Skip to content

Commit a62d994

Browse files
prmerger-automator[bot]prmerger-automator[bot]
authored
Merge pull request #225326 from maud-lv/ml-g-rbac4
Add Grafana roles
2 parents 7000fb7 + 57efef1 commit a62d994

File tree

2 files changed

+155
-1
lines changed

2 files changed

+155
-1
lines changed

‎articles/role-based-access-control/built-in-roles.md

Lines changed: 120 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -302,6 +302,9 @@ The following table provides a brief description of each built-in role. Click th
302302
> | [Azure Digital Twins Data Owner](#azure-digital-twins-data-owner) | Full access role for Digital Twins data-plane | bcd981a7-7f74-457b-83e1-cceb9e632ffe |
303303
> | [Azure Digital Twins Data Reader](#azure-digital-twins-data-reader) | Read-only role for Digital Twins data-plane properties | d57506d4-4c8d-48b1-8587-93c323f6a5a3 |
304304
> | [BizTalk Contributor](#biztalk-contributor) | Lets you manage BizTalk services, but not access to them. | 5e3c6656-6cfa-4708-81fe-0de47ac73342 |
305+
> | [Grafana Admin](#grafana-admin) | Perform all Grafana operations, including the ability to manage data sources, create dashboards, and manage role assignments within Grafana. | 22926164-76b3-42b3-bc55-97df8dab3e41 |
306+
> | [Grafana Editor](#grafana-editor) | View and edit a Grafana instance, including its dashboards and alerts. | a79a5197-3a5c-4973-a920-486035ffd60f |
307+
> | [Grafana Viewer](#grafana-viewer) | View a Grafana instance, including its dashboards and alerts. | 60921a7e-fef1-4a43-9b16-a26c52ad4769 |
305308
> | [Load Test Contributor](#load-test-contributor) | View, create, update, delete and execute load tests. View and list load test resources but can not make any changes. | 749a398d-560b-491b-bb21-08924219302e |
306309
> | [Load Test Owner](#load-test-owner) | Execute all operations on load test resources and load tests | 45bb0b16-2f0c-4e78-afaa-a07599b003f6 |
307310
> | [Load Test Reader](#load-test-reader) | View and list all load tests and load test resources but can not make any changes | 3ae3fb29-0000-4ccd-bf80-542e7b26e081 |
@@ -15340,6 +15343,123 @@ Lets you manage BizTalk services, but not access to them.
1534015343
}
1534115344
```
1534215345

15346+
### Grafana Admin
15347+
15348+
Perform all Grafana operations, including the ability to manage data sources, create dashboards, and manage role assignments within Grafana. [Learn more](../managed-grafana/how-to-share-grafana-workspace.md).
15349+
15350+
> [!div class="mx-tableFixed"]
15351+
> | Actions | Description |
15352+
> | --- | --- |
15353+
> | *none* | |
15354+
> | **NotActions** | |
15355+
> | *none* | |
15356+
> | **DataActions** | |
15357+
> | [Microsoft.Dashboard](resource-provider-operations.md#microsoftdashboard)/grafana/ActAsGrafanaAdmin/action | Act as Grafana Admin role. |
15358+
> | **NotDataActions** | |
15359+
> | *none* | |
15360+
15361+
```json
15362+
{
15363+
"assignableScopes": [
15364+
"/"
15365+
],
15366+
"description": "Built-in Grafana admin role",
15367+
"id": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/22926164-76b3-42b3-bc55-97df8dab3e41",
15368+
"name": "22926164-76b3-42b3-bc55-97df8dab3e41",
15369+
"permissions": [
15370+
{
15371+
"actions": [],
15372+
"notActions": [],
15373+
"dataActions": [
15374+
"Microsoft.Dashboard/grafana/ActAsGrafanaAdmin/action"
15375+
],
15376+
"notDataActions": []
15377+
}
15378+
],
15379+
"roleName": "Grafana Admin",
15380+
"roleType": "BuiltInRole",
15381+
"type": "Microsoft.Authorization/roleDefinitions"
15382+
}
15383+
```
15384+
15385+
### Grafana Editor
15386+
15387+
View and edit a Grafana instance, including its dashboards and alerts. [Learn more](../managed-grafana/how-to-share-grafana-workspace.md).
15388+
15389+
> [!div class="mx-tableFixed"]
15390+
> | Actions | Description |
15391+
> | --- | --- |
15392+
> | *none* | |
15393+
> | **NotActions** | |
15394+
> | *none* | |
15395+
> | **DataActions** | |
15396+
> | [Microsoft.Dashboard](resource-provider-operations.md#microsoftdashboard)/grafana/ActAsGrafanaEditor/action | Act as Grafana Editor role. |
15397+
> | **NotDataActions** | |
15398+
> | *none* | |
15399+
15400+
```json
15401+
{
15402+
"assignableScopes": [
15403+
"/"
15404+
],
15405+
"description": "Built-in Grafana Editor role",
15406+
"id": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/a79a5197-3a5c-4973-a920-486035ffd60f",
15407+
"name": "a79a5197-3a5c-4973-a920-486035ffd60f",
15408+
"permissions": [
15409+
{
15410+
"actions": [],
15411+
"notActions": [],
15412+
"dataActions": [
15413+
"Microsoft.Dashboard/grafana/ActAsGrafanaEditor/action"
15414+
],
15415+
"notDataActions": []
15416+
}
15417+
],
15418+
"roleName": "Grafana Editor",
15419+
"roleType": "BuiltInRole",
15420+
"type": "Microsoft.Authorization/roleDefinitions"
15421+
}
15422+
```
15423+
15424+
### Grafana Viewer
15425+
15426+
View a Grafana instance, including its dashboards and alerts. [Learn more](../managed-grafana/how-to-share-grafana-workspace.md).
15427+
15428+
> [!div class="mx-tableFixed"]
15429+
> | Actions | Description |
15430+
> | --- | --- |
15431+
> | *none* | |
15432+
> | **NotActions** | |
15433+
> | *none* | |
15434+
> | **DataActions** | |
15435+
> | [Microsoft.Dashboard](resource-provider-operations.md#microsoftdashboard)/grafana/ActAsGrafanaViewer/action | Act as Grafana Viewer role.|
15436+
> | **NotDataActions** |
15437+
> | *none* | |
15438+
15439+
```json
15440+
{
15441+
"assignableScopes": [
15442+
"/"
15443+
],
15444+
"description": "Built-in Grafana Viewer role",
15445+
"id": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/60921a7e-fef1-4a43-9b16-a26c52ad4769",
15446+
"name": "60921a7e-fef1-4a43-9b16-a26c52ad4769",
15447+
"permissions": [
15448+
{
15449+
"actions": [],
15450+
"notActions": [],
15451+
"dataActions": [
15452+
"Microsoft.Dashboard/grafana/ActAsGrafanaViewer/action"
15453+
],
15454+
"notDataActions": []
15455+
}
15456+
],
15457+
"roleName": "Grafana Viewer",
15458+
"roleType": "BuiltInRole",
15459+
"type": "Microsoft.Authorization/roleDefinitions"
15460+
}
15461+
```
15462+
1534315463
### Load Test Contributor
1534415464

1534515465
View, create, update, delete and execute load tests. View and list load test resources but can not make any changes. [Learn more](../load-testing/how-to-assign-roles.md)

‎articles/role-based-access-control/resource-provider-operations.md

Lines changed: 35 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -163,6 +163,7 @@ Click the resource provider name in the following table to see the list of opera
163163
| [Microsoft.DesktopVirtualization](#microsoftdesktopvirtualization) |
164164
| **Other** |
165165
| [Microsoft.Chaos](#microsoftchaos) |
166+
| [Microsoft.Dashboard](#microsoftdashboard) |
166167
| [Microsoft.DigitalTwins](#microsoftdigitaltwins) |
167168
| [Microsoft.LoadTestService](#microsoftloadtestservice) |
168169
| [Microsoft.ServicesHub](#microsoftserviceshub) |
@@ -13842,6 +13843,39 @@ Azure service: [Azure Chaos Studio](../chaos-studio/index.yml)
1384213843
> | Microsoft.Chaos/targets/capabilities/delete | Deletes a Capability resource that extends a Target resource. |
1384313844
> | Microsoft.Chaos/targets/capabilities/read | Gets all Capabilities that extend a Target resource. |
1384413845

13846+
### Microsoft.Dashboard
13847+
13848+
Azure service: [Azure Managed Grafana](../managed-grafana/index.yml)
13849+
13850+
> [!div class="mx-tableFixed"]
13851+
> | Action | Description |
13852+
> | --- | --- |
13853+
> | Microsoft.Dashboard/grafana/action | Operate grafana |
13854+
> | Microsoft.Dashboard/checkNameAvailability/action | Checks if grafana resource name is available |
13855+
> | Microsoft.Dashboard/register/action | Registers the subscription for the Microsoft.Dashboard resource provider |
13856+
> | Microsoft.Dashboard/unregister/action | Unregisters the subscription for the Microsoft.Dashboard resource provider |
13857+
> | Microsoft.Dashboard/grafana/read | Read grafana |
13858+
> | Microsoft.Dashboard/grafana/write | Write grafana |
13859+
> | Microsoft.Dashboard/grafana/delete | Delete grafana |
13860+
> | Microsoft.Dashboard/grafana/PrivateEndpointConnectionsApproval/action | Approve PrivateEndpointConnection |
13861+
> | Microsoft.Dashboard/grafana/privateEndpointConnectionProxies/validate/action | Validate PrivateEndpointConnectionProxy |
13862+
> | Microsoft.Dashboard/grafana/privateEndpointConnectionProxies/read | Get PrivateEndpointConnectionProxy |
13863+
> | Microsoft.Dashboard/grafana/privateEndpointConnectionProxies/write | Create/Update PrivateEndpointConnectionProxy |
13864+
> | Microsoft.Dashboard/grafana/privateEndpointConnectionProxies/delete | Delete PrivateEndpointConnectionProxy |
13865+
> | Microsoft.Dashboard/grafana/privateEndpointConnections/read | Get PrivateEndpointConnection |
13866+
> | Microsoft.Dashboard/grafana/privateEndpointConnections/write | Update PrivateEndpointConnection |
13867+
> | Microsoft.Dashboard/grafana/privateEndpointConnections/delete | Delete PrivateEndpointConnection |
13868+
> | Microsoft.Dashboard/grafana/privateLinkResources/read | Get PrivateLinkResources |
13869+
> | Microsoft.Dashboard/locations/read | Get locations |
13870+
> | Microsoft.Dashboard/locations/operationStatuses/read | Get operation statuses |
13871+
> | Microsoft.Dashboard/locations/operationStatuses/write | Write operation statuses |
13872+
> | Microsoft.Dashboard/operations/read | List operations available on Microsoft.Dashboard resource provider |
13873+
> | Microsoft.Dashboard/registeredSubscriptions/read | Get registered subscription details |
13874+
> | **DataAction** | **Description** |
13875+
> | Microsoft.Dashboard/grafana/ActAsGrafanaAdmin/action | Act as Grafana Admin role |
13876+
> | Microsoft.Dashboard/grafana/ActAsGrafanaEditor/action | Act as Grafana Editor role |
13877+
> | Microsoft.Dashboard/grafana/ActAsGrafanaViewer/action | Act as Grafana Viewer role |
13878+
1384513879
### Microsoft.DigitalTwins
1384613880

1384713881
Azure service: [Azure Digital Twins](../digital-twins/index.yml)
@@ -13940,4 +13974,4 @@ Azure service: [Services Hub](/services-hub/)
1394013974

1394113975
- [Match resource provider to service](../azure-resource-manager/management/azure-services-resource-providers.md)
1394213976
- [Azure built-in roles](built-in-roles.md)
13943-
- [Cloud Adoption Framework: Resource access management in Azure](/azure/cloud-adoption-framework/govern/resource-consistency/resource-access-management)
13977+
- [Cloud Adoption Framework: Resource access management in Azure](/azure/cloud-adoption-framework/govern/resource-consistency/resource-access-management)

0 commit comments

Comments
 (0)