You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/role-based-access-control/built-in-roles.md
+11Lines changed: 11 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -223,6 +223,17 @@ The following table provides a brief description of each built-in role. Click th
223
223
> | <aname='azure-red-hat-openshift-network-operator'></a>[Azure Red Hat OpenShift Network Operator](./built-in-roles/containers.md#azure-red-hat-openshift-network-operator)| Install and upgrade the networking components on an OpenShift cluster. | be7a6435-15ae-4171-8f30-4a343eff9e8f |
224
224
> | <aname='azure-red-hat-openshift-service-operator'></a>[Azure Red Hat OpenShift Service Operator](./built-in-roles/containers.md#azure-red-hat-openshift-service-operator)| Maintain machine health, network configuration, monitoring, and other features that are specific to an OpenShift cluster's continued functionality as a managed service. | 4436bae4-7702-4c84-919b-c4069ff25ee2 |
225
225
> | <aname='connected-cluster-managed-identity-checkaccess-reader'></a>[Connected Cluster Managed Identity CheckAccess Reader](./built-in-roles/containers.md#connected-cluster-managed-identity-checkaccess-reader)| Built-in role that allows a Connected Cluster managed identity to call the checkAccess API | 65a14201-8f6c-4c28-bec4-12619c5a9aaa |
226
+
> | <aname='container-apps-connectedenvironments-contributor'></a>[Container Apps ConnectedEnvironments Contributor](./built-in-roles/containers.md#container-apps-connectedenvironments-contributor)| Full management of Container Apps ConnectedEnvironments, including creation, deletion, and updates. | 6f4fe6fc-f04f-4d97-8528-8bc18c848dca |
> | <aname='container-apps-contributor'></a>[Container Apps Contributor](./built-in-roles/containers.md#container-apps-contributor)| Full management of Container Apps, including creation, deletion, and updates. | 358470bc-b998-42bd-ab17-a7e34c199c0f |
229
+
> | <aname='container-apps-jobs-contributor'></a>[Container Apps Jobs Contributor](./built-in-roles/containers.md#container-apps-jobs-contributor)| Full management of Container Apps jobs, including creation, deletion, and updates. | 4e3d2b60-56ae-4dc6-a233-09c8e5a82e68 |
230
+
> | <aname='container-apps-jobs-operator'></a>[Container Apps Jobs Operator](./built-in-roles/containers.md#container-apps-jobs-operator)| Read, start, and stop Container Apps jobs. | b9a307c4-5aa3-4b52-ba60-2b17c136cd7b |
231
+
> | <aname='container-apps-jobs-reader'></a>[Container Apps Jobs Reader](./built-in-roles/containers.md#container-apps-jobs-reader)| Read access to ContainerApps jobs | edd66693-d32a-450b-997d-0158c03976b0 |
232
+
> | <aname='container-apps-managedenvironments-contributor'></a>[Container Apps ManagedEnvironments Contributor](./built-in-roles/containers.md#container-apps-managedenvironments-contributor)| Full management of Container Apps ManagedEnvironments, including creation, deletion, and updates. | 57cc5028-e6a7-4284-868d-0611c5923f8d |
> | <aname='container-apps-operator'></a>[Container Apps Operator](./built-in-roles/containers.md#container-apps-operator)| Read, logstream and exec into Container Apps. | f3bd1b5c-91fa-40e7-afe7-0c11d331232c |
235
+
> | <aname='container-apps-sessionpools-contributor'></a>[Container Apps SessionPools Contributor](./built-in-roles/containers.md#container-apps-sessionpools-contributor)| Full management of Container Apps SessionPools, including creation, deletion, and updates. | f7669afb-68b2-44b4-9c5f-6d2a47fddda0 |
> | <aname='container-registry-cache-rule-administrator'></a>[Container Registry Cache Rule Administrator](./built-in-roles/containers.md#container-registry-cache-rule-administrator)| Create, Read, Update, and Delete Cache Rules in Container Registry. This role doesn't grant permissions to manage Credential Sets. | df87f177-bb12-4db1-9793-a413691eff94 |
227
238
> | <aname='container-registry-cache-rule-reader'></a>[Container Registry Cache Rule Reader](./built-in-roles/containers.md#container-registry-cache-rule-reader)| Read the configuration of Cache Rules in Container Registry. This permission doesn't grant permission to read Credential Sets. | c357b964-0002-4b64-a50d-7a28f02edc52 |
228
239
> | <aname='container-registry-configuration-reader-and-data-access-configuration-reader'></a>[Container Registry Configuration Reader and Data Access Configuration Reader](./built-in-roles/containers.md#container-registry-configuration-reader-and-data-access-configuration-reader)| Provides permissions to list container registries and registry configuration properties. Provides permissions to list data access configuration such as admin user credentials, scope maps, and tokens, which can be used to read, write or delete repositories and images. Does not provide direct permissions to read, list, or write registry contents including repositories and images. Does not provide permissions to modify data plane content such as imports, Artifact Cache or Sync, and Transfer Pipelines. Does not provide permissions for managing Tasks. | 69b07be0-09bf-439a-b9a6-e73de851bd59 |
0 commit comments