732+
```
1733+
1734+
## Durable Task Data Reader
1735+
1736+
Read all Durable Task Scheduler data.
1737+
1738+
[Learn more](/azure/azure-functions/durable/durable-task-scheduler/develop-with-durable-task-scheduler)
1739+
1740+
> [!div class="mx-tableFixed"]
1741+
> | Actions | Description |
1742+
> | --- | --- |
1743+
> | *none* | |
1744+
> | **NotActions** | |
1745+
> | *none* | |
1746+
> | **DataActions** | |
1747+
> | [Microsoft.DurableTask](../permissions/integration.md#microsoftdurabletask)/schedulers/taskhubs/orchestrations/read | Gets or list orchestrations metadata, including payloads |
1748+
> | [Microsoft.DurableTask](../permissions/integration.md#microsoftdurabletask)/schedulers/taskhubs/orchestrations/metadata/read | Gets or lists orchestration metadata, but not payloads |
1749+
> | **NotDataActions** | |
1750+
> | *none* | |
1751+
1752+
```json
1753+
{
1754+
"assignableScopes": [
1755+
"/"
1756+
],
1757+
"description": "Read all Durable Task Scheduler data.",
1758+
"id": "/providers/Microsoft.Authorization/roleDefinitions/d6a5505f-6ebb-45a4-896e-ac8274cfc0ac",
1759+
"name": "d6a5505f-6ebb-45a4-896e-ac8274cfc0ac",
1760+
"permissions": [
1761+
{
1762+
"actions": [],
1763+
"notActions": [],
1764+
"dataActions": [
1765+
"Microsoft.DurableTask/schedulers/taskhubs/orchestrations/read",
1766+
"Microsoft.DurableTask/schedulers/taskhubs/orchestrations/metadata/read"
1767+
],
1768+
"notDataActions": []
1769+
}
1770+
],
1771+
"roleName": "Durable Task Data Reader",
1772+
"roleType": "BuiltInRole",
1773+
"type": "Microsoft.Authorization/roleDefinitions"
1774+
}
1775+
```
1776+
1777+
## Durable Task Worker
1778+
1779+
Used by worker applications to interact with the Durable Task service
1780+
1781+
[Learn more](/azure/azure-functions/durable/durable-task-scheduler/develop-with-durable-task-scheduler)
1782+
1783+
> [!div class="mx-tableFixed"]
1784+
> | Actions | Description |
1785+
> | --- | --- |
1786+
> | *none* | |
1787+
> | **NotActions** | |
1788+
> | *none* | |
1789+
> | **DataActions** | |
1790+
> | [Microsoft.DurableTask](../permissions/integration.md#microsoftdurabletask)/schedulers/taskhubs/orchestrations/execute/action | Get orchestration and activity work-items and post results |
1791+
> | **NotDataActions** | |
1792+
> | *none* | |
1793+
1794+
```json
1795+
{
1796+
"assignableScopes": [
1797+
"/"
1798+
],
1799+
"description": "Used by worker applications to interact with the Durable Task service",
1800+
"id": "/providers/Microsoft.Authorization/roleDefinitions/80d0d6b0-f522-40a4-8886-a5a11720c375",
1801+
"name": "80d0d6b0-f522-40a4-8886-a5a11720c375",
1802+
"permissions": [
1803+
{
1804+
"actions": [],
1805+
"notActions": [],
1806+
"dataActions": [
1807+
"Microsoft.DurableTask/schedulers/taskhubs/orchestrations/execute/action"
1808+
],
1809+
"notDataActions": []
1810+
}
1811+
],
1812+
"roleName": "Durable Task Worker",
1813+
"roleType": "BuiltInRole",
1814+
"type": "Microsoft.Authorization/roleDefinitions"
1815+
}
1816+
```
1817+
16931818
## EventGrid Contributor
16941819

16951820
Lets you manage EventGrid operations.

‎articles/role-based-access-control/permissions/integration.md

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -721,6 +721,30 @@ Azure service: [Azure Communication Services](/azure/communication-services/over
721721
> | Microsoft.Communication/Operations/read | Reads operations |
722722
> | Microsoft.Communication/RegisteredSubscriptions/read | Reads registered subscriptions |
723723
724+
## Microsoft.DurableTask
725+
726+
Azure service: [Durable Functions](/azure/azure-functions/durable/durable-functions-overview)
727+
728+
> [!div class="mx-tableFixed"]
729+
> | Action | Description |
730+
> | --- | --- |
731+
> | Microsoft.DurableTask/register/action | Register Microsoft.DurableTask resource provider for the subscription |
732+
> | Microsoft.DurableTask/unregister/action | Unregister Microsoft.DurableTask resource provider for the subscription |
733+
> | Microsoft.DurableTask/locations/operationStatuses/read | OperationStatuses read |
734+
> | Microsoft.DurableTask/locations/operationStatuses/write | OperationStatuses write |
735+
> | Microsoft.DurableTask/schedulers/write | Create or Update Durable Task Scheduler |
736+
> | Microsoft.DurableTask/schedulers/delete | Delete Durable Task Scheduler |
737+
> | Microsoft.DurableTask/schedulers/read | Read Durable Task Scheduler Namespace |
738+
> | Microsoft.DurableTask/schedulers/taskhubs/write | Create or Update Durable Task Scheduler Task Hub |
739+
> | Microsoft.DurableTask/schedulers/taskhubs/delete | Delete Durable Task Scheduler Task Hub |
740+
> | Microsoft.DurableTask/schedulers/taskhubs/read | Read Durable Task Scheduler Task Hub |
741+
> | **DataAction** | **Description** |
742+
> | Microsoft.DurableTask/schedulers/taskhubs/orchestrations/read | Gets or list orchestrations metadata, including payloads |
743+
> | Microsoft.DurableTask/schedulers/taskhubs/orchestrations/manage/action | Manages orchestrations |
744+
> | Microsoft.DurableTask/schedulers/taskhubs/orchestrations/execute/action | Get orchestration and activity work-items and post results |
745+
> | Microsoft.DurableTask/schedulers/taskhubs/orchestrations/raiseevents/action | Can invoke RaiseEvent |
746+
> | Microsoft.DurableTask/schedulers/taskhubs/orchestrations/metadata/read | Gets or lists orchestration metadata, but not payloads |
747+
724748
## Microsoft.EventGrid
725749

726750
Get reliable event delivery at massive scale.

‎articles/role-based-access-control/whats-new.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,7 @@ This article provides information about new features and documentation improveme
1818

1919
| Date | Area | Description |
2020
| --- | --- | --- |
21+
| March 2025 | Roles | Added Durable Task roles. See [Durable Task Data Contributor](built-in-roles/integration.md#durable-task-data-contributor), [Durable Task Data Reader](built-in-roles/integration.md#durable-task-data-reader), and [Durable Task Worker](built-in-roles/integration.md#durable-task-worker). |
2122
| March 2025 | Security | Updates about classic administrators access. See [Azure classic subscription administrators](classic-administrators.md). |
2223
| February 2025 | Limits | Updates to [Azure RBAC limits](../azure-resource-manager/management/azure-subscription-service-limits.md#azure-rbac-limits). |
2324
| February 2025 | Roles | Added [Chaos Studio Target Contributor](built-in-roles/devops.md#chaos-studio-target-contributor) role. |

0 commit comments

Comments
 (0)