Managed Application Publisher Operator rename

Author: rolyon

articles/role-based-access-control/built-in-roles.md

@@ -533,7 +533,7 @@ The following table provides a brief description of each built-in role. Click th
 > | <a name='hierarchy-settings-administrator'></a>[Hierarchy Settings Administrator](./built-in-roles/management-and-governance.md#hierarchy-settings-administrator) | Allows users to edit and delete Hierarchy Settings | 350f8d15-c687-4448-8ae1-157740a3936d |
 > | <a name='managed-application-contributor-role'></a>[Managed Application Contributor Role](./built-in-roles/management-and-governance.md#managed-application-contributor-role) | Allows for creating managed application resources. | 641177b8-a67a-45b9-a033-47bc880bb21e |
 > | <a name='managed-application-operator-role'></a>[Managed Application Operator Role](./built-in-roles/management-and-governance.md#managed-application-operator-role) | Lets you read and perform actions on Managed Application resources | c7393b34-138c-406f-901b-d8cf2b17e6ae |
-> | <a name='managed-applications-reader'></a>[Managed Applications Reader](./built-in-roles/management-and-governance.md#managed-applications-reader) | Lets you read resources in a managed app and request JIT access. | b9331d33-8a36-4f8c-b097-4f54124fdb44 |
+> | <a name='managed-application-publisher-operator'></a>[Managed Application Publisher Operator](./built-in-roles/management-and-governance.md#managed-application-publisher-operator) | Allows the publisher to read resources in the managed resource group for Managed Application and request JIT access for additional operations. This role is only used by the Managed Application service to provide access to publishers. | b9331d33-8a36-4f8c-b097-4f54124fdb44 |
 > | <a name='managed-services-registration-assignment-delete-role'></a>[Managed Services Registration assignment Delete Role](./built-in-roles/management-and-governance.md#managed-services-registration-assignment-delete-role) | Managed Services Registration Assignment Delete Role allows the managing tenant users to delete the registration assignment assigned to their tenant. | 91c1777a-f3dc-4fae-b103-61d183457e46 |
 > | <a name='management-group-contributor'></a>[Management Group Contributor](./built-in-roles/management-and-governance.md#management-group-contributor) | Management Group Contributor Role | 5d58bcaf-24a5-4b20-bdb6-eed9f69fbe4c |
 > | <a name='management-group-reader'></a>[Management Group Reader](./built-in-roles/management-and-governance.md#management-group-reader) | Management Group Reader Role | ac63b705-f282-497d-ac71-919bf39d939d |

articles/role-based-access-control/built-in-roles/management-and-governance.md

@@ -1569,11 +1569,11 @@ Lets you read and perform actions on Managed Application resources
 }
 ```
 
-## Managed Applications Reader
+## Managed Application Publisher Operator
 
-Lets you read resources in a managed app and request JIT access.
+Allows the publisher to read resources in the managed resource group for Managed Application and request JIT access for additional operations. This role is only used by the Managed Application service to provide access to publishers.
 
-[!INCLUDE [role-read-permissions.md](../includes/role-read-permissions.md)]
+This role was previously named Managed Applications Reader. [!INCLUDE [role-read-permissions.md](../includes/role-read-permissions.md)]
 
 > [!div class="mx-tableFixed"]
 > | Actions | Description |
@@ -1593,7 +1593,7 @@ Lets you read resources in a managed app and request JIT access.
   "assignableScopes": [
     "/"
   ],
-  "description": "Lets you read resources in a managed app and request JIT access.",
+  "description": "Allows the publisher to read resources in the managed resource group for Managed Application and request JIT access for additional operations. This role is only used by the Managed Application service to provide access to publishers.",
   "id": "/providers/Microsoft.Authorization/roleDefinitions/b9331d33-8a36-4f8c-b097-4f54124fdb44",
   "name": "b9331d33-8a36-4f8c-b097-4f54124fdb44",
   "permissions": [
@@ -1608,7 +1608,7 @@ Lets you read resources in a managed app and request JIT access.
       "notDataActions": []
     }
   ],
-  "roleName": "Managed Applications Reader",
+  "roleName": "Managed Application Publisher Operator",
   "roleType": "BuiltInRole",
   "type": "Microsoft.Authorization/roleDefinitions"
 }

articles/role-based-access-control/whats-new.md

@@ -5,7 +5,7 @@ author: rolyon
 manager: femila
 ms.service: role-based-access-control
 ms.topic: whats-new
-ms.date: 04/26/2025
+ms.date: 05/06/2025
 ms.author: rolyon
 
 ---
@@ -18,6 +18,7 @@ This article provides information about new features and documentation improveme
 
 | Date | Area | Description |
 | --- | --- | --- |
+| May 2025 | Roles | Updated role name from Managed Applications Reader to [Managed Application Publisher Operator](./built-in-roles/management-and-governance.md#managed-application-publisher-operator). |
 | April 2025 | Roles and permissions | Updated permissions for several roles and resource providers. See [Azure built-in roles](built-in-roles.md) and [Azure permissions](resource-provider-operations.md). |
 | April 2025 | Roles | Added Azure Container Registry roles.<br/>[Container Registry Cache Rule Administrator](./built-in-roles/containers.md#container-registry-cache-rule-administrator)<br/>[Container Registry Cache Rule Reader](./built-in-roles/containers.md#container-registry-cache-rule-reader)<br/>[Container Registry Credential Set Administrator](./built-in-roles/containers.md#container-registry-credential-set-administrator)<br/>[Container Registry Credential Set Reader](./built-in-roles/containers.md#container-registry-credential-set-reader) |
 | April 2025 | Limits | Added system-managed deny assignments limit. See [Azure RBAC limits](../azure-resource-manager/management/azure-subscription-service-limits.md#azure-rbac-limits). |
@@ -32,7 +33,7 @@ This article provides information about new features and documentation improveme
 | February 2025 | Roles | Added [Locks Contributor](built-in-roles/security.md#locks-contributor) role. |
 | February 2025 | Subscriptions | Updated list of known impact when transferring a subscription. See [Understand the impact of transferring a subscription](transfer-subscription.md#understand-the-impact-of-transferring-a-subscription). |
 | January 2025 | Security | Preview of elevate access log entries in the Microsoft Entra directory audit logs. See [View elevate access log entries](elevate-access-global-admin.md#view-elevate-access-log-entries). |
-| January 2025 | Roles | Updated descriptions for roles with `*/read` permissions.<br/>[App Compliance Automation Administrator](built-in-roles/security.md#app-compliance-automation-administrator)<br/>[App Compliance Automation Reader](built-in-roles/security.md#app-compliance-automation-reader)<br/>[Log Analytics Contributor](built-in-roles/monitor.md#log-analytics-contributor)<br/>[Log Analytics Reader](built-in-roles/monitor.md#log-analytics-reader)<br/>[Managed Application Contributor Role](built-in-roles/management-and-governance.md#managed-application-contributor-role)<br/>[Managed Application Operator Role](built-in-roles/management-and-governance.md#managed-application-operator-role)<br/>[Managed Applications Reader](built-in-roles/management-and-governance.md#managed-applications-reader)<br/>[Monitoring Contributor](built-in-roles/monitor.md#monitoring-contributor)<br/>[Monitoring Reader](built-in-roles/monitor.md#monitoring-reader)<br/>[Reader](built-in-roles/general.md#reader)<br/>[Resource Policy Contributor](built-in-roles/management-and-governance.md#resource-policy-contributor)<br/>[Role Based Access Control Administrator](built-in-roles/privileged.md#role-based-access-control-administrator)<br/>[User Access Administrator](built-in-roles/privileged.md#user-access-administrator) |
+| January 2025 | Roles | Updated descriptions for roles with `*/read` permissions.<br/>[App Compliance Automation Administrator](built-in-roles/security.md#app-compliance-automation-administrator)<br/>[App Compliance Automation Reader](built-in-roles/security.md#app-compliance-automation-reader)<br/>[Log Analytics Contributor](built-in-roles/monitor.md#log-analytics-contributor)<br/>[Log Analytics Reader](built-in-roles/monitor.md#log-analytics-reader)<br/>[Managed Application Contributor Role](built-in-roles/management-and-governance.md#managed-application-contributor-role)<br/>[Managed Application Operator Role](built-in-roles/management-and-governance.md#managed-application-operator-role)<br/>Managed Applications Reader<br/>[Monitoring Contributor](built-in-roles/monitor.md#monitoring-contributor)<br/>[Monitoring Reader](built-in-roles/monitor.md#monitoring-reader)<br/>[Reader](built-in-roles/general.md#reader)<br/>[Resource Policy Contributor](built-in-roles/management-and-governance.md#resource-policy-contributor)<br/>[Role Based Access Control Administrator](built-in-roles/privileged.md#role-based-access-control-administrator)<br/>[User Access Administrator](built-in-roles/privileged.md#user-access-administrator) |
 | January 2025 | Roles | Added Azure Chaos Studio roles. See [Chaos Studio Experiment Contributor](built-in-roles/devops.md#chaos-studio-experiment-contributor), [Chaos Studio Operator](built-in-roles/devops.md#chaos-studio-operator), and [Chaos Studio Reader](built-in-roles/devops.md#chaos-studio-reader). |
 | January 2025 | Roles | Added Azure Container Registry roles.<br/>[Container Registry Configuration Reader and Data Access Configuration Reader](built-in-roles/containers.md#container-registry-configuration-reader-and-data-access-configuration-reader)<br/>[Container Registry Contributor and Data Access Configuration Administrator](built-in-roles/containers.md#container-registry-contributor-and-data-access-configuration-administrator)<br/>[Container Registry Data Importer and Data Reader](built-in-roles/containers.md#container-registry-data-importer-and-data-reader)<br/>[Container Registry Repository Catalog Lister](built-in-roles/containers.md#container-registry-repository-catalog-lister)<br/>[Container Registry Repository Contributor](built-in-roles/containers.md#container-registry-repository-contributor)<br/>[Container Registry Repository Reader](built-in-roles/containers.md#container-registry-repository-reader)<br/>[Container Registry Repository Writer](built-in-roles/containers.md#container-registry-repository-writer)<br/>[Container Registry Tasks Contributor](built-in-roles/containers.md#container-registry-tasks-contributor)<br/>[Container Registry Transfer Pipeline Contributor](built-in-roles/containers.md#container-registry-transfer-pipeline-contributor) |
 | January 2025 | Roles and permissions | Updated permissions for several roles and resource providers. See [Azure built-in roles](built-in-roles.md) and [Azure permissions](resource-provider-operations.md). |