docs/cloud-access/azure/OpenOps Azure Benchmark Reader.role-definition.json at 840b43bdea0e6e66b0c8a956bf17521e76b782a9 · openops-cloud/docs · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
{
  "Name": "OpenOps Azure Benchmark Reader",
  "IsCustom": true,
  "Description": "Read-only benchmark, cost, and Azure Advisor recommendation role for OpenOps Azure Benchmark.",
  "Actions": [
    "Microsoft.Advisor/metadata/read",
    "Microsoft.Advisor/recommendations/read",
    "Microsoft.Billing/billingPeriods/read",
    "Microsoft.Billing/billingProperty/read",
    "Microsoft.Compute/disks/read",
    "Microsoft.Compute/images/read",
    "Microsoft.Compute/snapshots/read",
    "Microsoft.Compute/virtualMachines/read",
    "Microsoft.Consumption/*/read",
    "Microsoft.CostManagement/*/read",
    "Microsoft.CostManagement/query/action",
    "Microsoft.Insights/metrics/read",
    "Microsoft.Network/networkInterfaces/read",
    "Microsoft.Network/publicIPAddresses/read",
    "Microsoft.Resources/subscriptions/read",
    "Microsoft.Resources/subscriptions/resourceGroups/read",
    "Microsoft.Sql/servers/databases/read",
    "Microsoft.Sql/servers/elasticPools/read",
    "Microsoft.Sql/servers/read",
    "Microsoft.Web/hostingEnvironments/read",
    "Microsoft.Web/serverfarms/read",
    "Microsoft.Web/sites/read"
  ],
  "NotActions": [],
  "DataActions": [],
  "NotDataActions": [],
  "AssignableScopes": [
    "/subscriptions/<subscription-id>"
  ]
}