Funções internas do Azure para IA + aprendizado de máquina
Este artigo lista as funções internas do Azure na categoria AI + machine learning.
Colaborador Parceiro de Sensor da Plataforma AgFood
Fornece acesso de contribuição para gerenciar entidades relacionadas a sensores no AgFood Platform Service
Ações | Descrição |
---|---|
none | |
NotActions | |
none | |
DataActions | |
Microsoft.AgFoodPlatform/farmBeats/sensorPartnerScope/* | |
NotDataActions | |
Microsoft.AgFoodPlatform/farmBeats/sensorPartnerScope/sensors/delete | Exclui um recurso de sensores AgFoodPlatform existente restrito ao escopo do parceiro de sensor do chamador. |
{
"assignableScopes": [
"/"
],
"description": "Provides contribute access to manage sensor related entities in AgFood Platform Service",
"id": "/providers/Microsoft.Authorization/roleDefinitions/6b77f0a0-0d89-41cc-acd1-579c22c17a67",
"name": "6b77f0a0-0d89-41cc-acd1-579c22c17a67",
"permissions": [
{
"actions": [],
"notActions": [],
"dataActions": [
"Microsoft.AgFoodPlatform/farmBeats/sensorPartnerScope/*"
],
"notDataActions": [
"Microsoft.AgFoodPlatform/farmBeats/sensorPartnerScope/sensors/delete"
]
}
],
"roleName": "AgFood Platform Sensor Partner Contributor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Administrador do serviço da Plataforma AgFood
Fornece acesso de administrador ao serviço da plataforma AgFood
Ações | Descrição |
---|---|
none | |
NotActions | |
none | |
DataActions | |
Microsoft.AgFoodPlatform/* | Crie, atualize, leia e exclua quaisquer recursos da Plataforma AgFood. |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Provides admin access to AgFood Platform Service",
"id": "/providers/Microsoft.Authorization/roleDefinitions/f8da80de-1ff9-4747-ad80-a19b7f6079e3",
"name": "f8da80de-1ff9-4747-ad80-a19b7f6079e3",
"permissions": [
{
"actions": [],
"notActions": [],
"dataActions": [
"Microsoft.AgFoodPlatform/*"
],
"notDataActions": []
}
],
"roleName": "AgFood Platform Service Admin",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Colaborador do serviço da plataforma AgFood
Fornece acesso de contribuição ao serviço da plataforma AgFood
Ações | Descrição |
---|---|
none | |
NotActions | |
none | |
DataActions | |
Microsoft.AgFoodPlatform/*/ação | |
Microsoft.AgFoodPlatform/*/ler | Leia todos os recursos da Plataforma AgFood. |
Microsoft.AgFoodPlatform/*/write | Crie e atualize quaisquer recursos da Plataforma AgFood. |
NotDataActions | |
Microsoft.AgFoodPlatform/farmBeats/farmers/write | Cria ou atualiza agricultores da AgFoodPlatform. |
Microsoft.AgFoodPlatform/farmBeats/deletionJobs/*/write | |
Microsoft.AgFoodPlatform/farmBeats/parties/write | Cria ou atualiza partes da AgFoodPlatform. |
Microsoft.AgFoodPlatform/farmBeats/datasets/write | Cria ou atualiza conjuntos de dados da AgFoodPlatform. |
Microsoft.AgFoodPlatform/farmBeats/datasetRecords/write | Cria ou atualiza os registros do conjunto de dados do AgFoodPlatform. |
Microsoft.AgFoodPlatform/farmBeats/datasets/access/*/action |
{
"assignableScopes": [
"/"
],
"description": "Provides contribute access to AgFood Platform Service",
"id": "/providers/Microsoft.Authorization/roleDefinitions/8508508a-4469-4e45-963b-2518ee0bb728",
"name": "8508508a-4469-4e45-963b-2518ee0bb728",
"permissions": [
{
"actions": [],
"notActions": [],
"dataActions": [
"Microsoft.AgFoodPlatform/*/action",
"Microsoft.AgFoodPlatform/*/read",
"Microsoft.AgFoodPlatform/*/write"
],
"notDataActions": [
"Microsoft.AgFoodPlatform/farmBeats/farmers/write",
"Microsoft.AgFoodPlatform/farmBeats/deletionJobs/*/write",
"Microsoft.AgFoodPlatform/farmBeats/parties/write",
"Microsoft.AgFoodPlatform/farmBeats/datasets/write",
"Microsoft.AgFoodPlatform/farmBeats/datasetRecords/write",
"Microsoft.AgFoodPlatform/farmBeats/datasets/access/*/action"
]
}
],
"roleName": "AgFood Platform Service Contributor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
AgFood Platform Service Reader
Fornece acesso de leitura ao serviço da plataforma AgFood
Ações | Descrição |
---|---|
none | |
NotActions | |
none | |
DataActions | |
Microsoft.AgFoodPlatform/*/list/action | |
Microsoft.AgFoodPlatform/*/ler | Leia todos os recursos da Plataforma AgFood. |
Microsoft.AgFoodPlatform/*/search/action | |
Microsoft.AgFoodPlatform/*/download/action | |
Microsoft.AgFoodPlatform/*/overlap/action | |
Microsoft.AgFoodPlatform/*/checkConsent/action | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Provides read access to AgFood Platform Service",
"id": "/providers/Microsoft.Authorization/roleDefinitions/7ec7ccdc-f61e-41fe-9aaf-980df0a44eba",
"name": "7ec7ccdc-f61e-41fe-9aaf-980df0a44eba",
"permissions": [
{
"actions": [],
"notActions": [],
"dataActions": [
"Microsoft.AgFoodPlatform/*/list/action",
"Microsoft.AgFoodPlatform/*/read",
"Microsoft.AgFoodPlatform/*/search/action",
"Microsoft.AgFoodPlatform/*/download/action",
"Microsoft.AgFoodPlatform/*/overlap/action",
"Microsoft.AgFoodPlatform/*/checkConsent/action"
],
"notDataActions": []
}
],
"roleName": "AgFood Platform Service Reader",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Desenvolvedor de IA do Azure
Pode executar todas as ações em um recurso de IA do Azure, além de gerenciar o próprio recurso.
Ações | Descrição |
---|---|
Microsoft.MachineLearningServices/workspaces/*/read | |
Microsoft.MachineLearningServices/workspaces/*/action | |
Microsoft.MachineLearningServices/workspaces/*/delete | |
Microsoft.MachineLearningServices/workspaces/*/write | |
Microsoft.MachineLearningServices/locations/*/read | |
Microsoft.Authorization/*/read | Ler funções e atribuições de função |
Microsoft.Resources/deployments/* | Criar e gerenciar uma implantação |
NotActions | |
Microsoft.MachineLearningServices/workspaces/delete | Exclui os Workspaces dos Serviços de Machine Learning |
Microsoft.MachineLearningServices/workspaces/write | Cria ou atualiza Workspaces dos Serviços de Machine Learning |
Microsoft.MachineLearningServices/workspaces/listKeys/action | Lista segredos para um Workspace dos Serviços de Machine Learning |
Microsoft.MachineLearningServices/workspaces/hubs/write | Cria ou atualiza um workspace do Hub de Serviços de Machine Learning |
Microsoft.MachineLearningServices/workspaces/hubs/delete | Exclui o(s) workspace(s) do Hub de Serviços de Machine Learning |
Microsoft.MachineLearningServices/workspaces/featurestores/write | Cria ou atualiza os FeatureStores dos Serviços de Machine Learning |
Microsoft.MachineLearningServices/workspaces/featurestores/delete | Exclui os FeatureStores dos Serviços de Machine Learning |
DataActions | |
Microsoft.CognitiveServices/accounts/OpenAI/* | |
Microsoft.CognitiveServices/accounts/SpeechServices/* | |
Microsoft.CognitiveServices/accounts/ContentSafety/* | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Can perform all actions within an Azure AI resource besides managing the resource itself.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/64702f94-c441-49e6-a78b-ef80e0188fee",
"name": "64702f94-c441-49e6-a78b-ef80e0188fee",
"permissions": [
{
"actions": [
"Microsoft.MachineLearningServices/workspaces/*/read",
"Microsoft.MachineLearningServices/workspaces/*/action",
"Microsoft.MachineLearningServices/workspaces/*/delete",
"Microsoft.MachineLearningServices/workspaces/*/write",
"Microsoft.MachineLearningServices/locations/*/read",
"Microsoft.Authorization/*/read",
"Microsoft.Resources/deployments/*"
],
"notActions": [
"Microsoft.MachineLearningServices/workspaces/delete",
"Microsoft.MachineLearningServices/workspaces/write",
"Microsoft.MachineLearningServices/workspaces/listKeys/action",
"Microsoft.MachineLearningServices/workspaces/hubs/write",
"Microsoft.MachineLearningServices/workspaces/hubs/delete",
"Microsoft.MachineLearningServices/workspaces/featurestores/write",
"Microsoft.MachineLearningServices/workspaces/featurestores/delete"
],
"dataActions": [
"Microsoft.CognitiveServices/accounts/OpenAI/*",
"Microsoft.CognitiveServices/accounts/SpeechServices/*",
"Microsoft.CognitiveServices/accounts/ContentSafety/*"
],
"notDataActions": []
}
],
"roleName": "Azure AI Developer",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Aprovador de Conexão de Rede Corporativa do Azure AI
Pode aprovar conexões de ponto de extremidade privado com recursos de dependência comuns da IA do Azure
Ações | Descrição |
---|---|
Microsoft.ContainerRegistry/registries/privateEndpointConnectionsApproval/action | Aprova automaticamente uma conexão de ponto de extremidade privado |
Microsoft.ContainerRegistry/registries/privateEndpointConnections/read | Obtém as propriedades da conexão de ponto de extremidade privado ou lista todas as conexões de ponto de extremidade privado para o registro de contêiner especificado |
Microsoft.ContainerRegistry/registries/privateEndpointConnections/write | Aprovar/rejeitar a conexão de ponto de extremidade privado |
Microsoft.Cache/redis/read | Exibir as configurações do Cache Redis e a configuração no portal de gerenciamento |
Microsoft.Cache/redis/privateEndpointConnections/read | Ler uma conexão de ponto de extremidade privado |
Microsoft.Cache/redis/privateEndpointConnections/write | Gravar uma conexão de ponto de extremidade privado |
Microsoft.Cache/redis/privateLinkResources/read | Ler 'groupId' do sub-recurso do Redis ao qual um link privado pode ser conectado |
Microsoft.Cache/redis/privateEndpointConnectionsApproval/action | Aprovar conexões de ponto de extremidade privado |
Microsoft.Cache/redisEnterprise/read | Ver as definições e as configurações do cache do Redis Enterprise no portal de gerenciamento |
Microsoft.Cache/redisEnterprise/privateEndpointConnections/read | Ler uma conexão de ponto de extremidade privado |
Microsoft.Cache/redisEnterprise/privateEndpointConnections/write | Gravar uma conexão de ponto de extremidade privado |
Microsoft.Cache/redisEnterprise/privateLinkResources/read | Ler 'groupId' do sub-recurso do Redis ao qual um link privado pode ser conectado |
Microsoft.Cache/redisEnterprise/privateEndpointConnectionsApproval/action | Aprovar conexões de ponto de extremidade privado |
Microsoft.CognitiveServices/accounts/read | Ler as contas de API. |
Microsoft.CognitiveServices/accounts/privateEndpointConnections/read | Lê conexões do ponto de extremidade privado. |
Microsoft.CognitiveServices/accounts/privateEndpointConnections/write | Grava uma conexão de ponto de extremidade privado. |
Microsoft.CognitiveServices/accounts/privateLinkResources/read | Lê recursos de link privado para uma conta. |
Microsoft.DocumentDB/databaseAccounts/privateEndpointConnectionsApproval/action | Gerenciar uma conexão de ponto de extremidade privado da conta do banco de dados |
Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections/read | Ler uma conexão de ponto de extremidade privado ou listar todas as conexões de ponto de extremidade privado de uma conta de banco de dados |
Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections/write | Criar ou atualizar uma conexão de ponto de extremidade privado de uma conta de banco de dados |
Microsoft.DocumentDB/databaseAccounts/privateLinkResources/read | Ler um recurso de link privado ou listar todos os recursos de link privado de uma conta de banco de dados |
Microsoft.DocumentDB/databaseAccounts/read | Ler uma conta de banco de dados. |
Microsoft.KeyVault/vaults/privateEndpointConnectionsApproval/action | Aprovar ou rejeitar uma conexão com um recurso de ponto de extremidade privado do provedor Microsoft.Network |
Microsoft.KeyVault/vaults/privateEndpointConnections/read | Exibe o estado de uma conexão com um recurso de ponto de extremidade privado do provedor Microsoft.Network |
Microsoft.KeyVault/vaults/privateEndpointConnections/write | Altera o estado de uma conexão com um recurso de ponto de extremidade privado do provedor Microsoft.Network |
Microsoft.KeyVault/vaults/privateLinkResources/read | Obtém os recursos de link privado disponíveis para a instância especificada do Key Vault |
Microsoft.KeyVault/vaults/read | Exibir as propriedades de um cofre de chaves |
Microsoft.MachineLearningServices/workspaces/privateEndpointConnectionsApproval/action | Aprovar ou rejeitar uma conexão com um recurso de ponto de extremidade privado do provedor Microsoft.Network |
Microsoft.MachineLearningServices/workspaces/privateEndpointConnections/read | Exibe o estado de uma conexão com um recurso de ponto de extremidade privado do provedor Microsoft.Network |
Microsoft.MachineLearningServices/workspaces/privateEndpointConnections/write | Altera o estado de uma conexão com um recurso de ponto de extremidade privado do provedor Microsoft.Network |
Microsoft.MachineLearningServices/workspaces/privateLinkResources/read | Obtém os recursos de link privado disponíveis para a instância especificada dos workspaces dos Serviços de Machine Learning |
Microsoft.MachineLearningServices/workspaces/read | Obtém os Workspaces dos Serviços de Machine Learning |
Microsoft.Storage/storageAccounts/privateEndpointConnections/read | Obter conexão de ponto de extremidade privado |
Microsoft.Storage/storageAccounts/privateEndpointConnections/write | Colocar conexão de ponto de extremidade privado |
Microsoft.Storage/storageAccounts/privateLinkResources/read | Obter StorageAccount groupids |
Microsoft.Storage/storageAccounts/read | Retornar a lista de contas de armazenamento ou obter as propriedades da conta de armazenamento especificada. |
Microsoft.Sql/servers/privateEndpointConnectionsApproval/action | Determina se o usuário tem permissão para aprovar uma conexão de ponto de extremidade privado |
Microsoft.Sql/servers/privateEndpointConnections/read | Retorna a lista de conexões de ponto de extremidade privado ou obtém as propriedades para a conexão de ponto de extremidade privado especificado. |
Microsoft.Sql/servers/privateEndpointConnections/write | Aprova ou rejeita uma conexão de ponto de extremidade privado existente |
Microsoft.Sql/servers/privateLinkResources/read | Obter os recursos de link privado para o SQL Server correspondente |
Microsoft.Sql/servers/read | Retornar a lista de servidores ou obter as propriedades para o servidor especificado. |
NotActions | |
none | |
DataActions | |
none | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Can approve private endpoint connections to Azure AI common dependency resources",
"id": "/providers/Microsoft.Authorization/roleDefinitions/b556d68e-0be0-4f35-a333-ad7ee1ce17ea",
"name": "b556d68e-0be0-4f35-a333-ad7ee1ce17ea",
"permissions": [
{
"actions": [
"Microsoft.ContainerRegistry/registries/privateEndpointConnectionsApproval/action",
"Microsoft.ContainerRegistry/registries/privateEndpointConnections/read",
"Microsoft.ContainerRegistry/registries/privateEndpointConnections/write",
"Microsoft.Cache/redis/read",
"Microsoft.Cache/redis/privateEndpointConnections/read",
"Microsoft.Cache/redis/privateEndpointConnections/write",
"Microsoft.Cache/redis/privateLinkResources/read",
"Microsoft.Cache/redis/privateEndpointConnectionsApproval/action",
"Microsoft.Cache/redisEnterprise/read",
"Microsoft.Cache/redisEnterprise/privateEndpointConnections/read",
"Microsoft.Cache/redisEnterprise/privateEndpointConnections/write",
"Microsoft.Cache/redisEnterprise/privateLinkResources/read",
"Microsoft.Cache/redisEnterprise/privateEndpointConnectionsApproval/action",
"Microsoft.CognitiveServices/accounts/read",
"Microsoft.CognitiveServices/accounts/privateEndpointConnections/read",
"Microsoft.CognitiveServices/accounts/privateEndpointConnections/write",
"Microsoft.CognitiveServices/accounts/privateLinkResources/read",
"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnectionsApproval/action",
"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections/read",
"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections/write",
"Microsoft.DocumentDB/databaseAccounts/privateLinkResources/read",
"Microsoft.DocumentDB/databaseAccounts/read",
"Microsoft.KeyVault/vaults/privateEndpointConnectionsApproval/action",
"Microsoft.KeyVault/vaults/privateEndpointConnections/read",
"Microsoft.KeyVault/vaults/privateEndpointConnections/write",
"Microsoft.KeyVault/vaults/privateLinkResources/read",
"Microsoft.KeyVault/vaults/read",
"Microsoft.MachineLearningServices/workspaces/privateEndpointConnectionsApproval/action",
"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections/read",
"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections/write",
"Microsoft.MachineLearningServices/workspaces/privateLinkResources/read",
"Microsoft.MachineLearningServices/workspaces/read",
"Microsoft.Storage/storageAccounts/privateEndpointConnections/read",
"Microsoft.Storage/storageAccounts/privateEndpointConnections/write",
"Microsoft.Storage/storageAccounts/privateLinkResources/read",
"Microsoft.Storage/storageAccounts/read",
"Microsoft.Sql/servers/privateEndpointConnectionsApproval/action",
"Microsoft.Sql/servers/privateEndpointConnections/read",
"Microsoft.Sql/servers/privateEndpointConnections/write",
"Microsoft.Sql/servers/privateLinkResources/read",
"Microsoft.Sql/servers/read"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "Azure AI Enterprise Network Connection Approver",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Operador de implantação de inferência de IA do Azure
Pode executar todas as ações necessárias para criar uma implantação de recursos em um grupo de recursos.
Ações | Descrição |
---|---|
Microsoft.Authorization/*/read | Ler funções e atribuições de função |
Microsoft.Resources/deployments/* | Criar e gerenciar uma implantação |
Microsoft.Insights/AutoscaleSettings/write | Criar ou atualizar uma configuração de dimensionamento automático |
NotActions | |
none | |
DataActions | |
none | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Can perform all actions required to create a resource deployment within a resource group.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/3afb7f49-54cb-416e-8c09-6dc049efa503",
"name": "3afb7f49-54cb-416e-8c09-6dc049efa503",
"permissions": [
{
"actions": [
"Microsoft.Authorization/*/read",
"Microsoft.Resources/deployments/*",
"Microsoft.Insights/AutoscaleSettings/write"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "Azure AI Inference Deployment Operator",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Operador de Serviços de Computação do AzureML
Pode acessar e executar operações CRUD em recursos de computação gerenciados dos Serviços de Machine Learning (incluindo VMs de Notebook).
Ações | Descrição |
---|---|
Microsoft.MachineLearningServices/workspaces/computes/* | |
Microsoft.MachineLearningServices/workspaces/notebooks/vm/* | |
NotActions | |
none | |
DataActions | |
none | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Can access and perform CRUD operations on Machine Learning Services managed compute resources (including Notebook VMs).",
"id": "/providers/Microsoft.Authorization/roleDefinitions/e503ece1-11d0-4e8e-8e2c-7a6c3bf38815",
"name": "e503ece1-11d0-4e8e-8e2c-7a6c3bf38815",
"permissions": [
{
"actions": [
"Microsoft.MachineLearningServices/workspaces/computes/*",
"Microsoft.MachineLearningServices/workspaces/notebooks/vm/*"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "AzureML Compute Operator",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Cientista de Dados do AzureML
Pode executar todas as ações em um espaço de trabalho do Azure Machine Learning, exceto criar ou excluir recursos de computação e modificar o próprio espaço de trabalho.
Ações | Descrição |
---|---|
Microsoft.MachineLearningServices/workspaces/*/read | |
Microsoft.MachineLearningServices/workspaces/*/action | |
Microsoft.MachineLearningServices/workspaces/*/delete | |
Microsoft.MachineLearningServices/workspaces/*/write | |
NotActions | |
Microsoft.MachineLearningServices/workspaces/delete | Exclui os Workspaces dos Serviços de Machine Learning |
Microsoft.MachineLearningServices/workspaces/write | Cria ou atualiza Workspaces dos Serviços de Machine Learning |
Microsoft.MachineLearningServices/workspaces/computes/*/write | |
Microsoft.MachineLearningServices/workspaces/computes/*/delete | |
Microsoft.MachineLearningServices/workspaces/computes/listKeys/action | Lista segredos para recursos de computação no Workspace dos Serviços de Machine Learning |
Microsoft.MachineLearningServices/workspaces/listKeys/action | Lista segredos para um Workspace dos Serviços de Machine Learning |
Microsoft.MachineLearningServices/workspaces/hubs/write | Cria ou atualiza um workspace do Hub de Serviços de Machine Learning |
Microsoft.MachineLearningServices/workspaces/hubs/delete | Exclui o(s) workspace(s) do Hub de Serviços de Machine Learning |
Microsoft.MachineLearningServices/workspaces/featurestores/write | Cria ou atualiza os FeatureStores dos Serviços de Machine Learning |
Microsoft.MachineLearningServices/workspaces/featurestores/delete | Exclui os FeatureStores dos Serviços de Machine Learning |
DataActions | |
none | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Can perform all actions within an Azure Machine Learning workspace, except for creating or deleting compute resources and modifying the workspace itself.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/f6c7c914-8db3-469d-8ca1-694a8f32e121",
"name": "f6c7c914-8db3-469d-8ca1-694a8f32e121",
"permissions": [
{
"actions": [
"Microsoft.MachineLearningServices/workspaces/*/read",
"Microsoft.MachineLearningServices/workspaces/*/action",
"Microsoft.MachineLearningServices/workspaces/*/delete",
"Microsoft.MachineLearningServices/workspaces/*/write"
],
"notActions": [
"Microsoft.MachineLearningServices/workspaces/delete",
"Microsoft.MachineLearningServices/workspaces/write",
"Microsoft.MachineLearningServices/workspaces/computes/*/write",
"Microsoft.MachineLearningServices/workspaces/computes/*/delete",
"Microsoft.MachineLearningServices/workspaces/computes/listKeys/action",
"Microsoft.MachineLearningServices/workspaces/listKeys/action",
"Microsoft.MachineLearningServices/workspaces/hubs/write",
"Microsoft.MachineLearningServices/workspaces/hubs/delete",
"Microsoft.MachineLearningServices/workspaces/featurestores/write",
"Microsoft.MachineLearningServices/workspaces/featurestores/delete"
],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "AzureML Data Scientist",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Gravador de Métricas do AzureML (versão prévia)
Permite gravar métricas no workspace do AzureML
Ações | Descrição |
---|---|
Microsoft.MachineLearningServices/workspaces/metrics/*/write | |
NotActions | |
none | |
DataActions | |
none | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Lets you write metrics to AzureML workspace",
"id": "/providers/Microsoft.Authorization/roleDefinitions/635dd51f-9968-44d3-b7fb-6d9a6bd613ae",
"name": "635dd51f-9968-44d3-b7fb-6d9a6bd613ae",
"permissions": [
{
"actions": [
"Microsoft.MachineLearningServices/workspaces/metrics/*/write"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "AzureML Metrics Writer (preview)",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Usuário do registro do AzureML
Pode executar todas as ações nos ativos do Registro dos Serviços de Machine Learning, bem como obter recursos do Registro.
Ações | Descrição |
---|---|
Microsoft.MachineLearningServices/registries/read | Obtém os registros dos Serviços de Machine Learning |
Microsoft.MachineLearningServices/registries/assets/* | |
NotActions | |
none | |
DataActions | |
none | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Can perform all actions on Machine Learning Services Registry assets as well as get Registry resources.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/1823dd4f-9b8c-4ab6-ab4e-7397a3684615",
"name": "1823dd4f-9b8c-4ab6-ab4e-7397a3684615",
"permissions": [
{
"actions": [
"Microsoft.MachineLearningServices/registries/read",
"Microsoft.MachineLearningServices/registries/assets/*"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "AzureML Registry User",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Colaborador dos Serviços Cognitivos
Permite criar, ler, atualizar, excluir e gerenciar chaves dos Serviços Cognitivos.
Ações | Descrição |
---|---|
Microsoft.Authorization/*/read | Ler funções e atribuições de função |
Microsoft.CognitiveServices/* | |
Microsoft.Features/features/read | Obter os recursos de uma assinatura. |
Microsoft.Features/providers/features/read | Obter o recurso de uma assinatura em determinado provedor de recursos. |
Microsoft.Features/providers/features/register/action | Registrar o recurso de uma assinatura em determinado provedor de recursos. |
Microsoft.Insights/alertRules/* | Criar e gerenciar um alerta de métrica clássico |
Microsoft.Insights/diagnosticSettings/* | Criar, atualizar ou ler a configuração de diagnóstico do Analysis Server |
Microsoft.Insights/logDefinitions/read | Ler definições de log |
Microsoft.Insights/metricdefinitions/read | Ler definições de métrica |
Microsoft.Insights/metrics/read | Ler métrica |
Microsoft.ResourceHealth/availabilityStatuses/read | Obter os status de disponibilidade para todos os recursos no escopo especificado |
Microsoft.Resources/deployments/* | Criar e gerenciar uma implantação |
Microsoft.Resources/deployments/operations/read | Obter ou lista operações de implantação. |
Microsoft.Resources/subscriptions/operationresults/read | Obter os resultados da operação da assinatura. |
Microsoft.Resources/subscriptions/read | Obter a lista de assinaturas. |
Microsoft.Resources/subscriptions/resourcegroups/deployments/* | |
Microsoft.Resources/subscriptions/resourceGroups/read | Obter ou listar de grupos de recursos. |
Microsoft.Support/* | Criar e atualizar um tíquete de suporte |
NotActions | |
none | |
DataActions | |
none | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Lets you create, read, update, delete and manage keys of Cognitive Services.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68",
"name": "25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68",
"permissions": [
{
"actions": [
"Microsoft.Authorization/*/read",
"Microsoft.CognitiveServices/*",
"Microsoft.Features/features/read",
"Microsoft.Features/providers/features/read",
"Microsoft.Features/providers/features/register/action",
"Microsoft.Insights/alertRules/*",
"Microsoft.Insights/diagnosticSettings/*",
"Microsoft.Insights/logDefinitions/read",
"Microsoft.Insights/metricdefinitions/read",
"Microsoft.Insights/metrics/read",
"Microsoft.ResourceHealth/availabilityStatuses/read",
"Microsoft.Resources/deployments/*",
"Microsoft.Resources/deployments/operations/read",
"Microsoft.Resources/subscriptions/operationresults/read",
"Microsoft.Resources/subscriptions/read",
"Microsoft.Resources/subscriptions/resourcegroups/deployments/*",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.Support/*"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "Cognitive Services Contributor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Colaborador da Visão Personalizada dos Serviços Cognitivos
Acesso completo ao projeto, incluindo a capacidade de ver, criar, editar ou excluir projetos.
Ações | Descrição |
---|---|
Microsoft.CognitiveServices/*/read | |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/CustomVision/* | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Full access to the project, including the ability to view, create, edit, or delete projects.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/c1ff6cc2-c111-46fe-8896-e0ef812ad9f3",
"name": "c1ff6cc2-c111-46fe-8896-e0ef812ad9f3",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/*"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services Custom Vision Contributor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Implantação da Visão Personalizada dos Serviços Cognitivos
Publique, cancele a publicação ou exporte modelos. A implantação pode exibir o projeto, mas não pode atualizá-lo.
Ações | Descrição |
---|---|
Microsoft.CognitiveServices/*/read | |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/CustomVision/*/read | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/* | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/publish/* | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/export/* | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/quicktest/* | |
Microsoft.CognitiveServices/accounts/CustomVision/classify/* | |
Microsoft.CognitiveServices/accounts/CustomVision/detect/* | |
NotDataActions | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read | Exporta um projeto. |
{
"assignableScopes": [
"/"
],
"description": "Publish, unpublish or export models. Deployment can view the project but can't update.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/5c4089e1-6d96-4d2f-b296-c1bc7137275f",
"name": "5c4089e1-6d96-4d2f-b296-c1bc7137275f",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/*/read",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/*",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/publish/*",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/export/*",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/quicktest/*",
"Microsoft.CognitiveServices/accounts/CustomVision/classify/*",
"Microsoft.CognitiveServices/accounts/CustomVision/detect/*"
],
"notDataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read"
]
}
],
"roleName": "Cognitive Services Custom Vision Deployment",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Rotulador da Visão Personalizada dos Serviços Cognitivos
Exiba, edite imagens de treinamento e crie, adicione, remova ou exclua as tags de imagem. Os rotuladores podem exibir o projeto, mas não podem atualizar nada além de marcas e imagens de treinamento.
Ações | Descrição |
---|---|
Microsoft.CognitiveServices/*/read | |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/CustomVision/*/read | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action | Obter imagens enviadas ao ponto de extremidade de previsão. |
Microsoft.CognitiveServices/accounts/CustomVision/projects/images/* | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/tags/* | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/images/suggested/* | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/tagsandregions/suggestions/action | Essa API receberá marcas e regiões sugeridas para uma matriz/lote de imagens não marcadas, juntamente com confianças para as marcas. Retornará uma matriz vazia se nenhuma marca for encontrada. |
NotDataActions | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read | Exporta um projeto. |
{
"assignableScopes": [
"/"
],
"description": "View, edit training images and create, add, remove, or delete the image tags. Labelers can view the project but can't update anything other than training images and tags.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/88424f51-ebe7-446f-bc41-7fa16989e96c",
"name": "88424f51-ebe7-446f-bc41-7fa16989e96c",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/*/read",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/images/*",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/tags/*",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/images/suggested/*",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/tagsandregions/suggestions/action"
],
"notDataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read"
]
}
],
"roleName": "Cognitive Services Custom Vision Labeler",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Leitor da Visão Personalizada dos Serviços Cognitivos
Ações de somente leitura no projeto. Os leitores não podem criar ou atualizar o projeto.
Ações | Descrição |
---|---|
Microsoft.CognitiveServices/*/read | |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/CustomVision/*/read | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action | Obter imagens enviadas ao ponto de extremidade de previsão. |
NotDataActions | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read | Exporta um projeto. |
{
"assignableScopes": [
"/"
],
"description": "Read-only actions in the project. Readers can't create or update the project.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/93586559-c37d-4a6b-ba08-b9f0940c2d73",
"name": "93586559-c37d-4a6b-ba08-b9f0940c2d73",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/*/read",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action"
],
"notDataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read"
]
}
],
"roleName": "Cognitive Services Custom Vision Reader",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Treinador de Visão Personalizada dos Serviços Cognitivos
Exiba, edite projetos e treine os modelos, incluindo a capacidade de publicar, cancelar a publicação e exportar os modelos. Os treinadores não podem criar ou excluir o projeto.
Ações | Descrição |
---|---|
Microsoft.CognitiveServices/*/read | |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/CustomVision/* | |
NotDataActions | |
Microsoft.CognitiveServices/accounts/CustomVision/projects/action | Crie um projeto. |
Microsoft.CognitiveServices/accounts/CustomVision/projects/delete | Excluir um projeto específico. |
Microsoft.CognitiveServices/accounts/CustomVision/projects/import/action | Importa um projeto. |
Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read | Exporta um projeto. |
{
"assignableScopes": [
"/"
],
"description": "View, edit projects and train the models, including the ability to publish, unpublish, export the models. Trainers can't create or delete the project.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/0a5ae4ab-0d65-4eeb-be61-29fc9b54394b",
"name": "0a5ae4ab-0d65-4eeb-be61-29fc9b54394b",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/*"
],
"notDataActions": [
"Microsoft.CognitiveServices/accounts/CustomVision/projects/action",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/delete",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/import/action",
"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read"
]
}
],
"roleName": "Cognitive Services Custom Vision Trainer",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Leitor de Dados dos Serviços Cognitivos
Permite que você leia os dados dos Serviços Cognitivos.
Ações | Descrição |
---|---|
none | |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/*/read | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Lets you read Cognitive Services data.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/b59867f0-fa02-499b-be73-45a86b5b3e1c",
"name": "b59867f0-fa02-499b-be73-45a86b5b3e1c",
"permissions": [
{
"actions": [],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/*/read"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services Data Reader",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Reconhecedor facial de serviços cognitivos
Permite detectar, verificar, identificar, agrupar e encontrar operações semelhantes na API de Detecção Facial. Essa função não permite operações de criação ou exclusão, o que a torna adequada para pontos de extremidade que só precisam de recursos de inferência, seguindo as práticas recomendadas de "privilégios mínimos".
Ações | Descrição |
---|---|
none | |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/Face/detect/action | Detecte rostos humanos em uma imagem, retorne retângulos de rosto e, opcionalmente, com faceIds, pontos de referência e atributos. |
Microsoft.CognitiveServices/accounts/Face/verify/action | Verificar se dois rostos pertencem à mesma pessoa ou se um rosto pertence a uma pessoa. |
Microsoft.CognitiveServices/accounts/Face/identify/action | Identificação de um para muitos para localizar as correspondências mais próximas do rosto da pessoa da consulta específico em um grupo de pessoas ou grupo de pessoas grande. |
Microsoft.CognitiveServices/accounts/Face/group/action | Dividir os rostos candidatos em grupos com base na semelhança de rosto. |
Microsoft.CognitiveServices/accounts/Face/findsimilars/action | Dada a faceId do rosto da consulta, para pesquisar rostos de aparência similar em uma matriz de faceId, uma lista de rostos ou uma grande lista de rostos. faceId |
Microsoft.CognitiveServices/accounts/Face/detectliveness/multimodal/action | Executa a detecção de atividade em um rosto de destino em uma sequência de imagens infravermelhas, coloridas e/ou de profundidade e retorna a classificação de atividade do rosto de destino como 'rosto real', 'rosto falsificado' ou 'inconclusivo', se não for possível fazer uma classificação com as entradas fornecidas. |
Microsoft.CognitiveServices/accounts/Face/detectliveness/singlemodal/action | Executa a detecção de atividade em um rosto de destino em uma sequência de imagens da mesma modalidade (por exemplo, infravermelhas ou coloridas) e retorna a classificação de atividade do rosto de destino como 'rosto real', 'rosto falsificado' ou 'inconclusivo', se não for possível fazer uma classificação com as entradas fornecidas. |
Microsoft.CognitiveServices/accounts/Face/detectlivenesswithverify/singlemodal/action | Detecta a atividade de um rosto de destino em uma sequência de imagens do mesmo tipo de fluxo (por exemplo, cor) e compara com VerifyImage, para retornar a pontuação de confiança dos cenários de identidade. |
Microsoft.CognitiveServices/accounts/Face/*/sessions/action | |
Microsoft.CognitiveServices/accounts/Face/*/sessions/delete | |
Microsoft.CognitiveServices/accounts/Face/*/sessions/read | |
Microsoft.CognitiveServices/accounts/Face/*/sessions/audit/read | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Lets you perform detect, verify, identify, group, and find similar operations on Face API. This role does not allow create or delete operations, which makes it well suited for endpoints that only need inferencing capabilities, following 'least privilege' best practices.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/9894cab4-e18a-44aa-828b-cb588cd6f2d7",
"name": "9894cab4-e18a-44aa-828b-cb588cd6f2d7",
"permissions": [
{
"actions": [],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/Face/detect/action",
"Microsoft.CognitiveServices/accounts/Face/verify/action",
"Microsoft.CognitiveServices/accounts/Face/identify/action",
"Microsoft.CognitiveServices/accounts/Face/group/action",
"Microsoft.CognitiveServices/accounts/Face/findsimilars/action",
"Microsoft.CognitiveServices/accounts/Face/detectliveness/multimodal/action",
"Microsoft.CognitiveServices/accounts/Face/detectliveness/singlemodal/action",
"Microsoft.CognitiveServices/accounts/Face/detectlivenesswithverify/singlemodal/action",
"Microsoft.CognitiveServices/accounts/Face/*/sessions/action",
"Microsoft.CognitiveServices/accounts/Face/*/sessions/delete",
"Microsoft.CognitiveServices/accounts/Face/*/sessions/read",
"Microsoft.CognitiveServices/accounts/Face/*/sessions/audit/read"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services Face Recognizer",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Usuário de Leitura Avançada dos Serviços Cognitivos
Fornece acesso para criar sessões de Leitura Avançada e chamar APIs
Ações | Descrição |
---|---|
none | |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/ImmersiveReader/getcontentmodelforreader/action | Cria uma sessão de Leitura Avançada |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Provides access to create Immersive Reader sessions and call APIs",
"id": "/providers/Microsoft.Authorization/roleDefinitions/b2de6794-95db-4659-8781-7e080d3f2b9d",
"name": "b2de6794-95db-4659-8781-7e080d3f2b9d",
"permissions": [
{
"actions": [],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/ImmersiveReader/getcontentmodelforreader/action"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services Immersive Reader User",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Proprietário de Linguagem dos Serviços Cognitivos
Tem acesso a todas as funções de leitura, teste, gravação, implantação e exclusão no portal de idiomas
Ações | Descrição |
---|---|
Microsoft.CognitiveServices/*/read | |
Microsoft.CognitiveServices/accounts/listkeys/action | Listar chaves |
Microsoft.Authorization/roleAssignments/read | Obter informações sobre uma atribuição de função. |
Microsoft.Authorization/roleDefinitions/read | Obter informações sobre uma definição de função. |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/LanguageAuthoring/* | |
Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/* | |
Microsoft.CognitiveServices/accounts/Language/* | |
Microsoft.CognitiveServices/accounts/TextAnalytics/* | |
NotDataActions | |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnaMaker/* |
{
"assignableScopes": [
"/"
],
"description": "Has access to all Read, Test, Write, Deploy and Delete functions under Language portal",
"id": "/providers/Microsoft.Authorization/roleDefinitions/f07febfe-79bc-46b1-8b37-790e26e6e498",
"name": "f07febfe-79bc-46b1-8b37-790e26e6e498",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.CognitiveServices/accounts/listkeys/action",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleDefinitions/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/LanguageAuthoring/*",
"Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/*",
"Microsoft.CognitiveServices/accounts/Language/*",
"Microsoft.CognitiveServices/accounts/TextAnalytics/*"
],
"notDataActions": [
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnaMaker/*"
]
}
],
"roleName": "Cognitive Services Language Owner",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Leitor de Linguagem dos Serviços Cognitivos
Tem acesso às funções de leitura e teste no portal de idiomas
Ações | Descrição |
---|---|
Microsoft.CognitiveServices/*/read | |
Microsoft.Authorization/roleAssignments/read | Obter informações sobre uma atribuição de função. |
Microsoft.Authorization/roleDefinitions/read | Obter informações sobre uma definição de função. |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/LanguageAuthoring/*/read | |
Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/*/read | |
Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/projects/export/action | Dispara um trabalho para exportar dados do projeto no formato JSON. |
Microsoft.CognitiveServices/accounts/Language/*/read | |
Microsoft.CognitiveServices/accounts/Language/*/projects/export/action | |
Microsoft.CognitiveServices/accounts/Language/query-text/action | Texto de resposta. |
Microsoft.CognitiveServices/accounts/Language/query-dataverse/action | Consultar Dataverse. |
Microsoft.CognitiveServices/accounts/Language/analyze-text/jobs/action | Enviar uma coleção de documentos de texto para análise. Especificar uma ou mais tarefas exclusivas a serem executadas. |
Microsoft.CognitiveServices/accounts/Language/analyze-text/action | Enviar uma coleção de documentos de texto para análise. Especificar uma única tarefa exclusiva a ser executada imediatamente. |
Microsoft.CognitiveServices/accounts/Language/analyze-text/jobscancel/action | Cancelar um trabalho de análise de texto de execução prolongada. |
Microsoft.CognitiveServices/accounts/Language/analyze-conversations/action | Analisar a conversa de entrada. |
Microsoft.CognitiveServices/accounts/Language/analyze-conversations/jobscancel/action | Cancelar um trabalho de análise de execução prolongada na conversa. |
Microsoft.CognitiveServices/accounts/Language/analyze-conversations/jobs/action | Enviar uma conversa de execução prolongada para análise. Especifique uma ou mais tarefas exclusivas a serem executadas como uma operação de execução prolongada. |
Microsoft.CognitiveServices/accounts/Language/query-knowledgebases/action | Responda à base de conhecimento. |
Microsoft.CognitiveServices/accounts/Language/generate/action | Geração de linguagem. |
Microsoft.CognitiveServices/accounts/TextAnalytics/* | |
NotDataActions | |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnaMaker/* |
{
"assignableScopes": [
"/"
],
"description": "Has access to Read and Test functions under Language portal",
"id": "/providers/Microsoft.Authorization/roleDefinitions/7628b7b8-a8b2-4cdc-b46f-e9b35248918e",
"name": "7628b7b8-a8b2-4cdc-b46f-e9b35248918e",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleDefinitions/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/LanguageAuthoring/*/read",
"Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/*/read",
"Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/projects/export/action",
"Microsoft.CognitiveServices/accounts/Language/*/read",
"Microsoft.CognitiveServices/accounts/Language/*/projects/export/action",
"Microsoft.CognitiveServices/accounts/Language/query-text/action",
"Microsoft.CognitiveServices/accounts/Language/query-dataverse/action",
"Microsoft.CognitiveServices/accounts/Language/analyze-text/jobs/action",
"Microsoft.CognitiveServices/accounts/Language/analyze-text/action",
"Microsoft.CognitiveServices/accounts/Language/analyze-text/jobscancel/action",
"Microsoft.CognitiveServices/accounts/Language/analyze-conversations/action",
"Microsoft.CognitiveServices/accounts/Language/analyze-conversations/jobscancel/action",
"Microsoft.CognitiveServices/accounts/Language/analyze-conversations/jobs/action",
"Microsoft.CognitiveServices/accounts/Language/query-knowledgebases/action",
"Microsoft.CognitiveServices/accounts/Language/generate/action",
"Microsoft.CognitiveServices/accounts/TextAnalytics/*"
],
"notDataActions": [
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnaMaker/*"
]
}
],
"roleName": "Cognitive Services Language Reader",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Gravador de Linguagem dos Serviços Cognitivos
Tem acesso a todas as funções de leitura, teste e gravação no Portal de idiomas
Ações | Descrição |
---|---|
Microsoft.CognitiveServices/*/read | |
Microsoft.Authorization/roleAssignments/read | Obter informações sobre uma atribuição de função. |
Microsoft.Authorization/roleDefinitions/read | Obter informações sobre uma definição de função. |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/LanguageAuthoring/* | |
Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/* | |
Microsoft.CognitiveServices/accounts/Language/* | |
Microsoft.CognitiveServices/accounts/TextAnalytics/* | |
NotDataActions | |
Microsoft.CognitiveServices/accounts/LanguageAuthoring/projects/publish/action | Disparar o trabalho de publicação. |
Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/projects/deployments/write | Disparar trabalho para criar uma nova implantação ou substituir uma implantação existente. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnaMaker/* | |
Microsoft.CognitiveServices/accounts/Language/*/projects/delete | |
Microsoft.CognitiveServices/accounts/Language/*/projects/deployments/write | |
Microsoft.CognitiveServices/accounts/Language/*/projects/deployments/delete | |
Microsoft.CognitiveServices/accounts/Language/*/projects/deployments/swap/action |
{
"assignableScopes": [
"/"
],
"description": " Has access to all Read, Test, and Write functions under Language Portal",
"id": "/providers/Microsoft.Authorization/roleDefinitions/f2310ca1-dc64-4889-bb49-c8e0fa3d47a8",
"name": "f2310ca1-dc64-4889-bb49-c8e0fa3d47a8",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleDefinitions/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/LanguageAuthoring/*",
"Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/*",
"Microsoft.CognitiveServices/accounts/Language/*",
"Microsoft.CognitiveServices/accounts/TextAnalytics/*"
],
"notDataActions": [
"Microsoft.CognitiveServices/accounts/LanguageAuthoring/projects/publish/action",
"Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/projects/deployments/write",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnaMaker/*",
"Microsoft.CognitiveServices/accounts/Language/*/projects/delete",
"Microsoft.CognitiveServices/accounts/Language/*/projects/deployments/write",
"Microsoft.CognitiveServices/accounts/Language/*/projects/deployments/delete",
"Microsoft.CognitiveServices/accounts/Language/*/projects/deployments/swap/action"
]
}
],
"roleName": "Cognitive Services Language Writer",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Proprietário de Serviços Cognitivos LUIS
Tem acesso a todas as funções de Leitura, Teste, Gravação, Implantação e Exclusão no LUIS
Ações | Descrição |
---|---|
Microsoft.CognitiveServices/*/read | |
Microsoft.CognitiveServices/accounts/listkeys/action | Listar chaves |
Microsoft.Authorization/roleAssignments/read | Obter informações sobre uma atribuição de função. |
Microsoft.Authorization/roleDefinitions/read | Obter informações sobre uma definição de função. |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/LUIS/* | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": " Has access to all Read, Test, Write, Deploy and Delete functions under LUIS",
"id": "/providers/Microsoft.Authorization/roleDefinitions/f72c8140-2111-481c-87ff-72b910f6e3f8",
"name": "f72c8140-2111-481c-87ff-72b910f6e3f8",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.CognitiveServices/accounts/listkeys/action",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleDefinitions/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/LUIS/*"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services LUIS Owner",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Leitor LUIS de Serviços Cognitivos
Tem acesso às funções de Leitura e Teste no LUIS.
Ações | Descrição |
---|---|
Microsoft.CognitiveServices/*/read | |
Microsoft.Authorization/roleAssignments/read | Obter informações sobre uma atribuição de função. |
Microsoft.Authorization/roleDefinitions/read | Obter informações sobre uma definição de função. |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/LUIS/*/read | |
Microsoft.CognitiveServices/accounts/LUIS/apps/testdatasets/write | Atualiza os resultados do último teste de um conjunto de dados de teste em lote existente para um determinado aplicativo. |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Has access to Read and Test functions under LUIS.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/18e81cdc-4e98-4e29-a639-e7d10c5a6226",
"name": "18e81cdc-4e98-4e29-a639-e7d10c5a6226",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleDefinitions/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/LUIS/*/read",
"Microsoft.CognitiveServices/accounts/LUIS/apps/testdatasets/write"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services LUIS Reader",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Escritor LUIS de Serviços Cognitivos
Tem acesso a todas as funções de Leitura, Teste e Gravação no LUIS
Ações | Descrição |
---|---|
Microsoft.CognitiveServices/*/read | |
Microsoft.Authorization/roleAssignments/read | Obter informações sobre uma atribuição de função. |
Microsoft.Authorization/roleDefinitions/read | Obter informações sobre uma definição de função. |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/LUIS/* | |
NotDataActions | |
Microsoft.CognitiveServices/accounts/LUIS/apps/delete | Exclui um aplicativo. |
Microsoft.CognitiveServices/accounts/LUIS/apps/move/action | Move o aplicativo para um recurso do Azure de criação de LUIS diferente. |
Microsoft.CognitiveServices/accounts/LUIS/apps/publish/action | Publica uma versão específica do aplicativo. |
Microsoft.CognitiveServices/accounts/LUIS/apps/settings/write | Atualiza as configurações do aplicativo |
Microsoft.CognitiveServices/accounts/LUIS/apps/azureaccounts/action | Atribui uma conta do Azure ao aplicativo. |
Microsoft.CognitiveServices/accounts/LUIS/apps/azureaccounts/delete | Obtém as contas do Azure do LUIS para o usuário usando o respectivo token do Azure Resource Manager. |
{
"assignableScopes": [
"/"
],
"description": "Has access to all Read, Test, and Write functions under LUIS",
"id": "/providers/Microsoft.Authorization/roleDefinitions/6322a993-d5c9-4bed-b113-e49bbea25b27",
"name": "6322a993-d5c9-4bed-b113-e49bbea25b27",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleDefinitions/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/LUIS/*"
],
"notDataActions": [
"Microsoft.CognitiveServices/accounts/LUIS/apps/delete",
"Microsoft.CognitiveServices/accounts/LUIS/apps/move/action",
"Microsoft.CognitiveServices/accounts/LUIS/apps/publish/action",
"Microsoft.CognitiveServices/accounts/LUIS/apps/settings/write",
"Microsoft.CognitiveServices/accounts/LUIS/apps/azureaccounts/action",
"Microsoft.CognitiveServices/accounts/LUIS/apps/azureaccounts/delete"
]
}
],
"roleName": "Cognitive Services LUIS Writer",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Administrador do Assistente de Métricas dos Serviços Cognitivos
Acesso completo ao projeto, incluindo à configuração no nível do sistema.
Ações | Descrição |
---|---|
Microsoft.CognitiveServices/*/read | |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/MetricsAdvisor/* | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Full access to the project, including the system level configuration.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/cb43c632-a144-4ec5-977c-e80c4affc34a",
"name": "cb43c632-a144-4ec5-977c-e80c4affc34a",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/MetricsAdvisor/*"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services Metrics Advisor Administrator",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Usuário do Assistente de Métricas dos Serviços Cognitivos
Acesso ao projeto.
Ações | Descrição |
---|---|
Microsoft.CognitiveServices/*/read | |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/MetricsAdvisor/* | |
NotDataActions | |
Microsoft.CognitiveServices/accounts/MetricsAdvisor/stats/* |
{
"assignableScopes": [
"/"
],
"description": "Access to the project.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/3b20f47b-3825-43cb-8114-4bd2201156a8",
"name": "3b20f47b-3825-43cb-8114-4bd2201156a8",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/MetricsAdvisor/*"
],
"notDataActions": [
"Microsoft.CognitiveServices/accounts/MetricsAdvisor/stats/*"
]
}
],
"roleName": "Cognitive Services Metrics Advisor User",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Colaborador de OpenAI dos Serviços Cognitivos
Acesso total, incluindo a capacidade de ajustar, implantar e gerar texto
Ações | Descrição |
---|---|
Microsoft.CognitiveServices/*/read | |
Microsoft.CognitiveServices/contas/implantações/gravação | Grava implantações. |
Microsoft.CognitiveServices/contas/implantações/excluir | Exclui implantações. |
Microsoft.CognitiveServices/accounts/raiPolicies/read | Obtém todas as políticas aplicáveis na conta, incluindo políticas padrão. |
Microsoft.CognitiveServices/accounts/raiPolicies/write | Crie ou atualize uma política personalizada de IA responsável. |
Microsoft.CognitiveServices/accounts/raiPolicies/delete | Exclui uma política personalizada de IA Responsável que não é referenciada por uma implantação existente. |
Microsoft.CognitiveServices/contas/planos de compromisso/ler | Lê planos de compromisso. |
Microsoft.CognitiveServices/accounts/commitmentplans/write | Grava planos de compromisso. |
Microsoft.CognitiveServices/accounts/commitmentplans/delete | Exclui planos de compromisso. |
Microsoft.Authorization/roleAssignments/read | Obter informações sobre uma atribuição de função. |
Microsoft.Authorization/roleDefinitions/read | Obter informações sobre uma definição de função. |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/OpenAI/* | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Full access including the ability to fine-tune, deploy and generate text",
"id": "/providers/Microsoft.Authorization/roleDefinitions/a001fd3d-188f-4b5d-821b-7da978bf7442",
"name": "a001fd3d-188f-4b5d-821b-7da978bf7442",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.CognitiveServices/accounts/deployments/write",
"Microsoft.CognitiveServices/accounts/deployments/delete",
"Microsoft.CognitiveServices/accounts/raiPolicies/read",
"Microsoft.CognitiveServices/accounts/raiPolicies/write",
"Microsoft.CognitiveServices/accounts/raiPolicies/delete",
"Microsoft.CognitiveServices/accounts/commitmentplans/read",
"Microsoft.CognitiveServices/accounts/commitmentplans/write",
"Microsoft.CognitiveServices/accounts/commitmentplans/delete",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleDefinitions/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/OpenAI/*"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services OpenAI Contributor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Usuário do OpenAI de Serviços Cognitivos
Acesso de leitura para exibir arquivos, modelos, implantações. A capacidade de criar chamadas de conclusão e inserção.
Ações | Descrição |
---|---|
Microsoft.CognitiveServices/*/read | |
Microsoft.Authorization/roleAssignments/read | Obter informações sobre uma atribuição de função. |
Microsoft.Authorization/roleDefinitions/read | Obter informações sobre uma definição de função. |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/OpenAI/*/read | |
Microsoft.CognitiveServices/accounts/OpenAI/engines/completions/action | Criar uma conclusão com base em um modelo escolhido |
Microsoft.CognitiveServices/accounts/OpenAI/engines/search/action | Pesquise os documentos mais relevantes usando o mecanismo atual. |
Microsoft.CognitiveServices/accounts/OpenAI/engines/generate/action | (Somente para navegadores.) Transmita texto gerado do modelo por meio da solicitação GET. Esse método é fornecido porque o método EventSource nativo do navegador só pode enviar solicitações GET. Ele dá suporte a um conjunto mais limitado de opções de configuração do que a variante POST. |
Microsoft.CognitiveServices/accounts/OpenAI/deployments/audio/action | Retorne a transcrição ou tradução de um determinado arquivo de áudio. |
Microsoft.CognitiveServices/accounts/OpenAI/deployments/search/action | Pesquise os documentos mais relevantes usando o mecanismo atual. |
Microsoft.CognitiveServices/accounts/OpenAI/deployments/completions/action | Criar uma conclusão com base em um modelo escolhido. |
Microsoft.CognitiveServices/accounts/OpenAI/deployments/chat/completions/action | Cria uma conclusão para a mensagem de chat |
Microsoft.CognitiveServices/accounts/OpenAI/deployments/realtime/action | Cria uma conexão em tempo real com a implantação. |
Microsoft.CognitiveServices/accounts/OpenAI/deployments/extensions/chat/completions/action | Cria uma conclusão para a mensagem de chat com extensões |
Microsoft.CognitiveServices/accounts/OpenAI/deployments/embeddings/action | Retorne as inserções para um determinado prompt. |
Microsoft.CognitiveServices/accounts/OpenAI/images/generations/action | Crie gerações de imagens. |
Microsoft.CognitiveServices/accounts/OpenAI/assistants/* | |
NotDataActions | |
Microsoft.CognitiveServices/accounts/OpenAI/stored-completions/read | Consultar dados de conclusão usando filtros ou Obter dados de conclusão única usando ID de conclusão ou Obter metadados de tráfego para a conta especificada |
{
"assignableScopes": [
"/"
],
"description": "Ability to view files, models, deployments. Readers can't make any changes They can inference and create images",
"id": "/providers/Microsoft.Authorization/roleDefinitions/5e0bd9bd-7b93-4f28-af87-19fc36ad61bd",
"name": "5e0bd9bd-7b93-4f28-af87-19fc36ad61bd",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleDefinitions/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/OpenAI/*/read",
"Microsoft.CognitiveServices/accounts/OpenAI/engines/completions/action",
"Microsoft.CognitiveServices/accounts/OpenAI/engines/search/action",
"Microsoft.CognitiveServices/accounts/OpenAI/engines/generate/action",
"Microsoft.CognitiveServices/accounts/OpenAI/deployments/audio/action",
"Microsoft.CognitiveServices/accounts/OpenAI/deployments/search/action",
"Microsoft.CognitiveServices/accounts/OpenAI/deployments/completions/action",
"Microsoft.CognitiveServices/accounts/OpenAI/deployments/chat/completions/action",
"Microsoft.CognitiveServices/accounts/OpenAI/deployments/realtime/action",
"Microsoft.CognitiveServices/accounts/OpenAI/deployments/extensions/chat/completions/action",
"Microsoft.CognitiveServices/accounts/OpenAI/deployments/embeddings/action",
"Microsoft.CognitiveServices/accounts/OpenAI/images/generations/action",
"Microsoft.CognitiveServices/accounts/OpenAI/assistants/*"
],
"notDataActions": [
"Microsoft.CognitiveServices/accounts/OpenAI/stored-completions/read"
]
}
],
"roleName": "Cognitive Services OpenAI User",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Editor do QnA Maker dos Serviços Cognitivos
Permite criar, editar, importar e exportar uma Base de dados de conhecimento. Não é possível publicar ou excluir uma Base de dados de conhecimento.
Ações | Descrição |
---|---|
Microsoft.CognitiveServices/*/read | |
Microsoft.Authorization/roleAssignments/read | Obter informações sobre uma atribuição de função. |
Microsoft.Authorization/roleDefinitions/read | Obter informações sobre uma definição de função. |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read | Obtém Lista de bases de conhecimento ou detalhes de uma base de conhecimento específica. |
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read | Baixar a base de dados de conhecimento. |
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/create/write | Operação assíncrona para criar uma nova base de dados de conhecimento. |
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/write | Operação assíncrona para modificar uma base de dados de conhecimento ou substituir o conteúdo da base de dados de conhecimento. |
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action | Chamada GenerateAnswer para consultar a base de dados de conhecimento. |
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/train/action | Treinar a chamada para adicionar sugestões à base de dados de conhecimento. |
Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read | Baixar alterações do runtime. |
Microsoft.CognitiveServices/accounts/QnAMaker/alterations/write | Substituir dados de alterações. |
Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read | Obtém as chaves para um ponto de extremidade |
Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/refreshkeys/action | Gera novamente uma chave de ponto de extremidade. |
Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read | Obtém as configurações de um ponto de extremidade |
Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/write | Atualize as configurações de ponto de extremidade de um ponto de extremidade. |
Microsoft.CognitiveServices/accounts/QnAMaker/operations/read | Obtém detalhes de uma operação de execução prolongada específica. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read | Obtém Lista de bases de conhecimento ou detalhes de uma base de conhecimento específica. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read | Baixar a base de dados de conhecimento. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/create/write | Operação assíncrona para criar uma nova base de dados de conhecimento. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/write | Operação assíncrona para modificar uma base de dados de conhecimento ou substituir o conteúdo da base de dados de conhecimento. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action | Chamada GenerateAnswer para consultar a base de dados de conhecimento. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/train/action | Treinar a chamada para adicionar sugestões à base de dados de conhecimento. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read | Baixar alterações do runtime. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/write | Substituir dados de alterações. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read | Obtém as chaves para um ponto de extremidade |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/refreshkeys/action | Gera novamente uma chave de ponto de extremidade. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read | Obtém as configurações de um ponto de extremidade |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/write | Atualize as configurações de ponto de extremidade de um ponto de extremidade. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/operations/read | Obtém detalhes de uma operação de execução prolongada específica. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/read | Obtém Lista de bases de conhecimento ou detalhes de uma base de conhecimento específica. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/download/read | Baixar a base de dados de conhecimento. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/create/write | Operação assíncrona para criar uma nova base de dados de conhecimento. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/write | Operação assíncrona para modificar uma base de dados de conhecimento ou substituir o conteúdo da base de dados de conhecimento. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/generateanswer/action | Chamada GenerateAnswer para consultar a base de dados de conhecimento. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/train/action | Treinar a chamada para adicionar sugestões à base de dados de conhecimento. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/read | Baixar alterações do runtime. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/write | Substituir dados de alterações. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/read | Obtém as chaves para um ponto de extremidade |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/refreshkeys/action | Gera novamente uma chave de ponto de extremidade. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/read | Obtém as configurações de um ponto de extremidade |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/write | Atualize as configurações de ponto de extremidade de um ponto de extremidade. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/operations/read | Obtém detalhes de uma operação de execução prolongada específica. |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Let's you create, edit, import and export a KB. You cannot publish or delete a KB.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/f4cc2bf9-21be-47a1-bdf1-5c5804381025",
"name": "f4cc2bf9-21be-47a1-bdf1-5c5804381025",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleDefinitions/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/create/write",
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/write",
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action",
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/train/action",
"Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/alterations/write",
"Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/refreshkeys/action",
"Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/write",
"Microsoft.CognitiveServices/accounts/QnAMaker/operations/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/create/write",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/write",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/train/action",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/write",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/refreshkeys/action",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/write",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/operations/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/download/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/create/write",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/write",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/generateanswer/action",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/train/action",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/write",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/refreshkeys/action",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/write",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/operations/read"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services QnA Maker Editor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Leitor do QnA Maker dos Serviços Cognitivos
Permite somente ler e testar uma Base de dados de conhecimento.
Ações | Descrição |
---|---|
Microsoft.CognitiveServices/*/read | |
Microsoft.Authorization/roleAssignments/read | Obter informações sobre uma atribuição de função. |
Microsoft.Authorization/roleDefinitions/read | Obter informações sobre uma definição de função. |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read | Obtém Lista de bases de conhecimento ou detalhes de uma base de conhecimento específica. |
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read | Baixar a base de dados de conhecimento. |
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action | Chamada GenerateAnswer para consultar a base de dados de conhecimento. |
Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read | Baixar alterações do runtime. |
Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read | Obtém as chaves para um ponto de extremidade |
Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read | Obtém as configurações de um ponto de extremidade |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read | Obtém Lista de bases de conhecimento ou detalhes de uma base de conhecimento específica. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read | Baixar a base de dados de conhecimento. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action | Chamada GenerateAnswer para consultar a base de dados de conhecimento. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read | Baixar alterações do runtime. |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read | Obtém as chaves para um ponto de extremidade |
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read | Obtém as configurações de um ponto de extremidade |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/read | Obtém Lista de bases de conhecimento ou detalhes de uma base de conhecimento específica. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/download/read | Baixar a base de dados de conhecimento. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/generateanswer/action | Chamada GenerateAnswer para consultar a base de dados de conhecimento. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/read | Baixar alterações do runtime. |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/read | Obtém as chaves para um ponto de extremidade |
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/read | Obtém as configurações de um ponto de extremidade |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Let's you read and test a KB only.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/466ccd10-b268-4a11-b098-b4849f024126",
"name": "466ccd10-b268-4a11-b098-b4849f024126",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleDefinitions/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action",
"Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read",
"Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read",
"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/download/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/generateanswer/action",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/read",
"Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/read"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services QnA Maker Reader",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Contribuidor de Fala dos Serviços Cognitivos
Acesso total a projetos de Fala, incluindo leitura, gravação e exclusão de todas as entidades, para reconhecimento de fala em tempo real e tarefas de transcrição em lote, síntese de fala em tempo real e tarefas de áudio longas, fala personalizada e voz personalizada.
Ações | Descrição |
---|---|
Microsoft.CognitiveServices/*/read | |
Microsoft.Authorization/roleAssignments/read | Obter informações sobre uma atribuição de função. |
Microsoft.Authorization/roleDefinitions/read | Obter informações sobre uma definição de função. |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/SpeechServices/* | |
Microsoft.CognitiveServices/accounts/CustomVoice/* | |
Microsoft.CognitiveServices/accounts/AudioContentCreation/* | |
Microsoft.CognitiveServices/accounts/VideoTranslation/* | |
Microsoft.CognitiveServices/accounts/CustomAvatar/* | |
Microsoft.CognitiveServices/accounts/BatchAvatar/* | |
Microsoft.CognitiveServices/accounts/BatchTextToSpeech/* | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Full access to Speech projects, including read, write and delete all entities, for real-time speech recognition and batch transcription tasks, real-time speech synthesis and long audio tasks, custom speech and custom voice.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/0e75ca1e-0464-4b4d-8b93-68208a576181",
"name": "0e75ca1e-0464-4b4d-8b93-68208a576181",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleDefinitions/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/SpeechServices/*",
"Microsoft.CognitiveServices/accounts/CustomVoice/*",
"Microsoft.CognitiveServices/accounts/AudioContentCreation/*",
"Microsoft.CognitiveServices/accounts/VideoTranslation/*",
"Microsoft.CognitiveServices/accounts/CustomAvatar/*",
"Microsoft.CognitiveServices/accounts/BatchAvatar/*",
"Microsoft.CognitiveServices/accounts/BatchTextToSpeech/*"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services Speech Contributor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Usuário de Fala dos Serviços Cognitivos
Acesso às APIs de reconhecimento de fala em tempo real e transcrição em lote, síntese de fala em tempo real e APIs de áudio longo, bem como para ler os dados/teste/modelo/ponto de extremidade para modelos personalizados, mas não pode criar, excluir ou modificar os dados/teste/modelo/ponto de extremidade para modelos personalizados.
Ações | Descrição |
---|---|
Microsoft.CognitiveServices/*/read | |
Microsoft.Authorization/roleAssignments/read | Obter informações sobre uma atribuição de função. |
Microsoft.Authorization/roleDefinitions/read | Obter informações sobre uma definição de função. |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/accounts/SpeechServices/*/read | |
Microsoft.CognitiveServices/accounts/SpeechServices/*/transcriptions/read | |
Microsoft.CognitiveServices/accounts/SpeechServices/*/transcriptions/write | |
Microsoft.CognitiveServices/accounts/SpeechServices/*/transcriptions/delete | |
Microsoft.CognitiveServices/accounts/SpeechServices/*/transcriptions/action | |
Microsoft.CognitiveServices/accounts/SpeechServices/*/frontend/action | |
Microsoft.CognitiveServices/accounts/SpeechServices/text-dependent/*/action | |
Microsoft.CognitiveServices/accounts/SpeechServices/text-independent/*/action | |
Microsoft.CognitiveServices/accounts/CustomVoice/*/read | |
Microsoft.CognitiveServices/accounts/CustomVoice/evaluations/* | |
Microsoft.CognitiveServices/accounts/CustomVoice/longaudiosynthesis/* | |
Microsoft.CognitiveServices/accounts/AudioContentCreation/* | |
Microsoft.CognitiveServices/accounts/VideoTranslation/* | |
Microsoft.CognitiveServices/accounts/CustomAvatar/*/read | |
Microsoft.CognitiveServices/accounts/BatchAvatar/* | |
Microsoft.CognitiveServices/accounts/BatchTextToSpeech/* | |
NotDataActions | |
Microsoft.CognitiveServices/accounts/CustomVoice/datasets/files/read | Obtém os arquivos do conjunto de dados identificados pela ID fornecida. |
Microsoft.CognitiveServices/accounts/CustomVoice/datasets/utterances/read | Obtém os enunciados do conjunto de treinamento especificado. |
{
"assignableScopes": [
"/"
],
"description": "Access to the real-time speech recognition and batch transcription APIs, real-time speech synthesis and long audio APIs, as well as to read the data/test/model/endpoint for custom models, but can't create, delete or modify the data/test/model/endpoint for custom models.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/f2dc8367-1007-4938-bd23-fe263f013447",
"name": "f2dc8367-1007-4938-bd23-fe263f013447",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleDefinitions/read"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/accounts/SpeechServices/*/read",
"Microsoft.CognitiveServices/accounts/SpeechServices/*/transcriptions/read",
"Microsoft.CognitiveServices/accounts/SpeechServices/*/transcriptions/write",
"Microsoft.CognitiveServices/accounts/SpeechServices/*/transcriptions/delete",
"Microsoft.CognitiveServices/accounts/SpeechServices/*/transcriptions/action",
"Microsoft.CognitiveServices/accounts/SpeechServices/*/frontend/action",
"Microsoft.CognitiveServices/accounts/SpeechServices/text-dependent/*/action",
"Microsoft.CognitiveServices/accounts/SpeechServices/text-independent/*/action",
"Microsoft.CognitiveServices/accounts/CustomVoice/*/read",
"Microsoft.CognitiveServices/accounts/CustomVoice/evaluations/*",
"Microsoft.CognitiveServices/accounts/CustomVoice/longaudiosynthesis/*",
"Microsoft.CognitiveServices/accounts/AudioContentCreation/*",
"Microsoft.CognitiveServices/accounts/VideoTranslation/*",
"Microsoft.CognitiveServices/accounts/CustomAvatar/*/read",
"Microsoft.CognitiveServices/accounts/BatchAvatar/*",
"Microsoft.CognitiveServices/accounts/BatchTextToSpeech/*"
],
"notDataActions": [
"Microsoft.CognitiveServices/accounts/CustomVoice/datasets/files/read",
"Microsoft.CognitiveServices/accounts/CustomVoice/datasets/utterances/read"
]
}
],
"roleName": "Cognitive Services Speech User",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Leitor de Usos dos Serviços Cognitivos
Permissão mínima para exibir usos dos Serviços Cognitivos.
Ações | Descrição |
---|---|
Microsoft.CognitiveServices/locations/usages/read | Ler todos os dados de uso |
NotActions | |
none | |
DataActions | |
none | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Minimal permission to view Cognitive Services usages.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/bba48692-92b0-4667-a9ad-c31c7b334ac2",
"name": "bba48692-92b0-4667-a9ad-c31c7b334ac2",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/locations/usages/read"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "Cognitive Services Usages Reader",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Usuário dos Serviços Cognitivos
Permite ler e listar as chaves dos Serviços Cognitivos.
Ações | Descrição |
---|---|
Microsoft.CognitiveServices/*/read | |
Microsoft.CognitiveServices/accounts/listkeys/action | Listar chaves |
Microsoft.Insights/alertRules/read | Ler alerta de métrica clássico |
Microsoft.Insights/diagnosticSettings/read | Ler uma configuração de diagnóstico de recurso |
Microsoft.Insights/logDefinitions/read | Ler definições de log |
Microsoft.Insights/metricdefinitions/read | Ler definições de métrica |
Microsoft.Insights/metrics/read | Ler métrica |
Microsoft.ResourceHealth/availabilityStatuses/read | Obter os status de disponibilidade para todos os recursos no escopo especificado |
Microsoft.Resources/deployments/operations/read | Obter ou lista operações de implantação. |
Microsoft.Resources/subscriptions/operationresults/read | Obter os resultados da operação da assinatura. |
Microsoft.Resources/subscriptions/read | Obter a lista de assinaturas. |
Microsoft.Resources/subscriptions/resourceGroups/read | Obter ou listar de grupos de recursos. |
Microsoft.Support/* | Criar e atualizar um tíquete de suporte |
NotActions | |
none | |
DataActions | |
Microsoft.CognitiveServices/* | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Lets you read and list keys of Cognitive Services.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/a97b65f3-24c7-4388-baec-2e87135dc908",
"name": "a97b65f3-24c7-4388-baec-2e87135dc908",
"permissions": [
{
"actions": [
"Microsoft.CognitiveServices/*/read",
"Microsoft.CognitiveServices/accounts/listkeys/action",
"Microsoft.Insights/alertRules/read",
"Microsoft.Insights/diagnosticSettings/read",
"Microsoft.Insights/logDefinitions/read",
"Microsoft.Insights/metricdefinitions/read",
"Microsoft.Insights/metrics/read",
"Microsoft.ResourceHealth/availabilityStatuses/read",
"Microsoft.Resources/deployments/operations/read",
"Microsoft.Resources/subscriptions/operationresults/read",
"Microsoft.Resources/subscriptions/read",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.Support/*"
],
"notActions": [],
"dataActions": [
"Microsoft.CognitiveServices/*"
],
"notDataActions": []
}
],
"roleName": "Cognitive Services User",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Administrador do bot de saúde
Os usuários com acesso de administrador podem entrar, visualizar e editar todos os recursos, cenários e definições de configuração do bot, incluindo as chaves e segredos da instância do bot.
Ações | Descrição |
---|---|
none | |
NotActions | |
none | |
DataActions | |
Microsoft.HealthBot/healthBots/Admin/Action | Entre no portal de gerenciamento, exiba e edite todos os recursos do bot, cenários, definições de configuração, chaves de instância e segredos. |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Users with admin access can sign in, view and edit all of the bot resources, scenarios and configuration setting including the bot instance keys & secrets.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/f1082fec-a70f-419f-9230-885d2550fb38",
"name": "f1082fec-a70f-419f-9230-885d2550fb38",
"permissions": [
{
"actions": [],
"notActions": [],
"dataActions": [
"Microsoft.HealthBot/healthBots/Admin/Action"
],
"notDataActions": []
}
],
"roleName": "Health Bot Admin",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Editor de bot de saúde
Os usuários com acesso de editor podem entrar, exibir e editar todos os recursos, cenários e definições de configuração do bot, exceto as chaves e segredos da instância do bot e as entradas do usuário final (incluindo comentários, enunciados não reconhecidos e logs de conversa). Um acesso somente leitura às habilidades e canais do bot.
Ações | Descrição |
---|---|
none | |
NotActions | |
none | |
DataActions | |
Microsoft.HealthBot/healthBots/Editor/Action | Entre no portal de gerenciamento, exiba e edite todos os recursos, cenários e definições de configuração do bot, exceto as chaves e segredos da instância do bot e as entradas do usuário final. Acesso somente leitura às habilidades e canais do bot. |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Users with editor access can sign in, view and edit all the bot resources, scenarios and configuration setting except for the bot instance keys & secrets and the end-user inputs (including Feedback, Unrecognized utterances and Conversation logs). A read-only access to the bot skills and channels.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/af854a69-80ce-4ff7-8447-f1118a2e0ca8",
"name": "af854a69-80ce-4ff7-8447-f1118a2e0ca8",
"permissions": [
{
"actions": [],
"notActions": [],
"dataActions": [
"Microsoft.HealthBot/healthBots/Editor/Action"
],
"notDataActions": []
}
],
"roleName": "Health Bot Editor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Leitor de bot de saúde
Os usuários com acesso de leitor podem entrar, ter acesso somente leitura aos recursos, cenários e definições de configuração do bot, exceto para as chaves e segredos da instância do bot (incluindo chaves de autenticação, conexão de dados e canais) e as entradas do usuário final (incluindo comentários, enunciados não reconhecidos e logs de conversa).
Ações | Descrição |
---|---|
none | |
NotActions | |
none | |
DataActions | |
Microsoft.HealthBot/healthBots/Reader/Action | Entre no portal de gerenciamento, com acesso somente leitura a recursos, cenários e definições de configuração, exceto para as chaves e segredos da instância do bot e as entradas do usuário final. |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Users with reader access can sign in, have read-only access to the bot resources, scenarios and configuration setting except for the bot instance keys & secrets (including Authentication, Data Connection and Channels keys) and the end-user inputs (including Feedback, Unrecognized utterances and Conversation logs).",
"id": "/providers/Microsoft.Authorization/roleDefinitions/eb5a76d5-50e7-4c33-a449-070e7c9c4cf2",
"name": "eb5a76d5-50e7-4c33-a449-070e7c9c4cf2",
"permissions": [
{
"actions": [],
"notActions": [],
"dataActions": [
"Microsoft.HealthBot/healthBots/Reader/Action"
],
"notDataActions": []
}
],
"roleName": "Health Bot Reader",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Colaborador de dados de índice de pesquisa
Concede acesso completo aos dados do índice do Azure Cognitive Search.
Ações | Descrição |
---|---|
none | |
NotActions | |
none | |
DataActions | |
Microsoft.Search/searchServices/indexes/documents/* | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Grants full access to Azure Cognitive Search index data.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/8ebe5a00-799e-43f5-93ac-243d3dce84a7",
"name": "8ebe5a00-799e-43f5-93ac-243d3dce84a7",
"permissions": [
{
"actions": [],
"notActions": [],
"dataActions": [
"Microsoft.Search/searchServices/indexes/documents/*"
],
"notDataActions": []
}
],
"roleName": "Search Index Data Contributor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Leitor de dados de índice de pesquisa
Concede acesso de leitura aos dados do índice do Azure Cognitive Search.
Ações | Descrição |
---|---|
none | |
NotActions | |
none | |
DataActions | |
Microsoft.Search/searchServices/indexes/documents/read | Ler documentos ou termos de consulta sugeridos de um índice. |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Grants read access to Azure Cognitive Search index data.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/1407120a-92aa-4202-b7e9-c0e197c71c8f",
"name": "1407120a-92aa-4202-b7e9-c0e197c71c8f",
"permissions": [
{
"actions": [],
"notActions": [],
"dataActions": [
"Microsoft.Search/searchServices/indexes/documents/read"
],
"notDataActions": []
}
],
"roleName": "Search Index Data Reader",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}
Colaborador do Serviço de Pesquisa
Permite gerenciar serviços de pesquisa, mas não acessá-las.
Ações | Descrição |
---|---|
Microsoft.Authorization/*/read | Ler funções e atribuições de função |
Microsoft.Insights/alertRules/* | Criar e gerenciar um alerta de métrica clássico |
Microsoft.ResourceHealth/availabilityStatuses/read | Obter os status de disponibilidade para todos os recursos no escopo especificado |
Microsoft.Resources/deployments/* | Criar e gerenciar uma implantação |
Microsoft.Resources/subscriptions/resourceGroups/read | Obter ou listar de grupos de recursos. |
Microsoft.Search/searchServices/* | Criar e gerenciar serviços de pesquisa |
Microsoft.Support/* | Criar e atualizar um tíquete de suporte |
NotActions | |
none | |
DataActions | |
none | |
NotDataActions | |
none |
{
"assignableScopes": [
"/"
],
"description": "Lets you manage Search services, but not access to them.",
"id": "/providers/Microsoft.Authorization/roleDefinitions/7ca78c08-252a-4471-8644-bb5ff32d4ba0",
"name": "7ca78c08-252a-4471-8644-bb5ff32d4ba0",
"permissions": [
{
"actions": [
"Microsoft.Authorization/*/read",
"Microsoft.Insights/alertRules/*",
"Microsoft.ResourceHealth/availabilityStatuses/read",
"Microsoft.Resources/deployments/*",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.Search/searchServices/*",
"Microsoft.Support/*"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"roleName": "Search Service Contributor",
"roleType": "BuiltInRole",
"type": "Microsoft.Authorization/roleDefinitions"
}