Skip to content

Commit c33f933

Browse files
jenniferf-skcjenniferf-skc
committed
Adding DevOps Infrastrucutre Contributor Role
1 parent 114a21d commit c33f933

File tree

2 files changed

+85
-1
lines changed

2 files changed

+85
-1
lines changed

‎articles/role-based-access-control/built-in-roles.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ ms.workload: identity
77
author: jenniferf-skc
88
manager: pmwongera
99
ms.author: jfields
10-
ms.date: 07/02/2025
10+
ms.date: 07/07/2025
1111
ms.custom: generated
1212
---
1313

@@ -487,6 +487,7 @@ The following table provides a brief description of each built-in role. Click th
487487
> | <a name='deployment-environments-user'></a>[Deployment Environments User](./built-in-roles/devops.md#deployment-environments-user) | Provides access to manage environment resources. | 18e40d4e-8d2e-438d-97e1-9528336e149c |
488488
> | <a name='devcenter-dev-box-user'></a>[DevCenter Dev Box User](./built-in-roles/devops.md#devcenter-dev-box-user) | Provides access to create and manage dev boxes. | 45d50f46-0b78-4001-a660-4198cbe8cd05 |
489489
> | <a name='devcenter-project-admin'></a>[DevCenter Project Admin](./built-in-roles/devops.md#devcenter-project-admin) | Provides access to manage project resources. | 331c37c6-af14-46d9-b9f4-e1909e1b95a0 |
490+
> | <a name='devops-infrastructure-contributor-role'></a>[DevOps Infrastructure Contributor Role](./built-in-roles/devops.md#devops-infrastructure-contributor-role) | Read, write, delete and perform actions on Managed DevOps Pools | 76153a9e-0edb-49bc-8e01-93c47e6b5180 |
490491
> | <a name='devtest-labs-user'></a>[DevTest Labs User](./built-in-roles/devops.md#devtest-labs-user) | Lets you connect, start, restart, and shutdown your virtual machines in your Azure DevTest Labs. | 76283e04-6283-4c54-8f91-bcf1374a3c64 |
491492
> | <a name='lab-assistant'></a>[Lab Assistant](./built-in-roles/devops.md#lab-assistant) | Enables you to view an existing lab, perform actions on the lab VMs and send invitations to the lab. | ce40b423-cede-4313-a93f-9b28290b72e1 |
492493
> | <a name='lab-contributor'></a>[Lab Contributor](./built-in-roles/devops.md#lab-contributor) | Applied at lab level, enables you to manage the lab. Applied at a resource group, enables you to create and manage labs. | 5daaa2af-1fe8-407c-9122-bba179798270 |

‎articles/role-based-access-control/built-in-roles/devops.md

Lines changed: 83 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -522,6 +522,89 @@ Provides access to manage project resources.
522522
}
523523
```
524524

525+
## DevOps Infrastructure Contributor Role
526+
527+
Read, write, delete and perform actions on Managed DevOps Pools
528+
529+
> [!div class="mx-tableFixed"]
530+
> | Actions | Description |
531+
> | --- | --- |
532+
> | [Microsoft.DevOpsInfrastructure](../permissions/devops.md#microsoftdevopsinfrastructure)/register/action | Register the subscription for Microsoft.DevOpsInfrastructure |
533+
> | [Microsoft.DevOpsInfrastructure](../permissions/devops.md#microsoftdevopsinfrastructure)/unregister/action | Unregister the subscription for Microsoft.DevOpsInfrastructure |
534+
> | [Microsoft.DevOpsInfrastructure](../permissions/devops.md#microsoftdevopsinfrastructure)/*/read | |
535+
> | [Microsoft.DevOpsInfrastructure](../permissions/devops.md#microsoftdevopsinfrastructure)/Locations/OperationStatuses/write | write OperationStatuses |
536+
> | [Microsoft.DevOpsInfrastructure](../permissions/devops.md#microsoftdevopsinfrastructure)/pools/write | Update a Pool |
537+
> | [Microsoft.DevOpsInfrastructure](../permissions/devops.md#microsoftdevopsinfrastructure)/pools/delete | Delete a Pool |
538+
> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
539+
> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
540+
> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/* | Create and manage a deployment |
541+
> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |
542+
> | **NotActions** | |
543+
> | *none* | |
544+
> | **DataActions** | |
545+
> | *none* | |
546+
> | **NotDataActions** | |
547+
> | *none* | |
548+
549+
```json
550+
{
551+
"assignableScopes": [
552+
"/"
553+
],
554+
"description": "Read, write, delete and perform actions on Managed DevOps Pools",
555+
"id": "/providers/Microsoft.Authorization/roleDefinitions/76153a9e-0edb-49bc-8e01-93c47e6b5180",
556+
"name": "76153a9e-0edb-49bc-8e01-93c47e6b5180",
557+
"permissions": [
558+
{
559+
"actions": [
560+
"Microsoft.DevOpsInfrastructure/register/action",
561+
"Microsoft.DevOpsInfrastructure/unregister/action",
562+
"Microsoft.DevOpsInfrastructure/*/read",
563+
"Microsoft.DevOpsInfrastructure/Locations/OperationStatuses/write",
564+
"Microsoft.DevOpsInfrastructure/pools/write",
565+
"Microsoft.DevOpsInfrastructure/pools/delete",
566+
"Microsoft.Authorization/*/read",
567+
"Microsoft.Insights/alertRules/*",
568+
"Microsoft.Resources/deployments/*",
569+
"Microsoft.Resources/subscriptions/resourceGroups/read"
570+
],
571+
"notActions": [],
572+
"dataActions": [],
573+
"notDataActions": []
574+
}
575+
],
576+
"roleName": "DevOps Infrastructure Contributor Role",
577+
"roleType": "BuiltInRole",
578+
"type": "Microsoft.Authorization/roleDefinitions"
579+
}
580+
```
581+
582+
583+
> | [Microsoft.DevOpsInfrastructure](./permissions/devops.md#microsoftdevopsinfrastructure) | | [Managed DevOps Pools](/azure/devops/managed-devops-pools/overview) |
584+
585+
## Microsoft.DevOpsInfrastructure
586+
587+
Azure service: [Managed DevOps Pools](/azure/devops/managed-devops-pools/overview)
588+
589+
> [!div class="mx-tableFixed"]
590+
> | Action | Description |
591+
> | --- | --- |
592+
> | Microsoft.DevOpsInfrastructure/register/action | Register the subscription for Microsoft.DevOpsInfrastructure |
593+
> | Microsoft.DevOpsInfrastructure/unregister/action | Unregister the subscription for Microsoft.DevOpsInfrastructure |
594+
> | Microsoft.DevOpsInfrastructure/images/versions/read | List ImageVersion resources by Image |
595+
> | Microsoft.DevOpsInfrastructure/Locations/OperationStatuses/read | read OperationStatuses |
596+
> | Microsoft.DevOpsInfrastructure/Locations/OperationStatuses/write | write OperationStatuses |
597+
> | Microsoft.DevOpsInfrastructure/locations/skus/read | List ResourceSku resources by subscription ID |
598+
> | Microsoft.DevOpsInfrastructure/locations/usages/read | List Quota resources by subscription ID |
599+
> | Microsoft.DevOpsInfrastructure/Operations/read | read Operations |
600+
> | Microsoft.DevOpsInfrastructure/pools/read | List Pool resources by subscription ID |
601+
> | Microsoft.DevOpsInfrastructure/pools/read | List Pool resources by resource group |
602+
> | Microsoft.DevOpsInfrastructure/pools/read | Get a Pool |
603+
> | Microsoft.DevOpsInfrastructure/pools/write | Create a Pool |
604+
> | Microsoft.DevOpsInfrastructure/pools/delete | Delete a Pool |
605+
> | Microsoft.DevOpsInfrastructure/pools/write | Update a Pool |
606+
> | Microsoft.DevOpsInfrastructure/pools/resources/read | List ResourceDetailsObject resources by Pool |
607+
525608
## DevTest Labs User
526609

527610
Lets you connect, start, restart, and shutdown your virtual machines in your Azure DevTest Labs.

0 commit comments

Comments
 (0)