Permissions for @turbot/azure-postgresql
Taking a look at permissions and associated grant levels for each permission for PostgreSQL:
| Permission | Grant Level | Help |
|---|---|---|
| microsoft.dbforpostgresql/flexibleservers/administrators/action | admin | create/update postgresql server administrator |
| microsoft.dbforpostgresql/flexibleservers/administrators/delete | admin | delete postgresql server administrator |
| microsoft.dbforpostgresql/flexibleservers/administrators/read | metadata | list/get postgresql server administrator |
| microsoft.dbforpostgresql/flexibleservers/administrators/write | admin | create/update postgresql server administrator |
| microsoft.dbforpostgresql/flexibleservers/advancedthreatprotectionsettings/read | metadata | list/get azure database for postgresql flexible server advanced threat protection states. |
| microsoft.dbforpostgresql/flexibleservers/advancedthreatprotectionsettings/write | admin | update azure database for postgresql server advanced threat protection state |
| microsoft.dbforpostgresql/flexibleservers/advisors/read | metadata | |
| microsoft.dbforpostgresql/flexibleservers/advisors/recommendedactions/read | metadata | |
| microsoft.dbforpostgresql/flexibleservers/backups/read | metadata | |
| microsoft.dbforpostgresql/flexibleservers/capabilities/read | metadata | gets the capabilities for this subscription |
| microsoft.dbforpostgresql/flexibleservers/checkmigrationnameavailability/action | operator | check the availability of the given migration name. |
| microsoft.dbforpostgresql/flexibleservers/configurations/read | metadata | list/get postgresql server configuration |
| microsoft.dbforpostgresql/flexibleservers/configurations/write | admin | update postgresql server configuration |
| microsoft.dbforpostgresql/flexibleservers/databases/delete | admin | delete postgresql server database |
| microsoft.dbforpostgresql/flexibleservers/databases/read | metadata | list/get postgresql server configuration |
| microsoft.dbforpostgresql/flexibleservers/databases/write | admin | creates/updates postgresql server database |
| microsoft.dbforpostgresql/flexibleservers/delete | admin | delete postgresql server |
| microsoft.dbforpostgresql/flexibleservers/firewallrules/delete | admin | delete firewall rule |
| microsoft.dbforpostgresql/flexibleservers/firewallrules/read | metadata | list/get firewall rules |
| microsoft.dbforpostgresql/flexibleservers/firewallrules/write | admin | create/update firewall rule |
| microsoft.dbforpostgresql/flexibleservers/migrations/delete | admin | delete migration workflow. |
| microsoft.dbforpostgresql/flexibleservers/migrations/read | metadata | get migration workflow details. |
| microsoft.dbforpostgresql/flexibleservers/migrations/write | admin | create a database migration workflow. |
| microsoft.dbforpostgresql/flexibleservers/privateendpointconnectionproxies/delete | admin | delete azure database for postgresql - flexible server private endpoint connection proxy |
| microsoft.dbforpostgresql/flexibleservers/privateendpointconnectionproxies/read | metadata | list/get azure database for postgresql flexible server private endpoint connection proxy |
| microsoft.dbforpostgresql/flexibleservers/privateendpointconnectionproxies/validate/action | admin | validate azure database for postgresql - flexible server private endpoint connection creation by nrp |
| microsoft.dbforpostgresql/flexibleservers/privateendpointconnectionproxies/write | admin | create/update azure database for postgresql - flexible server private endpoint connection proxy |
| microsoft.dbforpostgresql/flexibleservers/privateendpointconnections/delete | admin | delete azure database for postgresql - flexible server private endpoint connection |
| microsoft.dbforpostgresql/flexibleservers/privateendpointconnections/read | metadata | list/get azure database for postgresql - flexible server private endpoint connection |
| microsoft.dbforpostgresql/flexibleservers/privateendpointconnections/write | admin | approve or reject azure database for postgresql - flexible server private endpoint connection |
| microsoft.dbforpostgresql/flexibleservers/privatelinkresources/read | metadata | list/get postgresql private link resource |
| microsoft.dbforpostgresql/flexibleservers/providers/microsoft.insights/diagnosticsettings/read | metadata | read diagnostic setting |
| microsoft.dbforpostgresql/flexibleservers/providers/microsoft.insights/diagnosticsettings/write | admin | write diagnostic setting |
| microsoft.dbforpostgresql/flexibleservers/providers/microsoft.insights/logdefinitions/read | metadata | read server log definitions |
| microsoft.dbforpostgresql/flexibleservers/providers/microsoft.insights/metricdefinitions/read | metadata | get database metric definitions |
| microsoft.dbforpostgresql/flexibleservers/querystatistics/read | metadata | |
| microsoft.dbforpostgresql/flexibleservers/querytexts/read | metadata | |
| microsoft.dbforpostgresql/flexibleservers/read | metadata | list/get postgresql server |
| microsoft.dbforpostgresql/flexibleservers/replicas/read | metadata | |
| microsoft.dbforpostgresql/flexibleservers/resetqueryperformanceinsightdata/action | operator | |
| microsoft.dbforpostgresql/flexibleservers/restart/action | operator | restart postgresql server |
| microsoft.dbforpostgresql/flexibleservers/start/action | operator | start postgresql server |
| microsoft.dbforpostgresql/flexibleservers/stop/action | operator | stops an existing server |
| microsoft.dbforpostgresql/flexibleservers/topquerystatistics/read | metadata | |
| microsoft.dbforpostgresql/flexibleservers/waitstatistics/action | operator | |
| microsoft.dbforpostgresql/flexibleservers/write | admin | create/update postgresql server |
| microsoft.dbforpostgresql/locations/performancetiers/read | metadata | list performance tiers |
| microsoft.dbforpostgresql/servers/virtualnetworkrules/read | metadata | list/get virtual network rule(s) |
| microsoft.dbforpostgresql/servers/virtualnetworkrules/write | admin | create/update virtual network rule |
| microsoft.dbforpostgresql/servers/virtualnetworkrules/delete | admin | delete virtual network rule |
| microsoft.dbforpostgresql/servers/querytexts/action | operator | list query text of a query |
| microsoft.dbforpostgresql/servers/read | metadata | list/get postgresql servers |
| microsoft.dbforpostgresql/servers/write | admin | create/update postgresql server |
| microsoft.dbforpostgresql/servers/delete | admin | delete postgresql server |
| microsoft.dbforpostgresql/servers/restart/action | operator | restart postgresql server |
| microsoft.dbforpostgresql/servers/updateconfigurations/action | admin | batch update server configurations |
| microsoft.dbforpostgresql/performancetiers/read | metadata | list performance tiers |
| microsoft.dbforpostgresql/servers/firewallrules/read | metadata | list/get firewall rules |
| microsoft.dbforpostgresql/servers/firewallrules/write | admin | create/update firewall rule |
| microsoft.dbforpostgresql/servers/firewallrules/delete | admin | delete firewall rule |
| microsoft.dbforpostgresql/servers/securityalertpolicies/read | metadata | get server threat detection policy |
| microsoft.dbforpostgresql/servers/securityalertpolicies/write | admin | update server threat detection policy |
| microsoft.dbforpostgresql/servers/recoverableservers/read | metadata | get recoverable postgresql server info |
| microsoft.dbforpostgresql/servers/providers/microsoft.insights/metricdefinitions/read | metadata | get database metric definitions |
| microsoft.dbforpostgresql/servers/providers/microsoft.insights/logdefinitions/read | metadata | read server log definitions |
| microsoft.dbforpostgresql/servers/providers/microsoft.insights/diagnosticsettings/read | metadata | read diagnostic setting |
| microsoft.dbforpostgresql/servers/providers/microsoft.insights/diagnosticsettings/write | admin | write diagnostic setting |
| microsoft.dbforpostgresql/servers/topquerystatistics/read | metadata | list/get query statistic(s) for top queries |
| microsoft.dbforpostgresql/servers/configurations/read | metadata | list/get configurations |
| microsoft.dbforpostgresql/servers/configurations/write | admin | update configuration |
| microsoft.dbforpostgresql/servers/waitstatistics/read | metadata | list wait statistics for an instance |
| microsoft.dbforpostgresql/servers/advisors/read | metadata | return the list of advisors |
| microsoft.dbforpostgresql/servers/advisors/recommendedactionsessions/action | admin | make recommendations |
| microsoft.dbforpostgresql/servers/advisors/recommendedactions/read | metadata | return the list of recommended actions |
| microsoft.dbforpostgresql/servers/querytexts/read | metadata | list query texts for a list of queries |
| microsoft.dbforpostgresql/locations/securityalertpoliciesazureasyncoperation/read | metadata | list/get server threat detection operation result. |
| microsoft.dbforpostgresql/locations/securityalertpoliciesoperationresults/read | metadata | list/get server threat detection operation result. |
| microsoft.dbforpostgresql/locations/operationresults/read | metadata | get postgresql resourcegroup based server operation results |
| microsoft.dbforpostgresql/locations/operationresults/read | metadata | get postgresql server operation results |
| microsoft.dbforpostgresql/locations/azureasyncoperation/read | metadata | get postgresql server operation results |
| microsoft.dbforpostgresql/servers/databases/read | metadata | list/get postgresql database |
| microsoft.dbforpostgresql/servers/databases/write | admin | create/update postgresql database |
| microsoft.dbforpostgresql/servers/databases/delete | admin | delete postgresql database |
| microsoft.dbforpostgresql/servers/logfiles/read | metadata | list/get postgresql logfiles |
| microsoft.dbforpostgresql/operations/read | metadata | list/get postgresql operations |
| microsoft.dbforpostgresql/serversv2/providers/microsoft.insights/metricdefinitions/read | metadata | get database metric definitions |
| microsoft.dbforpostgresql/serversv2/providers/microsoft.insights/logdefinitions/read | metadata | read server log definitions |
| microsoft.dbforpostgresql/serversv2/providers/microsoft.insights/diagnosticsettings/read | metadata | read diagnostic setting |
| microsoft.dbforpostgresql/serversv2/providers/microsoft.insights/diagnosticsettings/write | admin | write diagnostic setting |
| microsoft.dbforpostgresql/serversv2/read | metadata | list/get postgresql servers |
| microsoft.dbforpostgresql/serversv2/write | admin | create/update postgresql server |
| microsoft.dbforpostgresql/serversv2/delete | metadata | delete postgresql server |
| microsoft.dbforpostgresql/serversv2/updateconfigurations/action | admin | batch update server configurations |
| microsoft.dbforpostgresql/serversv2/firewallrules/read | metadata | list/get firewall rules |
| microsoft.dbforpostgresql/serversv2/firewallrules/write | admin | create/update firewall rule |
| microsoft.dbforpostgresql/serversv2/firewallrules/delete | admin | delete firewall rule |
| microsoft.dbforpostgresql/serversv2/configurations/read | metadata | list/get configurations |
| microsoft.dbforpostgresql/serversv2/configurations/write | admin | update configuration |
| microsoft.dbforpostgresql/servers/administrators/read | metadata | get administrators of postgresql server. |
| microsoft.dbforpostgresql/servers/administrators/write | admin | create/update administrator of postgresql server. |
| microsoft.dbforpostgresql/servers/administrators/delete | admin | delete administrator of postgresql server. |
| microsoft.dbforpostgresql/servers/replicas/read | metadata | get postgresql read replicas |
| microsoft.dbforpostgresql/servers/privateendpointconnections/read | metadata | list/get azure database for postgresql private endpoint connection |
| microsoft.dbforpostgresql/servers/privateendpointconnections/delete | admin | delete azure database for postgresql private endpoint connection |
| microsoft.dbforpostgresql/servers/privateendpointconnections/write | metadata | approve or reject azure database for postgresql private endpoint coonnection |
| microsoft.dbforpostgresql/locations/privateendpointconnectionoperationresults/read | metadata | get private endpoint connection operation status |
| microsoft.dbforpostgresql/locations/privateendpointconnectionazureasyncoperation/read | metadata | get private endpoint connection operation status |
| microsoft.dbforpostgresql/locations/privateendpointconnectionproxyoperationresults/read | metadata | get private endpoint connection proxy operation status |
| microsoft.dbforpostgresql/servers/privateendpointconnectionproxies/validate/action | operator | validate azure database for postgresql private endpoint connection creation by nrp |
| microsoft.dbforpostgresql/servers/privateendpointconnectionproxies/read | metadata | list/get azure database for postgresql private endpoint connection proxy |
| microsoft.dbforpostgresql/servers/privateendpointconnectionproxies/write | admin | create/update azure database for postgresql private endpoint connection proxy |
| microsoft.dbforpostgresql/servers/privateendpointconnectionproxies/delete | admin | delete azure database for postgresql private endpoint connection proxy |
| microsoft.dbforpostgresql/locations/privateendpointconnectionproxyazureasyncoperation/read | metadata | get private endpoint connection proxy operation status |
| microsoft.dbforpostgresql/servers/privatelinkresources/read | metadata | get the private link resources for the corresponding postgresql server |