Permissions for @turbot/azure-network
Taking a look at permissions and associated grant levels for each permission for Network:
| Permission | Grant Level | Help |
|---|---|---|
| microsoft.network/bgpservicecommunities/read | Metadata | Get Bgp Service Communities |
| microsoft.network/locations/virtualnetworkavailableendpointservices/read | Metadata | Get available Virtual Network Endpoint Services |
| microsoft.network/locations/availabledelegations/read | Metadata | Get Available Delegations |
| microsoft.network/locations/supportedvirtualmachinesizes/read | Metadata | Get supported virtual machines sizes |
| microsoft.network/locations/checkacceleratednetworkingsupport/action | Metadata | Check Accelerated Networking support |
| microsoft.network/locations/checkprivatelinkservicevisibility/action | Metadata | Check Private Link Service Visibility |
| microsoft.network/locations/validateresourceownership/action | Metadata | Validate Resource Ownership |
| microsoft.network/locations/setresourceownership/action | Metadata | Set Resource Ownership |
| microsoft.network/locations/effectiveresourceownership/action | Metadata | Get Effective Resource Ownership |
| microsoft.network/locations/baremetaltenants/action | Metadata | Allocate or validate a Bare Metal Tenant |
| microsoft.network/routefilters/read | Metadata | Get Route Filter |
| microsoft.network/routefilters/join/action | Admin | Join Route Filter |
| microsoft.network/routefilters/delete | Admin | Delete Route Filter. This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/routefilters/write | Admin | Create or Update Route Filter |
| microsoft.network/routefilters/routefilterrules/read | Metadata | Get Route Filter Rule |
| microsoft.network/routefilters/routefilterrules/write | Admin | Create or Update Route Filter Rule |
| microsoft.network/routefilters/routefilterrules/delete | Admin | Admin can Delete Route filter rule. |
| microsoft.network/virtualnetworks/read | Metadata | Get Virtual Network |
| microsoft.network/virtualnetworks/write | Admin | Create or Update Virtual Network. This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/virtualnetworks/delete | Admin | Delete Virtual Network. This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/virtualnetworks/peer/action | Admin | Peer Virtual Networks. This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/virtualnetworks/join/action | Metadata | Join Virtual Network. |
| microsoft.network/virtualnetworks/bastionhosts/action | Metadata | Get Bastion Host associated with the Virtual Network. |
| microsoft.network/virtualnetworks/virtualmachines/read | Metadata | Get Virtual Network Virtual Machines |
| microsoft.network/virtualnetworks/subnets/read | Metadata | Get Virtual Network Subnet |
| microsoft.network/virtualnetworks/subnets/write | Admin | Create or Update Virtual Network Subnet. This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/virtualnetworks/subnets/delete | Admin | Delete Virtual Network Subnet. This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/virtualnetworks/subnets/join/action | Admin | Join Virtual Network. |
| microsoft.network/virtualnetworks/subnets/joinviaserviceendpoint/action | Admin | Join Service to a Subnet |
| microsoft.network/virtualnetworks/subnets/preparenetworkpolicies/action | Metadata | Prepares a subnet by applying necessary Network Policies |
| microsoft.network/virtualnetworks/virtualnetworkpeerings/read | Metadata | Get Virtual Network Peering |
| microsoft.network/virtualnetworks/virtualnetworkpeerings/write | Admin | Create or Update Virtual Network Peering. This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/virtualnetworks/virtualnetworkpeerings/delete | Admin | Delete Virtual Network Peering. This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/virtualnetworks/remotevirtualnetworkpeeringproxies/read | Metadata | Get Virtual Network Peering Proxy |
| microsoft.network/virtualnetworks/remotevirtualnetworkpeeringproxies/write | Admin | Create or Update Virtual Network Peering Proxy. This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/virtualnetworks/remotevirtualnetworkpeeringproxies/delete | Admin | Delete Virtual Network Peering Proxy. This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/virtualnetworks/subnets/resourcenavigationlinks/read | Metadata | Get Resource Navigation Link |
| microsoft.network/virtualnetworks/subnets/resourcenavigationlinks/write | Admin | Create or Update Resource Navigation Link |
| microsoft.network/virtualnetworks/subnets/resourcenavigationlinks/delete | Admin | Delete Resource Navigation Link |
| microsoft.network/virtualnetworks/subnets/serviceassociationlinks/read | Metadata | Get Service Association Link |
| microsoft.network/virtualnetworks/subnets/serviceassociationlinks/write | Admin | Creates or updates a Service Association Link |
| microsoft.network/virtualnetworks/subnets/serviceassociationlinks/delete | Admin | Delete Service Association Link |
| microsoft.network/virtualnetworks/subnets/serviceassociationlinks/validate/action | Metadata | Validate Service Association Link |
| microsoft.network/virtualnetworks/subnets/serviceassociationlinks/details/read | Metadata | Get Service Association Link Detail |
| microsoft.network/virtualnetworks/taggedtrafficconsumers/read | Metadata | Get Tagged Traffic Consumer |
| microsoft.network/virtualnetworks/taggedtrafficconsumers/write | Admin | Create or Update Tagged Traffic Consumer |
| microsoft.network/virtualnetworks/taggedtrafficconsumers/delete | Admin | Delete Tagged Traffic Consumer |
| microsoft.network/virtualnetworks/taggedtrafficconsumers/validate/action | Admin | Validate Tagged Traffic Consumer |
| microsoft.network/virtualnetworks/checkipaddressavailability/read | Metadata | Check Ip Address Availability |
| microsoft.network/virtualnetworks/usages/read | Metadata | Get Virtual Network Usages |
| microsoft.network/virtualnetworks/subnets/virtualmachines/read | Metadata | Get Virtual Network Subnet Virtual Machines |
| microsoft.network/networkwatchers/read | Metadata | Get Network Watcher |
| microsoft.network/networkwatchers/write | Admin | Admin can create or update network watcher |
| microsoft.network/networkwatchers/delete | Admin | Delete Network Watcher |
| microsoft.network/networkwatchers/configureflowlog/action | Admin | Admin can Configure Flow Log |
| microsoft.network/networkwatchers/ipflowverify/action | Admin | Verify Ip Flow |
| microsoft.network/networkwatchers/nexthop/action | Operator | For a specified target and destination IP address return the next hop type and next hope IP address. |
| microsoft.network/networkwatchers/queryflowlogstatus/action | ReadOnly | Gets the status of flow logging on a resource. |
| microsoft.network/networkwatchers/querytroubleshootresult/action | Operator | Gets the troubleshooting result from the previously run or currently running troubleshooting operation |
| microsoft.network/networkwatchers/securitygroupview/action | ReadOnly | View the configured and effective network security group rules applied on a VM. |
| microsoft.network/networkwatchers/networkconfigurationdiagnostic/action | Metadata | Network Configuration Diagnostic |
| microsoft.network/networkwatchers/queryconnectionmonitors/action | Metadata | Query Connection Monitors |
| microsoft.network/networkwatchers/topology/action | ReadOnly | Gets a network level view of resources and their relationships in a resource group. |
| microsoft.network/networkwatchers/troubleshoot/action | Operator | Starts troubleshooting on a Networking resource in Azure. |
| microsoft.network/networkwatchers/connectivitycheck/action | Metadata | Check Connectivity |
| microsoft.network/networkwatchers/azurereachabilityreport/action | Metadata | Get Azure Reachability Report |
| microsoft.network/networkwatchers/availableproviderslist/action | Metadata | Get Available Providers List |
| microsoft.network/networkwatchers/packetcaptures/querystatus/action | Metadata | Gets information about properties and status of a packet capture resource. |
| microsoft.network/networkwatchers/packetcaptures/stop/action | Operator | Stop Packet Capture |
| microsoft.network/networkwatchers/packetcaptures/read | Metadata | Get Packet Capture |
| microsoft.network/networkwatchers/packetcaptures/write | Operator | Operator can create packet capture |
| microsoft.network/networkwatchers/packetcaptures/delete | Operator | Operator can delete packet capture |
| microsoft.network/networkwatchers/connectionmonitors/start/action | Metadata | Start Connection Monitor |
| microsoft.network/networkwatchers/connectionmonitors/stop/action | Metadata | Stop Connection Monitor |
| microsoft.network/networkwatchers/connectionmonitors/query/action | Metadata | Query Connection Monitor |
| microsoft.network/networkwatchers/connectionmonitors/read | Metadata | Get Connection Monitor |
| microsoft.network/networkwatchers/connectionmonitors/write | Admin | Create Connection Monitor |
| microsoft.network/networkwatchers/connectionmonitors/delete | Admin | Delete Connection Monitor |
| microsoft.network/networkwatchers/lenses/start/action | Metadata | Start Lens |
| microsoft.network/networkwatchers/lenses/stop/action | Metadata | Stop Lens |
| microsoft.network/networkwatchers/lenses/query/action | Metadata | Query Lens |
| microsoft.network/networkwatchers/lenses/read | Metadata | Get Lens |
| microsoft.network/networkwatchers/lenses/write | Admin | Create Lens |
| microsoft.network/networkwatchers/lenses/delete | Admin | Delete Lens |
| microsoft.network/publicipaddresses/read | Metadata | Get Public Ip Address |
| microsoft.network/publicipaddresses/write | Admin | Admin can create or update public Ip Address |
| microsoft.network/publicipaddresses/delete | Admin | Admin can delete Public Ip Address |
| microsoft.network/publicipaddresses/join/action | Admin | Admin is allowed to join Public Ip Address |
| microsoft.network/networkinterfaces/read | Metadata | Get Network Interface |
| microsoft.network/networkinterfaces/write | Admin | Create or Update network interface |
| microsoft.network/networkinterfaces/join/action | Admin | Join Virtual Machine to a network interface |
| microsoft.network/networkinterfaces/delete | Admin | Admin can perform delete network interface |
| microsoft.network/networkinterfaces/effectiveroutetable/action | Admin | Get Network Interface Effective Route Table |
| microsoft.network/networkinterfaces/effectivenetworksecuritygroups/action | Metadata | Get Network Security Groups configured On Network Interface Of The Vm |
| microsoft.network/networkinterfaces/ipconfigurations/read | Metadata | Get Network Interface IP Configuration |
| microsoft.network/networkinterfaces/ipconfigurations/join/action | Metadata | Join Network Interface IP Configuration. |
| microsoft.network/networkinterfaces/loadbalancers/read | Metadata | Get Network Interface Load Balancers |
| microsoft.network/serviceendpointpolicies/read | Metadata | Gets a Service Endpoint Policy |
| microsoft.network/serviceendpointpolicies/write | Admin | Create or Update Service Endpoint Policy |
| microsoft.network/serviceendpointpolicies/delete | Admin | Delete Service Endpoint Policy |
| microsoft.network/serviceendpointpolicies/join/action | Metadata | Join Service Endpoint Policy |
| microsoft.network/serviceendpointpolicies/joinsubnet/action | Metadata | Join Subnet To Service Endpoint Policies |
| microsoft.network/serviceendpointpolicies/serviceendpointpolicydefinitions/read | Metadata | Get Service Endpoint Policy Definition |
| microsoft.network/serviceendpointpolicies/serviceendpointpolicydefinitions/write | Admin | Create or Update Service Endpoint Policy Definition |
| microsoft.network/serviceendpointpolicies/serviceendpointpolicydefinitions/delete | Admin | Delete Service Endpoint Policy Definition |
| microsoft.network/networkinterfaces/diagnosticidentity/read | Metadata | Get diagnostic identity |
| microsoft.network/networkinterfaces/providers/microsoft.insights/metricdefinitions/read | Metadata | Read Network Interface metric definitions |
| microsoft.network/networksecuritygroups/read | Metadata | Get Network Security Group |
| microsoft.network/networksecuritygroups/write | Admin | Create or Update Network Security Group. This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/networksecuritygroups/delete | Admin | Delete Network Security Group. This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/networksecuritygroups/join/action | Admin | Join Network Security Group |
| microsoft.network/applicationsecuritygroups/joinipconfiguration/action | Metadata | Join IpConfiguration To Application Security Groups. |
| microsoft.network/applicationsecuritygroups/joinnetworksecurityrule/action | Metadata | Joins SecurityRule To Application Security Groups. |
| microsoft.network/applicationsecuritygroups/read | Metadata | Gets An Application Security Group |
| microsoft.network/applicationsecuritygroups/write | Admin | Creates An Application Security Group Or Updates An Existing Application Security Group |
| microsoft.network/applicationsecuritygroups/delete | Admin | Deletes An Application Security Group |
| microsoft.network/applicationsecuritygroups/listipconfigurations/action | Metadata | List IP Configurations with ApplicationSecurityGroup |
| microsoft.network/networksecuritygroups/defaultsecurityrules/read | Metadata | Get Default Security Rule |
| microsoft.network/networksecuritygroups/securityrules/read | Metadata | Get Security Rule |
| microsoft.network/networksecuritygroups/securityrules/write | Admin | Create or Update Security Rule. This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/networksecuritygroups/securityrules/delete | Admin | Delete Security Rule. This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/routetables/read | Metadata | Get Route Table |
| microsoft.network/routetables/write | Admin | Create or Update Route Table. This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/routetables/delete | Admin | Delete Route Table. This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/routetables/join/action | Admin | Admin can join route table |
| microsoft.network/routetables/routes/read | Metadata | Get Route |
| microsoft.network/routetables/routes/write | Admin | Create or Update route.This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/routetables/routes/delete | Admin | Delete route.This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/loadbalancers/read | Metadata | Get Load Balancer |
| microsoft.network/loadbalancers/write | Admin | Create or Update Load Balancer |
| microsoft.network/loadbalancers/delete | Admin | Delete Load Balancer |
| microsoft.network/loadbalancers/virtualmachines/read | Metadata | Get Load Balancer Virtual Machines |
| microsoft.network/loadbalancers/networkinterfaces/read | Metadata | Get Load Balancer Network Interfaces |
| microsoft.network/loadbalancers/frontendipconfigurations/read | Metadata | Get Load Balancer Frontend IP Configuration |
| microsoft.network/loadbalancers/frontendipconfigurations/join/action | Metadata | Join Load Balancer Frontend IP Configuration. |
| microsoft.network/loadbalancers/backendaddresspools/read | Metadata | Get Load Balancer Backend Address Pool |
| microsoft.network/loadbalancers/backendaddresspools/join/action | Admin | Admin can join Load Balancer Backend Address Pool |
| microsoft.network/loadbalancers/inboundnatrules/read | Metadata | Get Load Balancer Inbound Nat Rule |
| microsoft.network/loadbalancers/inboundnatrules/write | Admin | Create or Update Load Balancer Inbound Nat Rule |
| microsoft.network/loadbalancers/inboundnatrules/delete | Admin | Delete Load Balancer Inbound Nat Rule |
| microsoft.network/loadbalancers/inboundnatrules/join/action | Admin | Admin can join load balancer nat rule. |
| microsoft.network/loadbalancers/inboundnatpools/read | Metadata | Get Load Balancer Inbound Nat Pool |
| microsoft.network/loadbalancers/inboundnatpools/join/action | Admin | Join Load Balancer Inbound Nat Pool |
| microsoft.network/loadbalancers/loadbalancingrules/read | Metadata | Get provides load balancer load balancing rule. |
| microsoft.network/loadbalancers/probes/read | Metadata | Get Load Balancer Probe |
| microsoft.network/loadbalancers/probes/join/action | Metadata | Join Load Balancer Probe |
| microsoft.network/loadbalancers/providers/microsoft.insights/metricdefinitions/read | Metadata | Read Load Balancer metric definitions |
| microsoft.network/applicationgateways/read | Metadata | Get Application Gateway. |
| microsoft.network/applicationgateways/write | Admin | Create or Update Application Gateway. This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/applicationgateways/delete | Admin | Delete Application Gateway. This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/applicationgateways/backendhealth/action | ReadOnly | Get an application gateway backend health |
| microsoft.network/applicationgateways/getbackendhealthondemand/action | Metadata | Get an application gateway backend health on demand |
| microsoft.network/applicationgateways/start/action | Operator | Start an application gateway |
| microsoft.network/applicationgateways/stop/action | Operator | Stop an application gateway |
| microsoft.network/applicationgateways/setsecuritycenterconfiguration/action | Admin | Set Application Gateway SecurityCenter Configuration |
| microsoft.network/applicationgateways/effectivenetworksecuritygroups/action | Metadata | Get Effective Security Groups of an Application Gateway |
| microsoft.network/applicationgateways/effectiveroutetable/action | Metadata | Get Effective Route Table of an Application Gateway |
| microsoft.network/applicationgateways/backendaddresspools/join/action | Admin | Join Application Gateway Backend Address Pool |
| microsoft.network/applicationgatewayavailablewafrulesets/read | Metadata | Get Application Gateway Available Waf Rule Sets |
| microsoft.network/applicationgatewayavailablessloptions/read | Metadata | Application Gateway available Ssl Options |
| microsoft.network/applicationgatewayavailablessloptions/predefinedpolicies/read | Metadata | Application Gateway Ssl Predefined Policy |
| microsoft.network/locations/checkdnsnameavailability/read | Metadata | Check Dns name availability |
| microsoft.network/trafficmanagerprofiles/read | Metadata | Get Traffic Manager Profile |
| microsoft.network/trafficmanagerprofiles/write | Admin | Create or Update Traffic Manager Profile |
| microsoft.network/trafficmanagerprofiles/delete | Admin | Delete Traffic Manager Profile |
| microsoft.network/trafficmanagergeographichierarchies/read | Metadata | Get Traffic Manager Geographic Hierarchy |
| microsoft.network/trafficmanagerprofiles/heatmaps/read | Metadata | Get Traffic Manager Heat Map |
| microsoft.network/trafficmanagerprofiles/azureendpoints/read | Metadata | Get a Traffic Manager Azure Endpoint |
| microsoft.network/trafficmanagerprofiles/azureendpoints/write | Admin | Create or Update a Traffic Manager Azure Endpoint |
| microsoft.network/trafficmanagerprofiles/azureendpoints/delete | Admin | Delete a Traffic Manager Azure Endpoint |
| microsoft.network/trafficmanagerprofiles/externalendpoints/read | Metadata | Get a Traffic Manager External Endpoint |
| microsoft.network/trafficmanagerprofiles/externalendpoints/write | Admin | Create or Update a Traffic Manager External Endpoint |
| microsoft.network/trafficmanagerprofiles/externalendpoints/delete | Admin | Delete a Traffic Manager External Endpoint |
| microsoft.network/trafficmanagerprofiles/nestedendpoints/read | Metadata | Get a Traffic Manager Nested Endpoint |
| microsoft.network/trafficmanagerprofiles/nestedendpoints/write | Admin | Create a Traffic Manager profile or modify the configuration of an existing Traffic Manager profile. This includes enabling or disabling a profile and modifying DNS settings / traffic routing settings or endpoint monitoring settings. Endpoints routed by the Traffic Manager profile can be added/removed enabled or disabled. |
| microsoft.network/trafficmanagerprofiles/nestedendpoints/delete | Admin | Delete a Traffic Manager Nested Endpoint |
| microsoft.network/trafficmanagerusermetricskeys/read | Metadata | Get the subscription-level key used for Realtime User Metrics collection. |
| microsoft.network/trafficmanagerusermetricskeys/write | Admin | Create or update a subscription-level key used for Realtime User Metrics collection. |
| microsoft.network/trafficmanagerusermetricskeys/delete | Admin | Delete a subscription-level key used for Realtime User Metrics collection. |
| microsoft.network/dnszones/read | Metadata | Get DNS Zone |
| microsoft.network/dnszones/write | Admin | Create or Update DNS Zone |
| microsoft.network/dnszones/delete | Admin | Delete DNS Zone |
| microsoft.network/dnszones/providers/microsoft.insights/metricdefinitions/read | Metadata | Get DNS zone metric definitions |
| microsoft.network/dnszones/providers/microsoft.insights/diagnosticsettings/read | Metadata | Get DNS zone diagnostic settings |
| microsoft.network/dnszones/providers/microsoft.insights/diagnosticsettings/write | Admin | Create or update DNS zone diagnostic settings |
| microsoft.network/dnsoperationresults/read | Metadata | Gets results of a DNS operation |
| microsoft.network/dnsoperationstatuses/read | Metadata | Gets status of a DNS operation |
| microsoft.network/dnszones/all/read | Metadata | Gets DNS record sets across types |
| microsoft.network/dnszones/recordsets/read | Metadata | Gets DNS record sets across types |
| microsoft.network/dnszones/a/read | Metadata | Get record set of type A |
| microsoft.network/dnszones/a/write | Admin | Create or update record set of type A |
| microsoft.network/dnszones/a/delete | Admin | Delete record set of type A |
| microsoft.network/dnszones/aaaa/read | Metadata | Get record set of type AAAA |
| microsoft.network/dnszones/aaaa/write | Admin | Create or update record set of type AAAA |
| microsoft.network/dnszones/aaaa/delete | Admin | Delete record set of type AAAA |
| microsoft.network/dnszones/ptr/read | Metadata | Get record set of type PTR |
| microsoft.network/dnszones/ptr/write | Admin | Create or update record set of type PTR |
| microsoft.network/dnszones/ptr/delete | Admin | Delete record set of type PTR |
| microsoft.network/dnszones/mx/read | Metadata | Get record set of type MX |
| microsoft.network/dnszones/mx/write | Admin | Create or update record set of type MX |
| microsoft.network/dnszones/mx/delete | Admin | Delete record set of type MX |
| microsoft.network/dnszones/txt/read | Metadata | Get record set of type TXT |
| microsoft.network/dnszones/txt/write | Admin | Create or update record set of type TXT |
| microsoft.network/dnszones/txt/delete | Admin | Delete record set of type TXT |
| microsoft.network/dnszones/srv/read | Metadata | Get record set of type SRV |
| microsoft.network/dnszones/srv/write | Admin | Create or update a record set of type ‘SRV’ within a DNS zone. The records specified will replace the current records in the record set. |
| microsoft.network/dnszones/srv/delete | Admin | Delete record set of type SRV |
| microsoft.network/dnszones/cname/read | Metadata | Get record set of type CNAME |
| microsoft.network/dnszones/cname/write | Admin | Create or update record set of type CNAME |
| microsoft.network/dnszones/cname/delete | Admin | Delete record set of type CNAME |
| microsoft.network/dnszones/ns/read | Metadata | Gets DNS record set of type NS |
| microsoft.network/dnszones/ns/write | Admin | Creates or updates DNS record set of type NS |
| microsoft.network/dnszones/ns/delete | Admin | Deletes the DNS record set of type NS |
| microsoft.network/dnszones/soa/read | Metadata | Gets DNS record set of type SOA |
| microsoft.network/dnszones/soa/write | Admin | Creates or updates DNS record set of type SOA |
| microsoft.network/dnszones/caa/read | Metadata | Get record set of type CAA |
| microsoft.network/dnszones/caa/write | Admin | Create or update record set of type CAA |
| microsoft.network/dnszones/caa/delete | Admin | Delete record set of type CAA |
| microsoft.network/locations/usages/read | Metadata | Get Usage Metric |
| microsoft.network/operations/read | Metadata | Get Available Operations |
| microsoft.network/locations/operations/read | Metadata | Get Operation Resource |
| microsoft.network/locations/operationresults/read | Metadata | Get Operation Result |
| microsoft.network/networksecuritygroups/providers/microsoft.insights/diagnosticsettings/read | Metadata | Get Network Security Groups Diagnostic Settings |
| microsoft.network/networksecuritygroups/providers/microsoft.insights/diagnosticsettings/write | Admin | Create or update Network Security Groups diagnostic settings |
| microsoft.network/networksecuritygroups/providers/microsoft.insights/logdefinitions/read | Metadata | Get Network Security Group Event Log Definitions |
| microsoft.network/loadbalancers/providers/microsoft.insights/diagnosticsettings/read | Metadata | Get Load Balancer Diagnostic Settings |
| microsoft.network/loadbalancers/providers/microsoft.insights/diagnosticsettings/write | Admin | Admin create or update Load balancer diagnostic Settings |
| microsoft.network/loadbalancers/providers/microsoft.insights/logdefinitions/read | Metadata | Get Load Balancer Event Log Definitions |
| microsoft.network/publicipaddresses/providers/microsoft.insights/diagnosticsettings/read | Metadata | Get diagnostic settings of Public IP Address |
| microsoft.network/publicipaddresses/providers/microsoft.insights/diagnosticsettings/write | Admin | Create or update diagnostic settings of Public IP Address |
| microsoft.network/publicipaddresses/providers/microsoft.insights/metricdefinitions/read | Metadata | Get metrics definitions of Public IP Address |
| microsoft.network/publicipaddresses/providers/microsoft.insights/logdefinitions/read | Metadata | Get log definitions of Public IP Address |
| microsoft.network/virtualnetworks/customviews/read | Metadata | Get Virtual Network custom view definition |
| microsoft.network/virtualnetworks/customviews/get/action | Metadata | Get Virtual network custom view content |
| microsoft.network/virtualnetworks/providers/microsoft.insights/diagnosticsettings/read | Metadata | Get diagnostic settings of Virtual Network |
| microsoft.network/virtualnetworks/providers/microsoft.insights/diagnosticsettings/write | Admin | Create or update diagnostic settings of the Virtual Network |
| microsoft.network/virtualnetworks/providers/microsoft.insights/logdefinitions/read | Metadata | Get log definitions of Virtual Network |
| microsoft.network/applicationgateways/providers/microsoft.insights/logdefinitions/read | ReadOnly | Gets the logs for Application Gateway |
| microsoft.network/applicationgateways/providers/microsoft.insights/metricdefinitions/read | Metadata | Read Application Gateway metric definitions |
| microsoft.network/virtualnetworkgateways/providers/microsoft.insights/metricdefinitions/read | Metadata | Read Virtual Network Gateway metric definitions |
| microsoft.network/virtualnetworkgateways/providers/microsoft.insights/logdefinitions/read | Metadata | Gets Virtual Network Gateway Log Definitions |
| microsoft.network/virtualnetworkgateways/providers/microsoft.insights/diagnosticsettings/read | Metadata | Get Virtual Network Gateway Diagnostic Settings |
| microsoft.network/virtualnetworkgateways/providers/microsoft.insights/diagnosticsettings/write | Admin | Create or update Virtual Network Gateway diagnostic settings |
| microsoft.network/expressroutecircuits/read | Metadata | Gets ExpressRouteCircuit |
| microsoft.network/expressroutecircuits/write | Admin | Create or Update ExpressRouteCircuit. Will be denied when explicit deny is available. |
| microsoft.network/expressroutecircuits/join/action | Metadata | Join Express Route Circuit |
| microsoft.network/expressroutecircuits/delete | Admin | Deletes ExpressRouteCircuit |
| microsoft.network/expressroutecircuits/stats/read | Metadata | Get an ExpressRouteCircuit Stat |
| microsoft.network/expressroutecircuits/authorizations/read | Metadata | Get an ExpressRouteCircuit Authorization |
| microsoft.network/expressroutecircuits/authorizations/write | Admin | Create or update an existing ExpressRouteCircuit Authorization. This Will be denied when explicit deny is available. |
| microsoft.network/expressroutecircuits/authorizations/delete | Admin | Delete ExpressRouteCircuit Authorization. This Will be denied when explicit deny is available. |
| microsoft.network/expressroutecircuits/peerings/read | Metadata | Get ExpressRouteCircuit Peering |
| microsoft.network/expressroutecircuits/peerings/write | Admin | Create or update ExpressRouteCircuit Peering. This will be denied when azure explicit deny is available. |
| microsoft.network/expressroutecircuits/peerings/delete | Admin | Delete ExpressRouteCircuit Peering. This Will be whitelisted/denied when explicit deny is available. |
| microsoft.network/expressroutecircuits/peerings/stats/read | Metadata | Get ExpressRouteCircuit Peering Stat |
| microsoft.network/expressroutecircuits/peerings/connections/read | Metadata | Get ExpressRouteCircuit Connection |
| microsoft.network/expressroutecircuits/peerings/connections/write | Admin | Create or update ExpressRouteCircuit Connection |
| microsoft.network/expressroutecircuits/peerings/connections/delete | Admin | Delete ExpressRouteCircuit Connection |
| microsoft.network/expressroutecircuits/providers/microsoft.insights/metricdefinitions/read | Metadata | Gets the metric definitions for ExpressRoute Circuits |
| microsoft.network/trafficmanagerprofiles/providers/microsoft.insights/metricdefinitions/read | Metadata | Read Traffic Manager metric definitions |
| microsoft.network/trafficmanagerprofiles/providers/microsoft.insights/logdefinitions/read | ReadOnly | Get Traffic Manager Event Log Definitions |
| microsoft.network/trafficmanagerprofiles/providers/microsoft.insights/diagnosticsettings/read | Metadata | Get Traffic Manager Diagnostic Settings |
| microsoft.network/trafficmanagerprofiles/providers/microsoft.insights/diagnosticsettings/write | Admin | Create or update Traffic Manager diagnostic settings |
| microsoft.network/expressroutecircuits/providers/microsoft.insights/logdefinitions/read | Metadata | Get the logs for ExpressRoute Circuits |
| microsoft.network/expressroutecircuits/providers/microsoft.insights/diagnosticsettings/read | Metadata | Gets diagnostic settings for ExpressRoute Circuits |
| microsoft.network/expressroutecircuits/providers/microsoft.insights/diagnosticsettings/write | Admin | Create or update diagnostic settings for ExpressRoute Circuits |
| microsoft.network/expressrouteserviceproviders/read | Metadata | Get Express Route Service Provider |
| microsoft.network/connections/read | Metadata | Get VirtualNetworkGatewayConnection. |
| microsoft.network/connections/write | Admin | Create or update VirtualNetworkGatewayConnection. This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/connections/delete | Admin | Delete VirtualNetworkGatewayConnection. This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/connections/sharedkey/action | Admin | Admin can perform sharedkey action. |
| microsoft.network/connections/vpndeviceconfigurationscript/action | Metadata | Gets Vpn Device Configuration of VirtualNetworkGatewayConnection |
| microsoft.network/connections/revoke/action | Metadata | Marks an Exprress Route Connection status as Revoked |
| microsoft.network/connections/sharedkey/read | Metadata | Get VirtualNetworkGatewayConnection SharedKey |
| microsoft.network/connections/sharedkey/write | Admin | Create or update VirtualNetworkGatewayConnection SharedKey |
| microsoft.network/virtualnetworkgateways/supportedvpndevices/action | Metadata | Lists Supported Vpn Devices |
| microsoft.network/virtualnetworkgateways/read | Metadata | Get VirtualNetworkGateway |
| microsoft.network/virtualnetworkgateways/write | Admin | Creates or updates a VirtualNetworkGateway |
| microsoft.network/virtualnetworkgateways/delete | Admin | Deletes a virtualNetworkGateway |
| microsoft.network/virtualnetworkgateways/generatevpnclientpackage/action | Admin | Generate VpnClient package for virtualNetworkGateway |
| microsoft.network/virtualnetworkgateways/generatevpnprofile/action | Metadata | Generate VpnProfile package for VirtualNetworkGateway |
| microsoft.network/virtualnetworkgateways/getvpnclientconnectionhealth/action | Metadata | Get Per Vpn Client Connection Health for VirtualNetworkGateway |
| microsoft.network/virtualnetworkgateways/getvpnprofilepackageurl/action | Metadata | Gets the URL of a pre-generated vpn client profile package |
| microsoft.network/virtualnetworkgateways/setvpnclientipsecparameters/action | Metadata | Set Vpnclient Ipsec parameters for VirtualNetworkGateway P2S client. |
| microsoft.network/virtualnetworkgateways/getvpnclientipsecparameters/action | Metadata | Get Vpnclient Ipsec parameters for VirtualNetworkGateway P2S client. |
| microsoft.network/virtualnetworkgateways/resetvpnclientsharedkey/action | Metadata | Reset Vpnclient shared key for VirtualNetworkGateway P2S client. |
| microsoft.network/virtualnetworkgateways/reset/action | Admin | Resets a virtualNetworkGateway |
| microsoft.network/virtualnetworkgateways/getadvertisedroutes/action | Admin | Gets virtualNetworkGateway advertised routes |
| microsoft.network/virtualnetworkgateways/getbgppeerstatus/action | Admin | Gets virtualNetworkGateway bgp peer status |
| microsoft.network/virtualnetworkgateways/getlearnedroutes/action | Admin | Gets virtualnetworkgateway learned routes |
| microsoft.network/virtualnetworkgateways/connections/read | Metadata | Get VirtualNetworkGatewayConnection |
| microsoft.network/localnetworkgateways/read | Metadata | Get LocalNetworkGateway |
| microsoft.network/localnetworkgateways/write | Admin | Create or update LocalNetworkGateway. This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/localnetworkgateways/delete | Admin | Delete LocalNetworkGateway This action will be whitelisted when azure explicit deny is released. |
| microsoft.network/virtualnetworktaps/read | Metadata | Get Virtual Network Tap |
| microsoft.network/virtualnetworktaps/join/action | Metadata | Join Virtual Network Tap. |
| microsoft.network/virtualnetworktaps/delete | Admin | Delete Virtual Network Tap |
| microsoft.network/virtualnetworktaps/write | Admin | Create or Update Virtual Network Tap |
| microsoft.network/virtualwans/delete | Admin | Deletes a Virtual Wan |
| microsoft.network/virtualwans/read | Metadata | Get a Virtual Wan |
| microsoft.network/virtualwans/write | Admin | Create or update a Virtual Wan |
| microsoft.network/virtualwans/vpnconfiguration/action | Metadata | Gets a Vpn Configuration |
| microsoft.network/virtualwans/vpnsites/read | Metadata | Gets all VPN Sites that reference a Virtual Wan. |
| microsoft.network/virtualwans/virtualhubs/read | Metadata | Gets all Virtual Hubs that reference a Virtual Wan. |
| microsoft.network/vpnsites/read | Metadata | Gets a Vpn Site resource. |
| microsoft.network/vpnsites/write | Admin | Creates or updates a Vpn Site resource. |
| microsoft.network/vpnsites/delete | Admin | Deletes a Vpn Site resource. |
| microsoft.network/virtualhubs/delete | Admin | Deletes a Virtual Hub |
| microsoft.network/virtualhubs/read | Metadata | Get a Virtual Hub |
| microsoft.network/virtualhubs/write | Admin | Create or update a Virtual Hub |
| microsoft.network/virtualhubs/hubvirtualnetworkconnections/read | Metadata | Get a HubVirtualNetworkConnection |
| microsoft.network/virtualhubs/hubvirtualnetworkconnections/write | Admin | Create or update a HubVirtualNetworkConnection |
| microsoft.network/virtualhubs/hubvirtualnetworkconnections/delete | Admin | Deletes a HubVirtualNetworkConnection |
| microsoft.network/expressroutecrossconnections/read | Metadata | Get Express Route Cross Connection |
| microsoft.network/expressroutecrossconnections/write | Admin | Create or Update Express Route Cross Connection |
| microsoft.network/expressroutecrossconnections/delete | Admin | Delete Express Route Cross Connection |
| microsoft.network/expressroutecrossconnections/join/action | Metadata | Join Express Route Cross Connection |
| microsoft.network/expressroutecrossconnections/peerings/read | Metadata | Get Express Route Cross Connection Peering |
| microsoft.network/expressroutecrossconnections/peerings/write | Operator | Create or Update Express Route Cross Connection Peering |
| microsoft.network/expressroutecrossconnections/peerings/delete | Operator | Delete Express Route Cross Connection Peering |
| microsoft.network/networkwatchers/connectionmonitors/providers/microsoft.insights/metricdefinitions/read | Metadata | Read Connection Monitor metric definitions |
| microsoft.network/ddosprotectionplans/read | Metadata | Gets a DDoS Protection Plan |
| microsoft.network/ddosprotectionplans/write | Admin | Creates a DDoS Protection Plan or updates an existing DDoS Protection Plan |
| microsoft.network/ddosprotectionplans/delete | Admin | Deletes a DDoS Protection Plan |
| microsoft.network/ddosprotectionplans/join/action | Metadata | Join DDoS Protection Plan |
| microsoft.network/ddosprotectionplans/ddosprotectionplanproxies/read | Metadata | Get DDoS Protection Plan Proxy |
| microsoft.network/ddosprotectionplans/ddosprotectionplanproxies/write | Admin | Create or update DDoS Protection Plan Proxy |
| microsoft.network/ddosprotectionplans/ddosprotectionplanproxies/delete | Admin | Delete DDoS Protection Plan Proxy |
| microsoft.network/vpngateways/read | Metadata | Get VpnGateway. |
| microsoft.network/vpngateways/write | Admin | Put VpnGateway. |
| microsoft.network/vpngateways/delete | Admin | Delete VpnGateway |
| microsoft.network/vpngateways/reset/action | Metadata | Resets a VpnGateway |
| microsoft.network/vpngateways/listvpnconnectionshealth/action | Metadata | Gets connection health for all or a subset of connections on a VpnGateway |
| microsoft.network/vpngateways/vpnconnections/read | Metadata | Get VpnConnection resource. |
| microsoft.network/vpngateways/vpnconnections/write | Admin | Put VpnConnection resource. |
| microsoft.network/vpngateways/vpnconnections/delete | Admin | Delete VpnConnection. |
| microsoft.network/virtualwans/vpnsiteproxies/read | Metadata | Get Vpn Site proxy |
| microsoft.network/virtualwans/vpnsiteproxies/write | Admin | Create or update Vpn Site proxy |
| microsoft.network/virtualwans/vpnsiteproxies/delete | Admin | Delete Vpn Site proxy |
| microsoft.network/virtualwans/virtualhubproxies/read | Metadata | Get Virtual Hub proxy |
| microsoft.network/virtualwans/virtualhubproxies/write | Admin | Create or update Virtual Hub proxy |
| microsoft.network/virtualwans/virtualhubproxies/delete | Admin | Delete Virtual Hub proxy |
| microsoft.network/expressrouteports/read | Metadata | Gets ExpressRoutePorts |
| microsoft.network/expressrouteports/write | Admin | Creates or updates ExpressRoutePorts |
| microsoft.network/expressrouteports/join/action | Metadata | Joins ExpressRoutePorts |
| microsoft.network/expressrouteports/delete | Admin | Deletes ExpressRoutePorts |
| microsoft.network/expressroutecircuits/peerings/providers/microsoft.insights/metricdefinitions/read | Metadata | Gets the metric definitions for ExpressRoute Circuit Peerings |
| microsoft.network/connections/providers/microsoft.insights/metricdefinitions/read | Metadata | Gets the metric definitions for Connections |
| microsoft.network/connections/providers/microsoft.insights/diagnosticsettings/read | Metadata | Gets diagnostic settings for Connections |
| microsoft.network/connections/providers/microsoft.insights/diagnosticsettings/write | Admin | Create or update diagnostic settings for Connections |
| microsoft.network/expressroutecircuits/peerings/providers/microsoft.insights/diagnosticsettings/read | Metadata | Gets diagnostic settings for ExpressRoute Circuit Peerings |
| microsoft.network/expressroutecircuits/peerings/providers/microsoft.insights/diagnosticsettings/write | Admin | Create or update diagnostic settings for ExpressRoute Circuit Peerings |
| microsoft.network/networkprofiles/read | Metadata | Get Network Profile |
| microsoft.network/networkprofiles/write | Admin | Creates or Updates Network Profile |
| microsoft.network/networkprofiles/delete | Admin | Delete Network Profile |
| microsoft.network/networkprofiles/setcontainers/action | Metadata | Sets containers |
| microsoft.network/networkprofiles/removecontainers/action | Metadata | Removes Containers |
| microsoft.network/networkprofiles/setnetworkinterfaces/action | Metadata | Set Container Network Interfaces |
| microsoft.network/networkintentpolicies/read | Metadata | Gets a Network Intent Policy |
| microsoft.network/networkintentpolicies/write | Admin | Create or Update Network Intent Policy |
| microsoft.network/networkintentpolicies/delete | Admin | Delete Network Intent Policy |
| microsoft.network/loadbalancers/outboundrules/read | Metadata | Get Load Balancer Outbound Rule |
| microsoft.network/publicipprefixes/read | Metadata | Get Public Ip Prefix |
| microsoft.network/publicipprefixes/write | Admin | Creates or Updates a Public Ip Prefix |
| microsoft.network/publicipprefixes/delete | Admin | Delete Public Ip Prefix |
| microsoft.network/publicipprefixes/join/action | Metadata | Join PublicIPPrefix |
| microsoft.network/azurefirewalls/providers/microsoft.insights/metricdefinitions/read | Metadata | Read Azure Firewall metric definitions |
| microsoft.network/azurefirewalls/providers/microsoft.insights/logdefinitions/read | Metadata | Gets the logs for Azure Firewall |
| microsoft.network/expressrouteports/links/read | Metadata | Gets ExpressRouteLink |
| microsoft.network/expressrouteportslocations/read | Metadata | Get Express Route Ports Locations |
| microsoft.network/frontdoors/read | Metadata | Gets a Front Door |
| microsoft.network/frontdoors/write | Admin | Creates or updates a Front Door |
| microsoft.network/frontdoors/delete | Admin | Deletes a Front Door |
| microsoft.network/frontdoors/purge/action | Metadata | Purge cached content from a Front Door |
| microsoft.network/frontdoors/validatecustomdomain/action | Metadata | Validates a frontend endpoint for a Front Door |
| microsoft.network/azurefirewalls/read | Metadata | Get Azure Firewall |
| microsoft.network/azurefirewalls/write | Admin | Creates or updates an Azure Firewall |
| microsoft.network/azurefirewalls/delete | Admin | Delete Azure Firewall |
| microsoft.network/networkwatchers/pingmeshes/start/action | Metadata | Start PingMesh |
| microsoft.network/networkwatchers/pingmeshes/stop/action | Metadata | Stop PingMesh |
| microsoft.network/networkwatchers/pingmeshes/read | Metadata | Get PingMesh |
| microsoft.network/networkwatchers/pingmeshes/write | Admin | Create PingMesh |
| microsoft.network/networkwatchers/pingmeshes/delete | Admin | Delete PingMesh |
| microsoft.network/publicipaddresses/dnsaliases/read | Metadata | Gets a Public Ip Address DNS Alias resource |
| microsoft.network/publicipaddresses/dnsaliases/write | Admin | Create or Update a Public Ip Address Dns Alias |
| microsoft.network/publicipaddresses/dnsaliases/delete | Admin | Deletes a Public Ip Address Dns Alias |
| microsoft.network/virtualnetworks/providers/microsoft.insights/metricdefinitions/read | Metadata | Read PingMesh metric definitions |
| microsoft.network/expressroutegateways/read | Metadata | Get Express Route Gateway |
| microsoft.network/expressroutegateways/write | Admin | Create or Update Express Route Gateway |
| microsoft.network/expressroutegateways/delete | Admin | Delete Express Route Gateway |
| microsoft.network/expressroutegateways/join/action | Metadata | Join Express Route Cross Gateway |
| microsoft.network/expressroutegateways/expressrouteconnections/read | Metadata | Get Express Route Connection |
| microsoft.network/expressroutegateways/expressrouteconnections/write | Admin | Create or Update Express Route Connection |
| microsoft.network/expressroutegateways/expressrouteconnections/delete | Admin | Delete Express Route Connection |
| microsoft.network/networkinterfaces/tapconfigurations/read | Metadata | Get Network Interface Tap Configuration. |
| microsoft.network/networkinterfaces/tapconfigurations/write | Admin | Create or update Network Interface Tap Configuration. |
| microsoft.network/networkinterfaces/tapconfigurations/delete | Admin | Delete Network Interface Tap Configuration. |
| microsoft.network/expressrouteports/providers/microsoft.insights/metricdefinitions/read | Metadata | Gets the metric definitions for ExpressRoute Ports |
| microsoft.network/virtualnetworktaps/networkinterfacetapconfigurationproxies/read | Metadata | Get Network Interface Tap Configuration Proxy. |
| microsoft.network/virtualnetworktaps/networkinterfacetapconfigurationproxies/write | Admin | Create or update Network Interface Tap Configuration Proxy. |
| microsoft.network/virtualnetworktaps/networkinterfacetapconfigurationproxies/delete | Admin | Delete Network Interface Tap Configuration Proxy. |
| microsoft.network/privatelinkservices/read | Metadata | Get an private link service resource. |
| microsoft.network/privatelinkservices/write | Admin | Create or update a private link service. |
| microsoft.network/privatelinkservices/delete | Admin | Delete an private link service. |
| microsoft.network/virtualwans/supportedsecurityproviders/read | Metadata | Gets supported VirtualWan Security Providers. |
| microsoft.network/azurefirewallfqdntags/read | Metadata | Get Azure Firewall FQDN Tags |
| microsoft.network/frontdoors/providers/microsoft.insights/metricdefinitions/read | Metadata | Read Frontdoor metric definitions |
| microsoft.network/frontdoors/providers/microsoft.insights/logdefinitions/read | Metadata | Get Frontdoor logs definitions |
| microsoft.network/frontdoors/providers/microsoft.insights/diagnosticsettings/read | Metadata | Read Frontdoor diagnostic setting |
| microsoft.network/frontdoors/providers/microsoft.insights/diagnosticsettings/write | Admin | Create or update Frontdoor diagnostic setting |
| microsoft.network/p2svpngateways/read | Metadata | Get P2SVpnGateway. |
| microsoft.network/p2svpngateways/write | Admin | Put P2SVpnGateway. |
| microsoft.network/p2svpngateways/delete | Admin | Delete P2SVpnGateway |
| microsoft.network/p2svpngateways/generatevpnprofile/action | Metadata | Generate Vpn Profile for P2SVpnGateway |
| microsoft.network/p2svpngateways/getp2svpnconnectionhealth/action | Metadata | Gets a P2S Vpn Connection helath for P2SVpnGateway |
| microsoft.network/virtualwans/p2svpnserverconfigurations/read | Metadata | Get Virtual Wan P2SVpnServerConfiguration |
| microsoft.network/virtualwans/p2svpnserverconfigurations/write | Admin | Create or Update Virtual Wan P2SVpnServerConfiguration |
| microsoft.network/virtualwans/p2svpnserverconfigurations/delete | Admin | Delete Virtual Wan P2SVpnServerConfiguration |
| microsoft.network/loadbalancers/frontendipconfigurations/loadbalancerpools/read | Metadata | Get load balancer frontend IP address backend pool |
| microsoft.network/loadbalancers/frontendipconfigurations/loadbalancerpools/write | Admin | Create or Update load balancer frontend IP address backend pool |
| microsoft.network/loadbalancers/frontendipconfigurations/loadbalancerpools/delete | Admin | Delete load balancer frontend IP address backend pool |
| microsoft.network/loadbalancers/frontendipconfigurations/loadbalancerpools/join/action | Metadata | Join load balancer frontend IP address backend pool |
| microsoft.network/ddoscustompolicies/read | Metadata | Get DDoS customized policy |
| microsoft.network/ddoscustompolicies/write | Admin | Create or Update a DDoS customized policy |
| microsoft.network/ddoscustompolicies/delete | Admin | Delete DDoS customized policy |
| microsoft.network/natgateways/read | Metadata | Get Nat Gateway |
| microsoft.network/natgateways/write | Admin | Creates or Updates a Nat Gateway |
| microsoft.network/natgateways/delete | Admin | Delete Nat Gateway |
| microsoft.network/vpngateways/providers/microsoft.insights/metricdefinitions/read | Metadata | Read Vpn Gateway metric definitions |
| microsoft.network/vpngateways/providers/microsoft.insights/logdefinitions/read | Metadata | Gets Vpn Gateway Log Definitions |
| microsoft.network/vpngateways/providers/microsoft.insights/diagnosticsettings/read | Metadata | Get Vpn Gateway Diagnostic Settings |
| microsoft.network/vpngateways/providers/microsoft.insights/diagnosticsettings/write | Admin | Create or update Vpn Gateway diagnostic settings |
| microsoft.network/p2svpngateways/providers/microsoft.insights/metricdefinitions/read | Metadata | Read P2S Vpn Gateway metric definitions |
| microsoft.network/p2svpngateways/providers/microsoft.insights/logdefinitions/read | Metadata | Gets P2S Vpn Gateway Log Definitions |
| microsoft.network/p2svpngateways/providers/microsoft.insights/diagnosticsettings/read | Metadata | Get P2S Vpn Gateway Diagnostic Settings |
| microsoft.network/p2svpngateways/providers/microsoft.insights/diagnosticsettings/write | Admin | Create or update P2S Vpn Gateway diagnostic settings |
| microsoft.network/bastionhosts/read | Metadata | Gets a Bastion Host |
| microsoft.network/bastionhosts/write | Admin | Create or Update a Bastion Host |
| microsoft.network/bastionhosts/delete | Admin | Deletes a Bastion Host |
| microsoft.network/frontdoors/routingrules/read | Metadata | Gets a routing rule |
| microsoft.network/frontdoors/routingrules/write | Operator | Creates or updates a routing rule |
| microsoft.network/frontdoors/routingrules/delete | Operator | Deletes a routing rule |
| microsoft.network/frontdoors/backendpools/read | Metadata | Gets a backend pool |
| microsoft.network/frontdoors/backendpools/write | Operator | Creates or updates a backend pool |
| microsoft.network/frontdoors/backendpools/delete | Operator | Deletes a backend pool |
| microsoft.network/frontdoors/frontendendpoints/read | Metadata | Gets a frontend endpoint |
| microsoft.network/frontdoors/frontendendpoints/write | Admin | Creates or updates a frontend endpoint |
| microsoft.network/frontdoors/frontendendpoints/delete | Admin | Deletes a frontend endpoint |
| microsoft.network/frontdoors/frontendendpoints/enablehttps/action | Metadata | Enables HTTPS on a Frontend Endpoint |
| microsoft.network/frontdoors/frontendendpoints/disablehttps/action | Metadata | Disables HTTPS on a Frontend Endpoint |
| microsoft.network/frontdoors/loadbalancingsettings/read | Metadata | Gets load balancing settings |
| microsoft.network/frontdoors/loadbalancingsettings/write | Operator | Creates or updates load balancing settings |
| microsoft.network/frontdoors/loadbalancingsettings/delete | Operator | Creates or updates load balancing settings |
| microsoft.network/frontdoors/healthprobesettings/read | Metadata | Gets health probe settings |
| microsoft.network/frontdoors/healthprobesettings/write | Admin | Creates or updates health probe settings |
| microsoft.network/frontdoors/healthprobesettings/delete | Admin | Deletes health probe settings |
| microsoft.network/frontdoorwebapplicationfirewallpolicies/read | Metadata | Gets a Web Application Firewall Policy |
| microsoft.network/frontdoorwebapplicationfirewallpolicies/write | Admin | Creates or updates a Web Application Firewall Policy |
| microsoft.network/frontdoorwebapplicationfirewallpolicies/delete | Admin | Deletes a Web Application Firewall Policy |
| microsoft.network/applicationgatewayavailableservervariables/read | Metadata | Get Application Gateway available Server Variables |
| microsoft.network/applicationgatewayavailablerequestheaders/read | Metadata | Get Application Gateway available Request Headers |
| microsoft.network/applicationgatewayavailableresponseheaders/read | Metadata | Get Application Gateway available Response Header |
| microsoft.network/expressroutecircuits/peerings/peerconnections/read | Metadata | GetPeerExpressRouteCircuitConnection |
| microsoft.network/applicationgatewaywebapplicationfirewallpolicies/read | Metadata | Get Application Gateway WAF Policy |
| microsoft.network/applicationgatewaywebapplicationfirewallpolicies/write | Admin | Create or Update Application Gateway WAF Policy |
| microsoft.network/applicationgatewaywebapplicationfirewallpolicies/delete | Admin | Delete Application Gateway WAF Policy |
| microsoft.network/virtualnetworks/bastionhosts/default/action | Metadata | Get Bastion Host associated with the Virtual Network. |
| microsoft.network/privateendpoints/read | Metadata | Get an private endpoint resource. |
| microsoft.network/privateendpoints/write | Admin | Create or update an private endpoint. |
| microsoft.network/privateendpoints/delete | Admin | Delete an private endpoint. |
| microsoft.network/privateendpoints/privatelinkserviceproxies/read | Metadata | Get a private link service proxy resource. |
| microsoft.network/privateendpoints/privatelinkserviceproxies/write | Admin | Create or update a private link service proxy. |
| microsoft.network/privateendpoints/privatelinkserviceproxies/delete | Admin | Delete a private link service proxy. |
| microsoft.network/privatelinkservices/privateendpointconnectionproxies/read | Metadata | Get an private endpoint connection proxy resource. |
| microsoft.network/privatelinkservices/privateendpointconnectionproxies/write | Admin | Create or update an private endpoint connection proxy. |
| microsoft.network/privatelinkservices/privateendpointconnectionproxies/delete | Admin | Delete an private endpoint connection proxy. |
| microsoft.network/privatelinkservices/privateendpointconnections/read | Metadata | Get an private endpoint connection. |
| microsoft.network/privatelinkservices/privateendpointconnections/write | Admin | Create or update an private endpoint connection. |
| microsoft.network/privatelinkservices/privateendpointconnections/delete | Admin | Delete an private endpoint connection. |
| microsoft.network/locations/servicetags/read | Metadata | Get Service Tags |
| microsoft.network/locations/availableprivateendpointtypes/read | Metadata | Get available Private Endpoint resources |
| microsoft.network/locations/autoapprovedprivatelinkservices/read | Metadata | Get Auto Approved Private Link Services |
| microsoft.network/frontdoorwebapplicationfirewallmanagedrulesets/read | Metadata | Gets Web Application Firewall Managed Rule Sets |
| microsoft.network/privatednszones/read | Metadata | Get Private DNS zone |
| microsoft.network/privatednszones/write | Admin | Create or Update Private DNS Zone |
| microsoft.network/privatednszones/delete | Admin | Delete Private DNS Zone |
| microsoft.network/privatednszones/virtualnetworklinks/read | Metadata | Get Private DNS zone link to virtual network |
| microsoft.network/privatednszones/virtualnetworklinks/write | Admin | Create or Update Private DNS zone link to virtual network |
| microsoft.network/privatednszones/virtualnetworklinks/delete | Admin | Delete Private DNS zone link to virtual network |
| microsoft.network/privatednszones/a/read | Metadata | Get record set of type A |
| microsoft.network/privatednszones/a/write | Admin | Create or update record set of type A |
| microsoft.network/privatednszones/a/delete | Admin | Delete record set of type A |
| microsoft.network/privatednszones/aaaa/read | Metadata | Get record set of type AAAA |
| microsoft.network/privatednszones/aaaa/write | Admin | Create or update record set of type AAAA |
| microsoft.network/privatednszones/aaaa/delete | Admin | Delete record set of type AAAA |
| microsoft.network/privatednszones/cname/read | Metadata | Get record set of type CNAME |
| microsoft.network/privatednszones/cname/write | Admin | Create or update record set of type CNAME |
| microsoft.network/privatednszones/cname/delete | Admin | Delete record set of type CNAME |
| microsoft.network/privatednszones/mx/read | Metadata | Get record set of type MX |
| microsoft.network/privatednszones/mx/write | Admin | Create or update record set of type MX |
| microsoft.network/privatednszones/mx/delete | Admin | Delete record set of type MX |
| microsoft.network/privatednszones/ptr/read | Metadata | Get record set of type PTR |
| microsoft.network/privatednszones/ptr/write | Admin | Create or update record set of type PTR |
| microsoft.network/privatednszones/ptr/delete | Admin | Delete record set of type PTR |
| microsoft.network/privatednszones/soa/read | Metadata | Get record set of type SOA |
| microsoft.network/privatednszones/soa/write | Admin | Update record set of type SOA |
| microsoft.network/privatednszones/srv/read | Metadata | Get record set of type SRV |
| microsoft.network/privatednszones/srv/write | Admin | Create or update record set of type SRV |
| microsoft.network/privatednszones/srv/delete | Admin | Delete record set of type SRV |
| microsoft.network/privatednszones/txt/read | Metadata | Get record set of type TXT |
| microsoft.network/privatednszones/txt/write | Admin | Create or update record set of type TXT |
| microsoft.network/privatednszones/txt/delete | Admin | Delete record set of type TXT |
| microsoft.network/privatednszones/all/read | Metadata | Gets Private DNS record sets across types |
| microsoft.network/privatednszones/recordsets/read | Metadata | Gets Private DNS record sets across types |
| microsoft.network/privatednsoperationresults/read | Metadata | Gets results of a Private DNS operation |
| microsoft.network/privatednsoperationstatuses/read | Metadata | Gets status of a Private DNS operation |
| microsoft.network/natgateways/providers/microsoft.insights/metricdefinitions/read | Metadata | Read Nat Gateway metric definitions |
| microsoft.network/firewallpolicies/read | Metadata | Get Firewall Policy |
| microsoft.network/firewallpolicies/write | Admin | Create or Update Firewall Policy |
| microsoft.network/firewallpolicies/join/action | Metadata | Join Firewall Policy |
| microsoft.network/firewallpolicies/delete | Admin | Delete Firewall Policy |
| microsoft.network/firewallpolicies/rulegroups/read | Metadata | Get Firewall Policy Rule Group |
| microsoft.network/firewallpolicies/rulegroups/write | Admin | Create or Update Firewall Policy Rule Group |
| microsoft.network/firewallpolicies/rulegroups/delete | Admin | Delete Firewall Policy Rule Group |
| microsoft.network/expressroutecircuits/peerings/arptables/read | Metadata | Get ExpressRouteCircuit Peering ArpTable |
| microsoft.network/expressroutecircuits/peerings/routetables/read | Metadata | Get ExpressRouteCircuit Peering RouteTable |
| microsoft.network/expressroutecircuits/peerings/routetablessummary/read | Metadata | Get an ExpressRouteCircuit Peering RouteTable Summary |
| microsoft.network/expressroutecrossconnections/peerings/arptables/read | Metadata | Get Express Route Cross Connection Peering Arp Table |
| microsoft.network/expressroutecrossconnections/peerings/routetables/read | Metadata | Get Express Route Cross Connection Peering Route Table |
| microsoft.network/expressroutecrossconnections/peerings/routetablesummary/read | Metadata | Get Express Route Cross Connection Peering Route Table Summary |
| microsoft.network/vpnsites/vpnsitelinks/read | Metadata | Gets a Vpn Site Link |
| microsoft.network/vpngateways/vpnconnections/vpnlinkconnections/read | Metadata | Gets a Vpn Link Connection |
| microsoft.network/register/action | Metadata | Register Subscription |
| microsoft.network/unregister/action | Metadata | Unregister Subscription |
| microsoft.network/checktrafficmanagernameavailability/action | Metadata | Check Traffic Manager Name Availability |
| microsoft.network/internalnotify/action | Metadata | Post DNS notification for alias target |
| microsoft.network/getdnsresourcereference/action | Metadata | Get DNS alias target dependencies |
| microsoft.network/checkfrontdoornameavailability/action | Metadata | Checks whether a Front Door name is available |
| microsoft.network/operations/read | Metadata | Get Available Operations |
| microsoft.resources/deployments/cancel/action | Admin | Admin is allowed to cancel the ongoing deployment action. |
| microsoft.resources/deployments/delete | Admin | |
| microsoft.resources/deployments/operations/read | Metadata | |
| microsoft.resources/deployments/read | Metadata | |
| microsoft.resources/deployments/validate/action | Admin | |
| microsoft.resources/deployments/write | Admin | Admin is allowed to perform deployment action. |
| microsoft.resources/subscriptions/resourcegroups/read | Metadata | |
| microsoft.storage/storageaccounts/read | Metadata | To list the available storage account while provisioning the compute. |