適用於分析的 Azure 內建角色

發行項
12/12/2024

本文列出 Analytics 類別中的 Azure 內建角色。

Azure 事件中樞資料擁有者

允許完整存取 Azure 事件中樞資源。

動作	描述
Microsoft.EventHub/*
NotActions
none
DataActions
Microsoft.EventHub/*
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows for full access to Azure Event Hubs resources.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/f526a384-b230-433a-b45c-95f59c4a2dec",
  "name": "f526a384-b230-433a-b45c-95f59c4a2dec",
  "permissions": [
    {
      "actions": [
        "Microsoft.EventHub/*"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.EventHub/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Azure Event Hubs Data Owner",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Azure 事件中樞資料接收者

允許接收 Azure 事件中樞資源。

深入了解

動作	描述
Microsoft.EventHub/*/eventhubs/consumergroups/read
NotActions
none
DataActions
Microsoft.EventHub/*/receive/action
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows receive access to Azure Event Hubs resources.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/a638d3c7-ab3a-418d-83e6-5f17a39d4fde",
  "name": "a638d3c7-ab3a-418d-83e6-5f17a39d4fde",
  "permissions": [
    {
      "actions": [
        "Microsoft.EventHub/*/eventhubs/consumergroups/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.EventHub/*/receive/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Azure Event Hubs Data Receiver",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Azure 事件中樞資料傳送者

允許傳送 Azure 事件中樞資源。

深入了解

動作	描述
Microsoft.EventHub/*/eventhubs/read
NotActions
none
DataActions
Microsoft.EventHub/*/send/action
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "Allows send access to Azure Event Hubs resources.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/2b629674-e913-4c01-ae53-ef4638d8f975",
  "name": "2b629674-e913-4c01-ae53-ef4638d8f975",
  "permissions": [
    {
      "actions": [
        "Microsoft.EventHub/*/eventhubs/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.EventHub/*/send/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Azure Event Hubs Data Sender",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Data Factory 參與者

建立和管理數據處理站，以及其中的子資源。

深入了解

動作	描述
Microsoft.Authorization/*/read	讀取角色和角色指派
Microsoft.DataFactory/dataFactories/*	建立和管理數據處理站，以及其中子資源。
Microsoft.DataFactory/factories/*	建立和管理數據處理站，以及其中子資源。
Microsoft.Insights/alertRules/*	建立和管理傳統計量警示
Microsoft.ResourceHealth/availabilityStatuses/read	取得指定範圍中所有資源的可用性狀態
Microsoft.Resources/deployments/*	建立和管理部署
Microsoft.Resources/subscriptions/resourceGroups/read	取得或列出資源群組。
Microsoft.Support/*	建立和更新支援票證
Microsoft.EventGrid/eventSubscriptions/write	建立或更新 eventSubscription
NotActions
none
DataActions
none
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "Create and manage data factories, as well as child resources within them.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5",
  "name": "673868aa-7521-48a0-acc6-0f60742d39f5",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.DataFactory/dataFactories/*",
        "Microsoft.DataFactory/factories/*",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Support/*",
        "Microsoft.EventGrid/eventSubscriptions/write"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Data Factory Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

資料清除者

從 Log Analytics 工作區刪除私人數據。

深入了解

動作	描述
Microsoft.Insights/components/*/read
Microsoft.Insights/components/purge/action	從 Application Insights 清除數據
Microsoft.OperationalInsights/workspaces/*/read	檢視記錄分析數據
Microsoft.OperationalInsights/workspaces/purge/action	從工作區依查詢刪除指定的數據。
NotActions
none
DataActions
none
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "Can purge analytics data",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/150f5e0c-0603-4f03-8c7f-cf70034c4e90",
  "name": "150f5e0c-0603-4f03-8c7f-cf70034c4e90",
  "permissions": [
    {
      "actions": [
        "Microsoft.Insights/components/*/read",
        "Microsoft.Insights/components/purge/action",
        "Microsoft.OperationalInsights/workspaces/*/read",
        "Microsoft.OperationalInsights/workspaces/purge/action"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Data Purger",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

HDInsight 叢集操作員

可讓您讀取和修改 HDInsight 叢集組態。

深入了解

動作	描述
Microsoft.HDInsight/*/read
Microsoft.HDInsight/clusters/getGatewaySettings/action	取得 HDInsight 叢集的閘道設定
Microsoft.HDInsight/clusters/updateGatewaySettings/action	更新 HDInsight 叢集的閘道設定
Microsoft.HDInsight/clusters/configurations/*
Microsoft.Resources/subscriptions/resourceGroups/read	取得或列出資源群組。
Microsoft.Resources/deployments/operations/read	取得或列出部署作業。
Microsoft.Insights/alertRules/*	建立和管理傳統計量警示
Microsoft.Authorization/*/read	讀取角色和角色指派
Microsoft.Support/*	建立和更新支援票證
NotActions
none
DataActions
none
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you read and modify HDInsight cluster configurations.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/61ed4efc-fab3-44fd-b111-e24485cc132a",
  "name": "61ed4efc-fab3-44fd-b111-e24485cc132a",
  "permissions": [
    {
      "actions": [
        "Microsoft.HDInsight/*/read",
        "Microsoft.HDInsight/clusters/getGatewaySettings/action",
        "Microsoft.HDInsight/clusters/updateGatewaySettings/action",
        "Microsoft.HDInsight/clusters/configurations/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Resources/deployments/operations/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.Authorization/*/read",
        "Microsoft.Support/*"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "HDInsight Cluster Operator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

HDInsight 網域服務參與者

可讀取、建立、修改及刪除 HDInsight 企業安全性套件所需的網域服務相關作業

深入了解

動作	描述
Microsoft.AAD/*/read
Microsoft.AAD/domainServices/*/read
Microsoft.AAD/domainServices/oucontainer/*
NotActions
none
DataActions
none
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "Can Read, Create, Modify and Delete Domain Services related operations needed for HDInsight Enterprise Security Package",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/8d8d5a11-05d3-4bda-a417-a08778121c7c",
  "name": "8d8d5a11-05d3-4bda-a417-a08778121c7c",
  "permissions": [
    {
      "actions": [
        "Microsoft.AAD/*/read",
        "Microsoft.AAD/domainServices/*/read",
        "Microsoft.AAD/domainServices/oucontainer/*"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "HDInsight Domain Services Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

AKS 上的 HDInsight 叢集管理員

授與使用者/群組在指定叢集集區內建立、刪除和管理叢集的能力。叢集管理員也可以執行工作負載、監視及管理這些叢集上的所有用戶活動。

深入了解

動作	描述
Microsoft.Authorization/*/read	讀取角色和角色指派
Microsoft.HDInsight/clusterPools/clusters/read	取得 AKS 叢集上 HDInsight 的詳細數據
Microsoft.HDInsight/clusterPools/clusters/write	在 AKS 叢集上建立或更新 HDInsight
Microsoft.HDInsight/clusterPools/clusters/delete	刪除 AKS 叢集上的 HDInsight
Microsoft.HDInsight/clusterPools/clusters/resize/action	調整 AKS 叢集上的 HDInsight 大小
Microsoft.HDInsight/clusterpools/clusters/instanceviews/read	取得 AKS 叢集實例檢視上 HDInsight 的詳細數據
Microsoft.HDInsight/clusterPools/clusters/jobs/read	列出 AKS 叢集作業上的 HDInsight
Microsoft.HDInsight/clusterPools/clusters/runjob/action	在 AKS 叢集作業上執行 HDInsight
Microsoft.HDInsight/clusterpools/clusters/serviceconfigs/read	取得 AKS 叢集服務組態上 HDInsight 的詳細數據
Microsoft.HDInsight/clusterPools/clusters/availableupgrades/read	取得 AKS 叢集上 HDInsight 的可用升級
Microsoft.HDInsight/clusterPools/clusters/upgrade/action	升級 AKS 叢集上的 HDInsight
Microsoft.HDInsight/clusterPools/clusters/rollback/action	在 AKS 叢集升級上復原 HDInsight
Microsoft.HDInsight/clusterPools/clusters/upgradehistories/read	讀取 AKS 叢集升級歷程記錄上的 HDInsight
Microsoft.HDInsight/clusterPools/clusters/libraries/read	讀取 AKS 叢集連結庫上的 HDInsight
Microsoft.HDInsight/clusterPools/clusters/managelibraries/action	管理 AKS 叢集連結庫上的 HDInsight
Microsoft.ResourceHealth/availabilityStatuses/read	取得指定範圍中所有資源的可用性狀態
Microsoft.Resources/deployments/operations/read	取得或列出部署作業。
Microsoft.Resources/deployments/*/read
Microsoft.Resources/deployments/read	取得或列出部署。
Microsoft.Resources/deployments/validate/action	驗證部署。
Microsoft.Resources/deployments/write	建立或更新部署。
Microsoft.Resources/deployments/exportTemplate/action	匯出部署的範本
Microsoft.Resources/subscriptions/resourcegroups/deployments/operations/read	取得或列出部署作業。
Microsoft.Resources/subscriptions/resourcegroups/deployments/read	取得或列出部署。
Microsoft.Resources/subscriptions/resourceGroups/read	取得或列出資源群組。
Microsoft.Resources/subscriptions/operationresults/read	取得訂用帳戶作業結果。
Microsoft.Insights/AlertRules/Write	建立或更新傳統計量警示
Microsoft.Insights/AlertRules/Delete	刪除傳統計量警示
Microsoft.Insights/AlertRules/Read	讀取傳統計量警示
Microsoft.Insights/AlertRules/Activated/Action	已啟動傳統計量警示
Microsoft.Insights/AlertRules/Resolved/Action	已解決傳統計量警示
Microsoft.Insights/AlertRules/Throttled/Action	傳統計量警示規則已節流
Microsoft.Insights/AlertRules/Incidents/Read	讀取傳統計量警示事件
Microsoft.Insights/metrics/read	讀取計量
Microsoft.Insights/logs/read	從所有記錄讀取數據
NotActions
none
DataActions
none
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "Grants a user/group the ability to create, delete and manage clusters within a given cluster pool. Cluster Admin can also run workloads, monitor, and manage all user activity on these clusters.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/fd036e6b-1266-47a0-b0bb-a05d04831731",
  "name": "fd036e6b-1266-47a0-b0bb-a05d04831731",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.HDInsight/clusterPools/clusters/read",
        "Microsoft.HDInsight/clusterPools/clusters/write",
        "Microsoft.HDInsight/clusterPools/clusters/delete",
        "Microsoft.HDInsight/clusterPools/clusters/resize/action",
        "Microsoft.HDInsight/clusterpools/clusters/instanceviews/read",
        "Microsoft.HDInsight/clusterPools/clusters/jobs/read",
        "Microsoft.HDInsight/clusterPools/clusters/runjob/action",
        "Microsoft.HDInsight/clusterpools/clusters/serviceconfigs/read",
        "Microsoft.HDInsight/clusterPools/clusters/availableupgrades/read",
        "Microsoft.HDInsight/clusterPools/clusters/upgrade/action",
        "Microsoft.HDInsight/clusterPools/clusters/rollback/action",
        "Microsoft.HDInsight/clusterPools/clusters/upgradehistories/read",
        "Microsoft.HDInsight/clusterPools/clusters/libraries/read",
        "Microsoft.HDInsight/clusterPools/clusters/managelibraries/action",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Resources/deployments/operations/read",
        "Microsoft.Resources/deployments/*/read",
        "Microsoft.Resources/deployments/read",
        "Microsoft.Resources/deployments/validate/action",
        "Microsoft.Resources/deployments/write",
        "Microsoft.Resources/deployments/exportTemplate/action",
        "Microsoft.Resources/subscriptions/resourcegroups/deployments/operations/read",
        "Microsoft.Resources/subscriptions/resourcegroups/deployments/read",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Resources/subscriptions/operationresults/read",
        "Microsoft.Insights/AlertRules/Write",
        "Microsoft.Insights/AlertRules/Delete",
        "Microsoft.Insights/AlertRules/Read",
        "Microsoft.Insights/AlertRules/Activated/Action",
        "Microsoft.Insights/AlertRules/Resolved/Action",
        "Microsoft.Insights/AlertRules/Throttled/Action",
        "Microsoft.Insights/AlertRules/Incidents/Read",
        "Microsoft.Insights/metrics/read",
        "Microsoft.Insights/logs/read"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "HDInsight on AKS Cluster Admin",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

AKS 上的 HDInsight 叢集集區管理員

可以在 AKS 叢集集集區上讀取、建立、修改和刪除 HDInsight，以及建立叢集

深入了解

動作	描述
Microsoft.Authorization/*/read	讀取角色和角色指派
Microsoft.HDInsight/clusterPools/clusters/read	取得 AKS 叢集上 HDInsight 的詳細數據
Microsoft.HDInsight/clusterPools/clusters/write	在 AKS 叢集上建立或更新 HDInsight
Microsoft.HDInsight/clusterPools/delete	刪除 AKS 叢集集區上的 HDInsight
Microsoft.HDInsight/clusterPools/read	取得 AKS 叢集集區上 HDInsight 的詳細數據
Microsoft.HDInsight/clusterPools/write	在 AKS 叢集集區上建立或更新 HDInsight
Microsoft.HDInsight/clusterpools/availableupgrades/read	取得 AKS 叢集集區上 HDInsight 的可用升級
Microsoft.HDInsight/clusterpools/upgrade/action	升級 AKS 叢集集區上的 HDInsight
Microsoft.HDInsight/clusterPools/upgradehistories/read	讀取 AKS 叢集集區升級歷程記錄上的 HDInsight
Microsoft.ResourceHealth/availabilityStatuses/read	取得指定範圍中所有資源的可用性狀態
Microsoft.Resources/deployments/operations/read	取得或列出部署作業。
Microsoft.Resources/deployments/validate/action	驗證部署。
Microsoft.Resources/deployments/*/read
Microsoft.Resources/deployments/read	取得或列出部署。
Microsoft.Resources/deployments/write	建立或更新部署。
Microsoft.Resources/deployments/exportTemplate/action	匯出部署的範本
Microsoft.Resources/deployments/validate/action	驗證部署。
Microsoft.Resources/subscriptions/resourcegroups/deployments/operations/read	取得或列出部署作業。
Microsoft.Resources/subscriptions/resourcegroups/deployments/read	取得或列出部署。
Microsoft.Resources/subscriptions/resourceGroups/read	取得或列出資源群組。
Microsoft.Resources/subscriptions/operationresults/read	取得訂用帳戶作業結果。
Microsoft.Insights/AlertRules/Write	建立或更新傳統計量警示
Microsoft.Insights/AlertRules/Delete	刪除傳統計量警示
Microsoft.Insights/AlertRules/Read	讀取傳統計量警示
Microsoft.Insights/AlertRules/Activated/Action	已啟動傳統計量警示
Microsoft.Insights/AlertRules/Resolved/Action	已解決傳統計量警示
Microsoft.Insights/AlertRules/Throttled/Action	傳統計量警示規則已節流
Microsoft.Insights/AlertRules/Incidents/Read	讀取傳統計量警示事件
Microsoft.Insights/metrics/read	讀取計量
Microsoft.Insights/logs/read	從所有記錄讀取數據
NotActions
none
DataActions
none
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "Can read, create, modify and delete HDInsight on AKS cluster pools and create clusters",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/7656b436-37d4-490a-a4ab-d39f838f0042",
  "name": "7656b436-37d4-490a-a4ab-d39f838f0042",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.HDInsight/clusterPools/clusters/read",
        "Microsoft.HDInsight/clusterPools/clusters/write",
        "Microsoft.HDInsight/clusterPools/delete",
        "Microsoft.HDInsight/clusterPools/read",
        "Microsoft.HDInsight/clusterPools/write",
        "Microsoft.HDInsight/clusterpools/availableupgrades/read",
        "Microsoft.HDInsight/clusterpools/upgrade/action",
        "Microsoft.HDInsight/clusterPools/upgradehistories/read",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Resources/deployments/operations/read",
        "Microsoft.Resources/deployments/validate/action",
        "Microsoft.Resources/deployments/*/read",
        "Microsoft.Resources/deployments/read",
        "Microsoft.Resources/deployments/write",
        "Microsoft.Resources/deployments/exportTemplate/action",
        "Microsoft.Resources/deployments/validate/action",
        "Microsoft.Resources/subscriptions/resourcegroups/deployments/operations/read",
        "Microsoft.Resources/subscriptions/resourcegroups/deployments/read",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Resources/subscriptions/operationresults/read",
        "Microsoft.Insights/AlertRules/Write",
        "Microsoft.Insights/AlertRules/Delete",
        "Microsoft.Insights/AlertRules/Read",
        "Microsoft.Insights/AlertRules/Activated/Action",
        "Microsoft.Insights/AlertRules/Resolved/Action",
        "Microsoft.Insights/AlertRules/Throttled/Action",
        "Microsoft.Insights/AlertRules/Incidents/Read",
        "Microsoft.Insights/metrics/read",
        "Microsoft.Insights/logs/read"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "HDInsight on AKS Cluster Pool Admin",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Log Analytics 參與者

「Log Analytics 參與者」角色可以讀取所有監視資料和編輯監視設定。編輯監視設定包括將 VM 擴充功能新增至 VM;讀取記憶體帳戶密鑰，以設定從 Azure 儲存體收集記錄、新增解決方案，以及在所有 Azure 資源上設定 Azure 診斷。

深入了解

動作	描述
*/read	讀取除了秘密以外的所有類型的資源。
Microsoft.ClassicCompute/virtualMachines/extensions/*
Microsoft.ClassicStorage/storageAccounts/listKeys/action	列出記憶體帳戶的存取金鑰。
Microsoft.Compute/virtualMachines/extensions/*
Microsoft.HybridCompute/machines/extensions/write	安裝或更新 Azure Arc 擴充功能
Microsoft.Insights/alertRules/*	建立和管理傳統計量警示
Microsoft.Insights/diagnosticSettings/*	建立、更新或讀取 Analysis Server 的診斷設定
Microsoft.OperationalInsights/*
Microsoft.OperationsManagement/*
Microsoft.Resources/deployments/*	建立和管理部署
Microsoft.Resources/subscriptions/resourcegroups/deployments/*
Microsoft.Storage/storageAccounts/listKeys/action	傳回指定儲存體帳戶的存取金鑰。
Microsoft.Support/*	建立和更新支援票證
NotActions
none
DataActions
none
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "Log Analytics Contributor can read all monitoring data and edit monitoring settings. Editing monitoring settings includes adding the VM extension to VMs; reading storage account keys to be able to configure collection of logs from Azure Storage; adding solutions; and configuring Azure diagnostics on all Azure resources.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293",
  "name": "92aaf0da-9dab-42b6-94a3-d43ce8d16293",
  "permissions": [
    {
      "actions": [
        "*/read",
        "Microsoft.ClassicCompute/virtualMachines/extensions/*",
        "Microsoft.ClassicStorage/storageAccounts/listKeys/action",
        "Microsoft.Compute/virtualMachines/extensions/*",
        "Microsoft.HybridCompute/machines/extensions/write",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.Insights/diagnosticSettings/*",
        "Microsoft.OperationalInsights/*",
        "Microsoft.OperationsManagement/*",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourcegroups/deployments/*",
        "Microsoft.Storage/storageAccounts/listKeys/action",
        "Microsoft.Support/*"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Log Analytics Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Log Analytics 讀者

Log Analytics 讀者可以檢視和搜尋所有監視數據，以及檢視監視設定，包括檢視所有 Azure 資源的 Azure 診斷設定。

深入了解

動作	描述
*/read	讀取除了秘密以外的所有類型的資源。
Microsoft.OperationalInsights/workspaces/analytics/query/action	使用新引擎進行搜尋。
Microsoft.OperationalInsights/workspaces/search/action	執行搜尋查詢
Microsoft.Support/*	建立和更新支援票證
NotActions
Microsoft.OperationalInsights/workspaces/sharedKeys/read	擷取工作區的共用金鑰。這些密鑰可用來將 operational Insights 代理程式Microsoft連線到工作區。
DataActions
none
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "Log Analytics Reader can view and search all monitoring data as well as and view monitoring settings, including viewing the configuration of Azure diagnostics on all Azure resources.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/73c42c96-874c-492b-b04d-ab87d138a893",
  "name": "73c42c96-874c-492b-b04d-ab87d138a893",
  "permissions": [
    {
      "actions": [
        "*/read",
        "Microsoft.OperationalInsights/workspaces/analytics/query/action",
        "Microsoft.OperationalInsights/workspaces/search/action",
        "Microsoft.Support/*"
      ],
      "notActions": [
        "Microsoft.OperationalInsights/workspaces/sharedKeys/read"
      ],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Log Analytics Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

架構登入參與者（預覽）

讀取、寫入及刪除結構描述登錄群組和結構描述。

動作	描述
Microsoft.EventHub/namespaces/schemagroups/*
NotActions
none
DataActions
Microsoft.EventHub/namespaces/schemas/*
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "Read, write, and delete Schema Registry groups and schemas.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/5dffeca3-4936-4216-b2bc-10343a5abb25",
  "name": "5dffeca3-4936-4216-b2bc-10343a5abb25",
  "permissions": [
    {
      "actions": [
        "Microsoft.EventHub/namespaces/schemagroups/*"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.EventHub/namespaces/schemas/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Schema Registry Contributor (Preview)",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

架構登入讀取器（預覽）

讀取並列出結構描述登錄群組和結構描述。

動作	描述
Microsoft.EventHub/namespaces/schemagroups/read	取得 SchemaGroup 資源描述的清單
NotActions
none
DataActions
Microsoft.EventHub/namespaces/schemas/read	擷取架構
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "Read and list Schema Registry groups and schemas.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/2c56ea50-c6b3-40a6-83c0-9d98858bc7d2",
  "name": "2c56ea50-c6b3-40a6-83c0-9d98858bc7d2",
  "permissions": [
    {
      "actions": [
        "Microsoft.EventHub/namespaces/schemagroups/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.EventHub/namespaces/schemas/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Schema Registry Reader (Preview)",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

串流分析查詢測試人員

可讓您先執行查詢測試，而不需先建立串流分析作業

動作	描述
Microsoft.StreamAnalytics/locations/TestQuery/action	串流分析資源提供者的測試查詢
Microsoft.StreamAnalytics/locations/OperationResults/read	讀取串流分析作業結果
Microsoft.StreamAnalytics/locations/SampleInput/action	串流分析資源提供者的範例輸入
Microsoft.StreamAnalytics/locations/CompileQuery/action	編譯串流分析資源提供者的查詢
NotActions
none
DataActions
none
NotDataActions
none

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you perform query testing without creating a stream analytics job first",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/1ec5b3c1-b17e-4e25-8312-2acb3c3c5abf",
  "name": "1ec5b3c1-b17e-4e25-8312-2acb3c3c5abf",
  "permissions": [
    {
      "actions": [
        "Microsoft.StreamAnalytics/locations/TestQuery/action",
        "Microsoft.StreamAnalytics/locations/OperationResults/read",
        "Microsoft.StreamAnalytics/locations/SampleInput/action",
        "Microsoft.StreamAnalytics/locations/CompileQuery/action"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Stream Analytics Query Tester",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

下一步

使用 Azure 入口網站指派 Azure 角色

共用方式為

適用於分析的 Azure 內建角色

Azure 事件中樞資料擁有者

Azure 事件中樞資料接收者

Azure 事件中樞資料傳送者

Data Factory 參與者

資料清除者

HDInsight 叢集操作員

HDInsight 網域服務參與者

AKS 上的 HDInsight 叢集管理員

AKS 上的 HDInsight 叢集集區管理員

Log Analytics 參與者

Log Analytics 讀者

架構登入參與者（預覽）

架構登入讀取器（預覽）

串流分析查詢測試人員

下一步

意見反應

其他資源

共用方式為

適用於分析的 Azure 內建角色

Azure 事件中樞資料擁有者

Azure 事件中樞資料接收者

Azure 事件中樞資料傳送者

Data Factory 參與者

資料清除者

HDInsight 叢集操作員

HDInsight 網域服務參與者

AKS 上的 HDInsight 叢集管理員

AKS 上的 HDInsight 叢集集區管理員

Log Analytics 參與者

Log Analytics 讀者

架構登入參與者 （預覽）

架構登入讀取器 （預覽）

串流分析查詢測試人員

下一步

意見反應

其他資源

架構登入參與者（預覽）

架構登入讀取器（預覽）