{ "properties": { "roleName": "CloudRewindDPRRPermissions", "description": "This role is used by the Cloud Rewind Resilience Service to manage Azure resources for discovery, protection, recovery and reset.", "assignableScopes": [ "/subscriptions/" ], "permissions": [ { "actions": [ "Microsoft.Resources/subscriptions/resourceGroups/delete", "Microsoft.Network/networkSecurityGroups/read", "Microsoft.Network/virtualNetworks/subnets/joinLoadBalancer/action", "Microsoft.Compute/galleries/write", "Microsoft.KeyVault/vaults/eventGridFilters/write", "Microsoft.Network/firewallPolicies/ruleGroups/delete", "Microsoft.Network/loadBalancers/inboundNatPools/join/action", "Microsoft.Compute/virtualMachineScaleSets/delete", "Microsoft.Compute/availabilitySets/read", "Microsoft.Network/loadBalancers/outboundRules/read", "Microsoft.Network/virtualNetworks/read", "Microsoft.SqlVirtualMachine/sqlVirtualMachines/write", "Microsoft.Network/publicIPAddresses/read", "Microsoft.ServiceBus/namespaces/networkrulesets/read", "Microsoft.DBforMySQL/servers/delete", "Microsoft.Sql/servers/elasticPools/databases/read", "Microsoft.Web/serverfarms/write", "Microsoft.Sql/managedInstances/privateEndpointConnectionProxies/validate/action", "Microsoft.Sql/managedInstances/administrators/write", "Microsoft.Network/publicIPAddresses/join/action", "Microsoft.Relay/namespaces/WcfRelays/read", "Microsoft.ServiceBus/namespaces/topics/Delete", "Microsoft.KeyVault/vaults/secrets/write", "Microsoft.ServiceBus/namespaces/topics/subscriptions/Delete", "Microsoft.Network/natGateways/write", "Microsoft.Sql/instancePools/write", "Microsoft.KeyVault/vaults/PrivateEndpointConnectionsApproval/action", "Microsoft.Insights/alertRules/*", "Microsoft.Sql/managedInstances/operations/read", "Microsoft.EventGrid/systemTopics/read", "Microsoft.Network/virtualNetworks/virtualNetworkPeerings/write", "Microsoft.KeyVault/locations/deleteVirtualNetworkOrSubnets/action", "Microsoft.EventGrid/domains/topics/read", "Microsoft.Sql/managedInstances/dtc/write", "Microsoft.Web/sites/backups/Read", "Microsoft.Authorization/*/read", "Microsoft.Compute/virtualMachines/delete", "Microsoft.Storage/storageAccounts/fileServices/shares/read", "Microsoft.EventHub/namespaces/read", "Microsoft.KeyVault/vaults/keys/write", "Microsoft.ServiceBus/sku/regions/read", "Microsoft.KeyVault/vaults/delete", "Microsoft.Compute/virtualMachineScaleSets/virtualMachines/write", "Microsoft.Sql/servers/write", "Microsoft.ServiceBus/namespaces/AuthorizationRules/write", "Microsoft.Network/privateEndpoints/read", "Microsoft.DBforPostgreSQL/serverGroupsv2/privateLinkResources/read", "Microsoft.KeyVault/vaults/write", "Microsoft.KeyVault/vaults/privateEndpointConnectionProxies/validate/action", "Microsoft.DBforPostgreSQL/flexibleServers/read", "Microsoft.Resources/subscriptions/resourceGroups/read", "Microsoft.KeyVault/locations/*/read", "Microsoft.Web/sites/Read", "Microsoft.Network/azureFirewalls/applicationRuleCollections/delete", "Microsoft.ServiceBus/operations/read", "Microsoft.Network/applicationGateways/read", "Microsoft.KeyVault/locations/notifyNetworkSecurityPerimeterUpdatesAvailable/action", "Microsoft.Resources/resources/read", "Microsoft.KeyVault/vaults/providers/Microsoft.Insights/diagnosticSettings/Read", "Microsoft.Support/*", "Microsoft.Network/loadBalancers/frontendIPConfigurations/loadBalancerPools/write", "Microsoft.Sql/managedInstances/azureADOnlyAuthentications/write", "Microsoft.Network/loadBalancers/frontendIPConfigurations/loadBalancerPools/join/action", "Microsoft.Compute/snapshots/endGetAccess/action", "Microsoft.Compute/images/write", "Microsoft.ServiceBus/namespaces/topics/subscriptions/rules/write", "Microsoft.Network/virtualNetworks/subnets/read", "Microsoft.KeyVault/vaults/*/read", "Microsoft.KeyVault/vaults/providers/Microsoft.Insights/diagnosticSettings/Write", "Microsoft.Relay/namespaces/read", "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies/read", "Microsoft.ServiceBus/namespaces/networkrulesets/delete", "Microsoft.Compute/images/delete", "Microsoft.Network/virtualNetworkGateways/read", "Microsoft.Resources/subscriptions/resourceGroups/write", "Microsoft.Sql/managedInstances/joinServerTrustGroup/action", "Microsoft.Sql/servers/firewallRules/delete", "Microsoft.DBforPostgreSQL/serverGroupsv2/privateEndpointConnections/read", "Microsoft.ServiceBus/namespaces/topics/read", "Microsoft.KeyVault/vaults/deploy/action", "Microsoft.ServiceBus/namespaces/virtualNetworkRules/read", "Microsoft.ServiceBus/namespaces/read", "Microsoft.Sql/servers/outboundFirewallRules/read", "Microsoft.DBforMySQL/servers/read", "Microsoft.Network/privateDnsZones/read", "Microsoft.KeyVault/vaults/accessPolicies/write", "Microsoft.Compute/disks/read", "Microsoft.Network/firewallPolicies/join/action", "Microsoft.Network/azureFirewalls/networkRuleCollections/delete", "Microsoft.KeyVault/vaults/networkSecurityPerimeterAssociationProxies/read", "Microsoft.Network/azureFirewalls/natRuleCollections/write", "Microsoft.Authorization/policyAssignments/read", "Microsoft.Sql/servers/virtualNetworkRules/delete", "Microsoft.Storage/storageAccounts/objectReplicationPolicies/delete", "Microsoft.Sql/servers/connectionPolicies/read", "Microsoft.DBforMySQL/locations/azureAsyncOperation/read", "Microsoft.KeyVault/vaults/secrets/read", "Microsoft.Network/azurefirewalls/read", "Microsoft.Web/sites/config/read", "Microsoft.ServiceBus/namespaces/topics/subscriptions/rules/Delete", "Microsoft.ServiceBus/namespaces/queues/authorizationRules/delete", "Microsoft.Compute/images/read", "Microsoft.DataFactory/datafactories/read", "Microsoft.Sql/managedInstances/azureADOnlyAuthentications/read", "Microsoft.KeyVault/operations/read", "Microsoft.Cdn/profiles/origingroups/origins/read", "Microsoft.Compute/proximityPlacementGroups/read", "Microsoft.Sql/servers/virtualNetworkRules/read", "Microsoft.Sql/servers/firewallRules/write", "Microsoft.Compute/virtualMachineScaleSets/read", "Microsoft.ServiceBus/namespaces/virtualNetworkRules/delete", "Microsoft.Sql/servers/delete", "Microsoft.Cdn/profiles/read", "Microsoft.Network/loadBalancers/inboundNatRules/join/action", "Microsoft.DBforPostgreSQL/serverGroupsv2/privateEndpointConnectionProxies/read", "Microsoft.Web/sites/backup/action", "Microsoft.KeyVault/vaults/privateEndpointConnections/write", "Microsoft.DBforPostgreSQL/serverGroupsv2/privateEndpointConnectionProxies/delete", "Microsoft.Sql/servers/elasticPools/delete", "Microsoft.Compute/virtualMachines/read", "Microsoft.Sql/servers/read", "Microsoft.Network/routeTables/delete", "Microsoft.Storage/storageAccounts/managementPolicies/write", "Microsoft.Compute/galleries/delete", "Microsoft.Storage/storageAccounts/delete", "Microsoft.ServiceBus/namespaces/skus/read", "Microsoft.Compute/virtualMachineScaleSets/virtualMachines/networkInterfaces/ipConfigurations/read", "Microsoft.KeyVault/deletedVaults/read", "Microsoft.ServiceBus/namespaces/topics/authorizationRules/listKeys/action", "Microsoft.Sql/instancePools/read", "Microsoft.Sql/instancePools/operations/read", "Microsoft.Network/azureFirewalls/natRuleCollections/read", "Microsoft.SqlVirtualMachine/sqlVirtualMachines/delete", "Microsoft.Cdn/profiles/endpoints/customdomains/read", "Microsoft.Network/networkSecurityGroups/join/action", "Microsoft.Sql/managedInstances/startStopSchedules/read", "Microsoft.DBforMySQL/flexibleServers/read", "Microsoft.Network/azurefirewalls/delete", "Microsoft.Cache/redis/read", "Microsoft.KeyVault/locations/deletedVaults/purge/action", "Microsoft.Network/azurefirewalls/packetCapture/action", "Microsoft.KeyVault/locations/deletedVaults/read", "Microsoft.Compute/virtualMachineScaleSets/virtualMachines/delete", "Microsoft.ServiceBus/namespaces/topics/authorizationRules/read", "Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/read", "Microsoft.Network/azureFirewalls/natRuleCollections/delete", "Microsoft.ServiceBus/namespaces/queues/authorizationRules/listKeys/action", "Microsoft.Web/sites/config/write", "Microsoft.EventGrid/domains/read", "Microsoft.Sql/managedInstances/serverTrustGroups/read", "Microsoft.KeyVault/vaults/keys/read", "Microsoft.EventGrid/topics/eventSubscriptions/read", "Microsoft.ServiceBus/namespaces/networkRuleSets/write", "Microsoft.KeyVault/vaults/privateEndpointConnectionProxies/delete", "Microsoft.Network/privateEndpoints/delete", "Microsoft.Sql/servers/azureADOnlyAuthentications/delete", "Microsoft.ServiceBus/namespaces/queues/write", "Microsoft.Web/sites/config/delete", "Microsoft.Sql/managedInstances/delete", "Microsoft.Authorization/policyDefinitions/read", "Microsoft.ServiceBus/namespaces/topics/write", "Microsoft.KeyVault/vaults/eventGridFilters/delete", "Microsoft.Compute/snapshots/write", "Microsoft.Sql/servers/virtualNetworkRules/write", "Microsoft.Storage/storageAccounts/blobServices/read", "Microsoft.SqlVirtualMachine/sqlVirtualMachines/read", "Microsoft.Sql/managedInstances/metrics/read", "Microsoft.KeyVault/vaults/privateEndpointConnectionProxies/write", "Microsoft.Network/networkInterfaces/read", "Microsoft.Network/azureFirewalls/applicationRuleCollections/write", "Microsoft.Compute/disks/write", "Microsoft.Sql/managedInstances/serverTrustCertificates/read", "Microsoft.Sql/instancePools/delete", "Microsoft.Network/virtualNetworks/subnets/write", "Microsoft.KeyVault/vaults/networkSecurityPerimeterConfigurations/reconcile/action", "Microsoft.Network/azureFirewalls/applicationRuleCollections/read", "Microsoft.Sql/servers/databases/write", "Microsoft.Cdn/profiles/endpoints/origins/read", "Microsoft.Storage/storageAccounts/blobServices/containers/write", "Microsoft.Network/frontDoors/read", "Microsoft.Network/loadBalancers/networkInterfaces/read", "Microsoft.Compute/availabilitySets/write", "Microsoft.Sql/servers/azureADOnlyAuthentications/write", "Microsoft.Network/loadBalancers/virtualMachines/read", "Microsoft.ServiceBus/namespaces/ipFilterRules/read", "Microsoft.Cdn/profiles/afdendpoints/read", "Microsoft.Compute/virtualMachineScaleSets/virtualMachines/read", "Microsoft.DocumentDB/databaseAccounts/sqlDatabases/read", "Microsoft.DBforPostgreSQL/serverGroupsv2/privateEndpointConnections/write", "Microsoft.Network/loadBalancers/backendAddressPools/write", "Microsoft.Compute/snapshots/delete", "Microsoft.Network/loadBalancers/write", "Microsoft.Network/networkInterfaces/delete", "Microsoft.Network/loadBalancers/loadBalancingRules/read", "Microsoft.Network/dnsForwardingRulesets/read", "Microsoft.Network/loadBalancers/delete", "Microsoft.Network/azurefirewalls/write", "Microsoft.Network/natGateways/read", "Microsoft.Compute/galleries/images/versions/delete", "Microsoft.Network/loadBalancers/backendAddressPools/read", "Microsoft.Sql/managedInstances/databases/read", "Microsoft.Network/loadBalancers/inboundNatRules/delete", "Microsoft.Compute/proximityPlacementGroups/write", "Microsoft.Compute/galleries/images/versions/read", "Microsoft.KeyVault/vaults/keys/versions/read", "Microsoft.ServiceBus/namespaces/topics/authorizationRules/write", "Microsoft.Compute/galleries/images/versions/write", "Microsoft.Sql/managedInstances/dtc/read", "Microsoft.KeyVault/locations/operationResults/read", "Microsoft.Cdn/profiles/endpoints/read", "Microsoft.Sql/servers/outboundFirewallRules/delete", "Microsoft.Network/virtualNetworks/subnets/join/action", "Microsoft.Network/azurefirewalls/learnedIPPrefixes/action", "Microsoft.Network/networkSecurityGroups/securityRules/delete", "Microsoft.KeyVault/vaults/privateEndpointConnections/read", "Microsoft.Resources/deployments/operations/read", "Microsoft.Sql/servers/administrators/read", "Microsoft.Network/virtualNetworks/joinLoadBalancer/action", "Microsoft.Network/routeTables/routes/write", "Microsoft.ServiceBus/namespaces/ipFilterRules/delete", "Microsoft.Network/loadBalancers/backendAddressPools/backendPoolAddresses/read", "Microsoft.ServiceBus/namespaces/write", "Microsoft.ContainerService/managedClusters/read", "Microsoft.Sql/servers/firewallRules/read", "Microsoft.KeyVault/vaults/networkSecurityPerimeterConfigurations/read", "Microsoft.Resources/deployments/read", "Microsoft.KeyVault/unregister/action", "Microsoft.Compute/availabilitySets/delete", "Microsoft.Network/firewallPolicies/delete", "Microsoft.Compute/galleries/images/delete", "*/read", "Microsoft.Network/publicIPAddresses/delete", "Microsoft.Network/azureFirewalls/networkRuleCollections/read", "Microsoft.KeyVault/vaults/networkSecurityPerimeterAssociationProxies/write", "Microsoft.Compute/disks/beginGetAccess/action", "Microsoft.Network/routeTables/routes/read", "Microsoft.Compute/virtualMachines/write", "Microsoft.Network/applicationGateways/privateEndpointConnections/read", "Microsoft.Storage/storageAccounts/blobServices/write", "Microsoft.Sql/managedInstances/startStopSchedules/write", "Microsoft.KeyVault/vaults/privateEndpointConnectionProxies/read", "Microsoft.Web/sites/config/list/Action", "Microsoft.Network/routeTables/routes/delete", "Microsoft.Network/networkInterfaces/join/action", "Microsoft.Network/virtualNetworks/peer/action", "Microsoft.Compute/proximityPlacementGroups/delete", "Microsoft.Network/applicationGateways/delete", "Microsoft.Network/loadBalancers/providers/Microsoft.Insights/diagnosticSettings/write", "Microsoft.ServiceBus/namespaces/authorizationRules/read", "Microsoft.Sql/managedInstances/privateEndpointConnections/read", "Microsoft.ServiceBus/namespaces/topics/subscriptions/rules/read", "Microsoft.Web/serverfarms/Read", "Microsoft.Network/privateEndpoints/write", "Microsoft.Network/loadBalancers/read", "Microsoft.Compute/sshPublicKeys/delete", "Microsoft.Network/loadBalancers/frontendIPConfigurations/loadBalancerPools/delete", "Microsoft.Sql/managedInstances/validateAzureKeyVaultEncryptionKey/action", "Microsoft.Compute/virtualMachineScaleSets/virtualMachines/networkInterfaces/read", "Microsoft.ServiceBus/namespaces/PrivateEndpointConnectionsApproval/action", "Microsoft.KeyVault/checkNameAvailability/read", "Microsoft.Cdn/profiles/origingroups/read", "Microsoft.EventGrid/eventSubscriptions/read", "Microsoft.Network/routeTables/write", "Microsoft.Resources/deployments/operationStatuses/read", "Microsoft.Sql/servers/administrators/delete", "Microsoft.web/sites/backups/delete", "Microsoft.DocumentDB/databaseAccounts/tables/read", "Microsoft.Sql/servers/elasticPools/write", "Microsoft.Network/azureFirewalls/networkRuleCollections/write", "Microsoft.Compute/virtualMachineScaleSets/virtualMachines/instanceView/read", "Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/read", "Microsoft.Web/sites/operationresults/read", "Microsoft.Web/sites/write", "Microsoft.DBforPostgreSQL/serverGroupsv2/privateEndpointConnections/delete", "Microsoft.Network/virtualNetworks/write", "Microsoft.Sql/servers/outboundFirewallRules/write", "Microsoft.KeyVault/register/action", "Microsoft.Network/firewallPolicies/ruleCollectionGroups/delete", "Microsoft.Authorization/roleAssignments/write", "Microsoft.Network/firewallPolicies/write", "Microsoft.ServiceBus/namespaces/queues/authorizationRules/write", "Microsoft.Network/routeTables/join/action", "Microsoft.ServiceBus/namespaces/networkruleset/read", "Microsoft.ServiceBus/namespaces/AuthorizationRules/listKeys/action", "Microsoft.Network/firewallPolicies/ruleGroups/read", "Microsoft.Sql/servers/azureADOnlyAuthentications/read", "Microsoft.ServiceBus/namespaces/topics/subscriptions/write", "Microsoft.DBforMySQL/servers/privateEndpointConnectionsApproval/action", "Microsoft.ServiceBus/namespaces/networkruleset/delete", "Microsoft.DBforMySQL/servers/privateEndpointConnectionProxies/read", "Microsoft.Network/publicIPAddresses/write", "Microsoft.Network/firewallPolicies/ruleCollectionGroups/write", "Microsoft.Web/sites/restoreFromBackupBlob/action", "Microsoft.Sql/managedInstances/databases/write", "Microsoft.Storage/storageAccounts/write", "Microsoft.Network/networkSecurityGroups/write", "Microsoft.Web/sites/PrivateEndpointConnectionsApproval/action", "Microsoft.KeyVault/vaults/joinPerimeter/action", "Microsoft.Compute/galleries/images/read", "Microsoft.Network/loadBalancers/inboundNatPools/read", "Microsoft.Compute/disks/endGetAccess/action", "microsoft.web/sites/functions/read", "Microsoft.EventGrid/topics/read", "Microsoft.Network/natGateways/delete", "Microsoft.Network/virtualNetworks/virtualNetworkPeerings/read", "Microsoft.Network/networkSecurityGroups/delete", "Microsoft.Network/networkInterfaces/write", "Microsoft.Sql/managedInstances/privateLinkResources/read", "Microsoft.ServiceBus/namespaces/privateEndpointConnections/read", "Microsoft.Network/virtualNetworks/subnets/delete", "Microsoft.Network/localnetworkgateways/read", "Microsoft.Storage/storageAccounts/read", "Microsoft.Resources/deployments/*", "Microsoft.Network/routeTables/read", "Microsoft.Sql/managedInstances/write", "Microsoft.Sql/managedInstances/keys/write", "Microsoft.Network/loadBalancers/frontendIPConfigurations/loadBalancerPools/read", "Microsoft.Network/dnsResolvers/read", "Microsoft.DocumentDB/databaseAccounts/read", "Microsoft.Web/sites/config/list/action", "Microsoft.Cdn/profiles/endpoints/origingroups/read", "Microsoft.SignalRService/SignalR/read", "Microsoft.KeyVault/vaults/read", "Microsoft.ServiceBus/namespaces/queues/Delete", "Microsoft.Sql/managedInstances/keys/read", "Microsoft.Network/frontDoorWebApplicationFirewallPolicies/read", "Microsoft.Resources/deployments/write", "Microsoft.Network/applicationGateways/backendAddressPools/join/action", "Microsoft.Network/loadBalancers/inboundNatRules/write", "Microsoft.Compute/virtualMachineScaleSets/virtualMachines/networkInterfaces/ipConfigurations/publicIPAddresses/read", "Microsoft.Insights/alertRules/read", "Microsoft.Network/networkSecurityGroups/securityRules/write", "Microsoft.ServiceBus/namespaces/authorizationRules/delete", "Microsoft.ServiceBus/namespaces/topics/authorizationRules/delete", "Microsoft.EventGrid/domains/topics/eventSubscriptions/read", "Microsoft.KeyVault/vaults/providers/Microsoft.Insights/metricDefinitions/read", "Microsoft.Sql/servers/databases/read", "Microsoft.Sql/servers/connectionPolicies/write", "Microsoft.ServiceBus/namespaces/Delete", "Microsoft.Network/dnszones/read", "Microsoft.Compute/virtualMachineScaleSets/write", "Microsoft.ManagedIdentity/userAssignedIdentities/assign/action", "Microsoft.Network/loadBalancers/probes/join/action", "Microsoft.Cdn/profiles/customdomains/read", "Microsoft.Compute/galleries/images/write", "Microsoft.Compute/galleries/read", "Microsoft.Sql/managedInstances/privateEndpointConnections/write", "Microsoft.Compute/snapshots/read", "Microsoft.Sql/managedInstances/administrators/read", "Microsoft.KeyVault/vaults/privateEndpointConnections/delete", "Microsoft.KeyVault/vaults/*", "Microsoft.Web/sites/restoreSnapshot/action", "Microsoft.Network/applicationSecurityGroups/read", "Microsoft.DBforPostgreSQL/serverGroupsv2/privateEndpointConnectionProxies/validate/action", "Microsoft.DBforPostgreSQL/serverGroupsv2/privateEndpointConnectionProxies/write", "Microsoft.Network/natGateways/join/action", "Microsoft.Sql/servers/databases/delete", "Microsoft.KeyVault/vaults/privateLinkResources/read", "Microsoft.KeyVault/vaults/eventGridFilters/read", "Microsoft.Sql/servers/administrators/write", "Microsoft.Resources/subscriptions/resourceGroups/resources/read", "Microsoft.KeyVault/vaults/providers/Microsoft.Insights/logDefinitions/read", "Microsoft.DBforPostgreSQL/serverGroupsv2/privateEndpointConnectionsApproval/action", "Microsoft.EventHub/namespaces/eventhubs/read", "Microsoft.Network/trafficManagerProfiles/read", "Microsoft.Compute/disks/delete", "Microsoft.ServiceBus/sku/read", "Microsoft.Compute/sshPublicKeys/write", "Microsoft.KeyVault/vaults/networkSecurityPerimeterAssociationProxies/delete", "Microsoft.Compute/snapshots/beginGetAccess/action", "Microsoft.Sql/managedInstances/privateEndpointConnectionProxies/read", "Microsoft.Storage/storageAccounts/blobServices/containers/delete", "Microsoft.Network/virtualNetworks/delete", "Microsoft.Sql/managedInstances/read", "Microsoft.Sql/managedInstances/dnsAliases/write", "Microsoft.Compute/virtualMachineScaleSets/skus/read", "Microsoft.Network/firewallPolicies/ruleGroups/write", "Microsoft.Sql/managedInstances/serverTrustCertificates/write", "Microsoft.Network/virtualNetworks/virtualNetworkPeerings/delete", "Microsoft.Storage/storageAccounts/blobServices/containers/read", "Microsoft.Sql/servers/elasticPools/read", "Microsoft.Sql/managedInstances/encryptionProtector/write", "Microsoft.EventGrid/domains/eventSubscriptions/read", "Microsoft.Compute/galleries/share/action", "Microsoft.Sql/managedInstances/encryptionProtector/read", "Microsoft.Sql/managedInstances/tdeCertificates/action", "Microsoft.Compute/diskEncryptionSets/read", "Microsoft.Network/firewallPolicies/ruleCollectionGroups/read", "Microsoft.DBforMySQL/servers/write", "Microsoft.ServiceBus/namespaces/topics/subscriptions/read", "Microsoft.Storage/storageAccounts/objectReplicationPolicies/write", "Microsoft.Network/loadBalancers/backendAddressPools/join/action", "Microsoft.Storage/storageAccounts/listkeys/action", "Microsoft.Compute/sshPublicKeys/read", "Microsoft.DBforMySQL/servers/privateEndpointConnections/read", "Microsoft.ServiceBus/namespaces/privateEndpointConnections/delete", "Microsoft.Network/locations/setLoadBalancerFrontendPublicIpAddresses/action", "Microsoft.Compute/virtualMachines/extensions/write", "Microsoft.ServiceBus/namespaces/queues/read", "Microsoft.Network/privateLinkServices/read", "Microsoft.Network/loadBalancers/frontendIPConfigurations/join/action", "Microsoft.ServiceBus/namespaces/queues/authorizationRules/read", "Microsoft.Network/loadBalancers/probes/read", "Microsoft.EventGrid/systemTopics/eventSubscriptions/read", "Microsoft.Network/loadBalancers/backendAddressPools/delete", "Microsoft.Network/firewallPolicies/read", "Microsoft.Network/loadBalancers/inboundNatRules/read", "Microsoft.Sql/managedInstances/encryptionProtector/revalidate/action", "Microsoft.Sql/managedInstances/privateEndpointConnectionProxies/write", "Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/read", "Microsoft.Network/applicationGateways/write" ], "notActions": [], "dataActions": [ "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete", "Microsoft.KeyVault/vaults/keys/create/action", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write", "Microsoft.KeyVault/vaults/certificates/purge/action", "Microsoft.KeyVault/vaults/keys/purge/action", "Microsoft.KeyVault/vaults/certificatecas/read", "Microsoft.KeyVault/vaults/storageaccounts/set/action", "Microsoft.KeyVault/vaults/secrets/getSecret/action", "Microsoft.KeyVault/vaults/storageaccounts/sas/read", "Microsoft.KeyVault/vaults/secrets/recover/action", "Microsoft.KeyVault/vaults/keys/release/action", "Microsoft.KeyVault/vaults/secrets/update/action", "Microsoft.KeyVault/vaults/keys/verify/action", "Microsoft.KeyVault/vaults/keyrotationpolicies/read", "Microsoft.KeyVault/vaults/secrets/restore/action", "Microsoft.KeyVault/vaults/certificatecas/delete", "Microsoft.KeyVault/vaults/secrets/purge/action", "Microsoft.KeyVault/vaults/storageaccounts/delete", "Microsoft.KeyVault/vaults/storageaccounts/backup/action", "Microsoft.KeyVault/vaults/keys/wrap/action", "Microsoft.KeyVault/vaults/certificatecas/write", "Microsoft.KeyVault/vaults/storageaccounts/purge/action", "Microsoft.KeyVault/vaults/storageaccounts/sas/set/action", "Microsoft.KeyVault/vaults/certificates/restore/action", "Microsoft.KeyVault/vaults/certificatecontacts/write", "Microsoft.KeyVault/vaults/secrets/delete", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read", "Microsoft.KeyVault/vaults/certificates/update/action", "Microsoft.KeyVault/vaults/keys/recover/action", "Microsoft.KeyVault/vaults/certificates/create/action", "Microsoft.KeyVault/vaults/keys/encrypt/action", "Microsoft.KeyVault/vaults/keys/update/action", "Microsoft.KeyVault/vaults/storageaccounts/regeneratekey/action", "Microsoft.KeyVault/vaults/storageaccounts/read", "Microsoft.KeyVault/vaults/keys/unwrap/action", "Microsoft.KeyVault/vaults/keys/backup/action", "Microsoft.KeyVault/vaults/keys/delete", "Microsoft.KeyVault/vaults/secrets/backup/action", "Microsoft.KeyVault/vaults/keys/decrypt/action", "Microsoft.KeyVault/vaults/keys/sign/action", "Microsoft.KeyVault/vaults/certificates/recover/action", "Microsoft.KeyVault/vaults/secrets/readMetadata/action", "Microsoft.KeyVault/vaults/storageaccounts/sas/delete", "Microsoft.KeyVault/vaults/storageaccounts/recover/action", "Microsoft.KeyVault/vaults/certificates/import/action", "Microsoft.KeyVault/vaults/keys/read", "Microsoft.KeyVault/vaults/keys/import/action", "Microsoft.KeyVault/vaults/storageaccounts/restore/action", "Microsoft.KeyVault/vaults/certificates/backup/action", "Microsoft.KeyVault/vaults/keys/restore/action", "Microsoft.KeyVault/vaults/certificates/read", "Microsoft.KeyVault/vaults/secrets/setSecret/action", "Microsoft.KeyVault/vaults/keyrotationpolicies/write", "Microsoft.KeyVault/vaults/keys/rotate/action" ], "notDataActions": [] } ] } }