Skip to content

Commit f03a4ba

Browse files
committed
Adjust position of event grid roles
1 parent 985837c commit f03a4ba

File tree

1 file changed

+108
-112
lines changed

1 file changed

+108
-112
lines changed

articles/role-based-access-control/built-in-roles.md

Lines changed: 108 additions & 112 deletions
Original file line numberDiff line numberDiff line change
@@ -116,9 +116,6 @@ The following table provides a brief description and the unique ID of each built
116116
> | [Cognitive Services Contributor](#cognitive-services-contributor) | Lets you create, read, update, delete and manage keys of Cognitive Services. | 25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68 |
117117
> | [Cognitive Services Data Reader (Preview)](#cognitive-services-data-reader-preview) | Lets you read Cognitive Services data. | b59867f0-fa02-499b-be73-45a86b5b3e1c |
118118
> | [Cognitive Services User](#cognitive-services-user) | Lets you read and list keys of Cognitive Services. | a97b65f3-24c7-4388-baec-2e87135dc908 |
119-
> | **Internet of things** | | |
120-
> | [EventGrid EventSubscription Contributor](#eventgrid-eventsubscription-contributor) | Lets you manage EventGrid event subscription operations. | 428e0ff0-5e57-4d9c-a221-2c70d0e0a443 |
121-
> | [EventGrid EventSubscription Reader](#eventgrid-eventsubscription-reader) | Lets you read EventGrid event subscriptions. | 2414bbcf-6497-4faf-8c65-045460748405 |
122119
> | **Mixed reality** | | |
123120
> | [Spatial Anchors Account Contributor](#spatial-anchors-account-contributor) | Lets you manage spatial anchors in your account, but not delete them | 8bbe83f1-e2a6-4df7-8cb4-4e04d4e5c827 |
124121
> | [Spatial Anchors Account Owner](#spatial-anchors-account-owner) | Lets you manage spatial anchors in your account, including deleting them | 70bbe301-9835-447d-afdd-19eb3167307c |
@@ -133,6 +130,8 @@ The following table provides a brief description and the unique ID of each built
133130
> | [Azure Service Bus Data Receiver](#azure-service-bus-data-receiver) | Allows for receive access to Azure Service Bus resources. | 4f6d3b9b-027b-4f4c-9142-0e5a2a2247e0 |
134131
> | [Azure Service Bus Data Sender](#azure-service-bus-data-sender) | Allows for send access to Azure Service Bus resources. | 69a216fc-b8fb-44d8-bc22-1f3c2cd27a39 |
135132
> | [Azure Stack Registration Owner](#azure-stack-registration-owner) | Lets you manage Azure Stack registrations. | 6f12a6df-dd06-4f3e-bcb1-ce8be600526a |
133+
> | [EventGrid EventSubscription Contributor](#eventgrid-eventsubscription-contributor) | Lets you manage EventGrid event subscription operations. | 428e0ff0-5e57-4d9c-a221-2c70d0e0a443 |
134+
> | [EventGrid EventSubscription Reader](#eventgrid-eventsubscription-reader) | Lets you read EventGrid event subscriptions. | 2414bbcf-6497-4faf-8c65-045460748405 |
136135
> | [Intelligent Systems Account Contributor](#intelligent-systems-account-contributor) | Lets you manage Intelligent Systems accounts, but not access to them. | 03a6d094-3444-4b3d-88af-7477090a9e5e |
137136
> | [Logic App Contributor](#logic-app-contributor) | Lets you manage logic apps, but not change access to them. | 87a39d53-fc1b-424a-814c-f7e04687dc9e |
138137
> | [Logic App Operator](#logic-app-operator) | Lets you read, enable, and disable logic apps, but not edit or update them. | 515c2055-d9d4-4321-b1b9-bd0c9a0f79fe |
@@ -4420,115 +4419,6 @@ Lets you read and list keys of Cognitive Services.
44204419
}
44214420
```
44224421

4423-
## Internet of things
4424-
4425-
4426-
### EventGrid EventSubscription Contributor
4427-
4428-
Lets you manage EventGrid event subscription operations.
4429-
4430-
> [!div class="mx-tableFixed"]
4431-
> | | |
4432-
> | --- | --- |
4433-
> | **Actions** | |
4434-
> | Microsoft.Authorization/*/read | Read roles and role assignments |
4435-
> | Microsoft.EventGrid/eventSubscriptions/* | |
4436-
> | Microsoft.EventGrid/topicTypes/eventSubscriptions/read | List global event subscriptions by topic type |
4437-
> | Microsoft.EventGrid/locations/eventSubscriptions/read | List regional event subscriptions |
4438-
> | Microsoft.EventGrid/locations/topicTypes/eventSubscriptions/read | List regional event subscriptions by topictype |
4439-
> | Microsoft.Insights/alertRules/* | Create and manage Insights alert rules |
4440-
> | Microsoft.Resources/deployments/* | Create and manage resource group deployments |
4441-
> | Microsoft.Resources/subscriptions/resourceGroups/read | Gets or lists resource groups. |
4442-
> | Microsoft.Support/* | Create and manage support tickets |
4443-
> | **NotActions** | |
4444-
> | *none* | |
4445-
> | **DataActions** | |
4446-
> | *none* | |
4447-
> | **NotDataActions** | |
4448-
> | *none* | |
4449-
4450-
```json
4451-
{
4452-
"assignableScopes": [
4453-
"/"
4454-
],
4455-
"description": "Lets you manage EventGrid event subscription operations.",
4456-
"id": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/428e0ff0-5e57-4d9c-a221-2c70d0e0a443",
4457-
"name": "428e0ff0-5e57-4d9c-a221-2c70d0e0a443",
4458-
"permissions": [
4459-
{
4460-
"actions": [
4461-
"Microsoft.Authorization/*/read",
4462-
"Microsoft.EventGrid/eventSubscriptions/*",
4463-
"Microsoft.EventGrid/topicTypes/eventSubscriptions/read",
4464-
"Microsoft.EventGrid/locations/eventSubscriptions/read",
4465-
"Microsoft.EventGrid/locations/topicTypes/eventSubscriptions/read",
4466-
"Microsoft.Insights/alertRules/*",
4467-
"Microsoft.Resources/deployments/*",
4468-
"Microsoft.Resources/subscriptions/resourceGroups/read",
4469-
"Microsoft.Support/*"
4470-
],
4471-
"notActions": [],
4472-
"dataActions": [],
4473-
"notDataActions": []
4474-
}
4475-
],
4476-
"roleName": "EventGrid EventSubscription Contributor",
4477-
"roleType": "BuiltInRole",
4478-
"type": "Microsoft.Authorization/roleDefinitions"
4479-
}
4480-
```
4481-
4482-
### EventGrid EventSubscription Reader
4483-
4484-
Lets you read EventGrid event subscriptions.
4485-
4486-
> [!div class="mx-tableFixed"]
4487-
> | | |
4488-
> | --- | --- |
4489-
> | **Actions** | |
4490-
> | Microsoft.Authorization/*/read | Read roles and role assignments |
4491-
> | Microsoft.EventGrid/eventSubscriptions/read | Read an eventSubscription |
4492-
> | Microsoft.EventGrid/topicTypes/eventSubscriptions/read | List global event subscriptions by topic type |
4493-
> | Microsoft.EventGrid/locations/eventSubscriptions/read | List regional event subscriptions |
4494-
> | Microsoft.EventGrid/locations/topicTypes/eventSubscriptions/read | List regional event subscriptions by topictype |
4495-
> | Microsoft.Resources/subscriptions/resourceGroups/read | Gets or lists resource groups. |
4496-
> | **NotActions** | |
4497-
> | *none* | |
4498-
> | **DataActions** | |
4499-
> | *none* | |
4500-
> | **NotDataActions** | |
4501-
> | *none* | |
4502-
4503-
```json
4504-
{
4505-
"assignableScopes": [
4506-
"/"
4507-
],
4508-
"description": "Lets you read EventGrid event subscriptions.",
4509-
"id": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/2414bbcf-6497-4faf-8c65-045460748405",
4510-
"name": "2414bbcf-6497-4faf-8c65-045460748405",
4511-
"permissions": [
4512-
{
4513-
"actions": [
4514-
"Microsoft.Authorization/*/read",
4515-
"Microsoft.EventGrid/eventSubscriptions/read",
4516-
"Microsoft.EventGrid/topicTypes/eventSubscriptions/read",
4517-
"Microsoft.EventGrid/locations/eventSubscriptions/read",
4518-
"Microsoft.EventGrid/locations/topicTypes/eventSubscriptions/read",
4519-
"Microsoft.Resources/subscriptions/resourceGroups/read"
4520-
],
4521-
"notActions": [],
4522-
"dataActions": [],
4523-
"notDataActions": []
4524-
}
4525-
],
4526-
"roleName": "EventGrid EventSubscription Reader",
4527-
"roleType": "BuiltInRole",
4528-
"type": "Microsoft.Authorization/roleDefinitions"
4529-
}
4530-
```
4531-
45324422
## Mixed reality
45334423

45344424

@@ -5123,6 +5013,112 @@ Lets you manage Azure Stack registrations.
51235013
}
51245014
```
51255015

5016+
### EventGrid EventSubscription Contributor
5017+
5018+
Lets you manage EventGrid event subscription operations.
5019+
5020+
> [!div class="mx-tableFixed"]
5021+
> | | |
5022+
> | --- | --- |
5023+
> | **Actions** | |
5024+
> | Microsoft.Authorization/*/read | Read roles and role assignments |
5025+
> | Microsoft.EventGrid/eventSubscriptions/* | |
5026+
> | Microsoft.EventGrid/topicTypes/eventSubscriptions/read | List global event subscriptions by topic type |
5027+
> | Microsoft.EventGrid/locations/eventSubscriptions/read | List regional event subscriptions |
5028+
> | Microsoft.EventGrid/locations/topicTypes/eventSubscriptions/read | List regional event subscriptions by topictype |
5029+
> | Microsoft.Insights/alertRules/* | Create and manage Insights alert rules |
5030+
> | Microsoft.Resources/deployments/* | Create and manage resource group deployments |
5031+
> | Microsoft.Resources/subscriptions/resourceGroups/read | Gets or lists resource groups. |
5032+
> | Microsoft.Support/* | Create and manage support tickets |
5033+
> | **NotActions** | |
5034+
> | *none* | |
5035+
> | **DataActions** | |
5036+
> | *none* | |
5037+
> | **NotDataActions** | |
5038+
> | *none* | |
5039+
5040+
```json
5041+
{
5042+
"assignableScopes": [
5043+
"/"
5044+
],
5045+
"description": "Lets you manage EventGrid event subscription operations.",
5046+
"id": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/428e0ff0-5e57-4d9c-a221-2c70d0e0a443",
5047+
"name": "428e0ff0-5e57-4d9c-a221-2c70d0e0a443",
5048+
"permissions": [
5049+
{
5050+
"actions": [
5051+
"Microsoft.Authorization/*/read",
5052+
"Microsoft.EventGrid/eventSubscriptions/*",
5053+
"Microsoft.EventGrid/topicTypes/eventSubscriptions/read",
5054+
"Microsoft.EventGrid/locations/eventSubscriptions/read",
5055+
"Microsoft.EventGrid/locations/topicTypes/eventSubscriptions/read",
5056+
"Microsoft.Insights/alertRules/*",
5057+
"Microsoft.Resources/deployments/*",
5058+
"Microsoft.Resources/subscriptions/resourceGroups/read",
5059+
"Microsoft.Support/*"
5060+
],
5061+
"notActions": [],
5062+
"dataActions": [],
5063+
"notDataActions": []
5064+
}
5065+
],
5066+
"roleName": "EventGrid EventSubscription Contributor",
5067+
"roleType": "BuiltInRole",
5068+
"type": "Microsoft.Authorization/roleDefinitions"
5069+
}
5070+
```
5071+
5072+
### EventGrid EventSubscription Reader
5073+
5074+
Lets you read EventGrid event subscriptions.
5075+
5076+
> [!div class="mx-tableFixed"]
5077+
> | | |
5078+
> | --- | --- |
5079+
> | **Actions** | |
5080+
> | Microsoft.Authorization/*/read | Read roles and role assignments |
5081+
> | Microsoft.EventGrid/eventSubscriptions/read | Read an eventSubscription |
5082+
> | Microsoft.EventGrid/topicTypes/eventSubscriptions/read | List global event subscriptions by topic type |
5083+
> | Microsoft.EventGrid/locations/eventSubscriptions/read | List regional event subscriptions |
5084+
> | Microsoft.EventGrid/locations/topicTypes/eventSubscriptions/read | List regional event subscriptions by topictype |
5085+
> | Microsoft.Resources/subscriptions/resourceGroups/read | Gets or lists resource groups. |
5086+
> | **NotActions** | |
5087+
> | *none* | |
5088+
> | **DataActions** | |
5089+
> | *none* | |
5090+
> | **NotDataActions** | |
5091+
> | *none* | |
5092+
5093+
```json
5094+
{
5095+
"assignableScopes": [
5096+
"/"
5097+
],
5098+
"description": "Lets you read EventGrid event subscriptions.",
5099+
"id": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/2414bbcf-6497-4faf-8c65-045460748405",
5100+
"name": "2414bbcf-6497-4faf-8c65-045460748405",
5101+
"permissions": [
5102+
{
5103+
"actions": [
5104+
"Microsoft.Authorization/*/read",
5105+
"Microsoft.EventGrid/eventSubscriptions/read",
5106+
"Microsoft.EventGrid/topicTypes/eventSubscriptions/read",
5107+
"Microsoft.EventGrid/locations/eventSubscriptions/read",
5108+
"Microsoft.EventGrid/locations/topicTypes/eventSubscriptions/read",
5109+
"Microsoft.Resources/subscriptions/resourceGroups/read"
5110+
],
5111+
"notActions": [],
5112+
"dataActions": [],
5113+
"notDataActions": []
5114+
}
5115+
],
5116+
"roleName": "EventGrid EventSubscription Reader",
5117+
"roleType": "BuiltInRole",
5118+
"type": "Microsoft.Authorization/roleDefinitions"
5119+
}
5120+
```
5121+
51265122
### Intelligent Systems Account Contributor
51275123

51285124
Lets you manage Intelligent Systems accounts, but not access to them.

0 commit comments

Comments
 (0)