Lets you submit, monitor, and manage your own jobs but not create or delete Data Lake Analytics accounts. Lets you manage Data Box Service except creating order or editing order details and giving access to others. Lets you manage everything under Data Box Service except giving access to others. Lets you manage classic storage accounts, but not access to them.Ĭlassic Storage Account Key Operator Service RoleĬlassic Storage Account Key Operators are allowed to list and regenerate keys on Classic Storage Accounts Lets you manage backup services, except removal of backup, vault creation and giving access to othersĬan view backup services, but can't make changes Lets you manage backup service, but can't create vaults and give access to others Used by the Avere vFXT cluster to manage the cluster Lets you manage Traffic Manager profiles, but does not let you control who has access to them.Ĭan create and manage an Avere vFXT cluster. Lets you manage private DNS zone resources, but not the virtual networks they are linked to. Lets you manage networks, but not access to them. Lets you manage DNS zones and record sets in Azure DNS, but does not let you control who has access to them. Lets you manage classic networks, but not access to them. View Virtual Machines in the portal and login as a regular user.Ĭan manage CDN endpoints, but can't grant access to other users.Ĭan view CDN endpoints, but can't make changes.Ĭan manage CDN profiles and their endpoints, but can't grant access to other users.Ĭan view CDN profiles and their endpoints, but can't make changes. This role does not allow you to assign roles in Azure RBAC. This role does not grant you management access to the virtual network or storage account the virtual machines are connected to.
#GANTTPROJECT CREATE RESOURCE ROLES INSTALL#
View Virtual Machines in the portal and login as administratorĬreate and manage virtual machines, manage disks, install and run software, reset password of the root user of the virtual machine using VM extensions, and manage local user accounts using VM extensions. Provides permission to backup vault to manage disk snapshots. Provides permission to backup vault to perform disk restore. Provide permission to StoragePool Resource Provider to manage disks added to a disk pool. Provides permission to backup vault to perform disk backup. Provides permissions to upload data to empty managed disks, read, or export data of managed disks (not attached to running VMs) and snapshots using SAS URIs and Azure AD authentication.
Lets you manage classic virtual machines, but not access to them, and not the virtual network or storage account they're connected to. Lets you manage user access to Azure resources. View all resources, but does not allow you to make any changes.
#GANTTPROJECT CREATE RESOURCE ROLES FULL#
Grants full access to manage all resources, including the ability to assign roles in Azure RBAC. Grants full access to manage all resources, but does not allow you to assign roles in Azure RBAC, manage assignments in Azure Blueprints, or share image galleries.