ARM Roles
Open Unified Identities › Resources, filter Providers to Azure Resource Management › ARM Role, then select a row to open its details.
ARM Roles Details
Details page contains the Risk and Exposure Point of the role and the Information pane.
Information
Information Pane can contain different badges to highlight important attributes.
Privileged
Indicates the role has privileged permissions
ARM Privileged
Indicates the role grants privileged actions in the Azure Resource Manager plane
Built-In
Indicates the role is a built-in Azure ARM role
Custom
Indicates the role is a custom role
Tier 0
Indicates the role is classified as Tier 0
Tier 2
Indicates the role is classified as Tier 2
Information Pane contains Details, Actions, Not Actions, Data Actions, Not Data Actions, Groups, Service Principals and Users tabs. Each tab except Details shows the number of rows in its label.
Details
Details tab contains attributes below about the AZ ARM role.
Name
The display name of the role with tenant suffix
Type
The type of the role (e.g., BuiltInRole)
Role Name
The original name of the role without tenant suffix
Is Built In
Indicates whether the role is a built-in Azure role
Description
A brief description of the role and its permissions
Tenant
The tenant the role belongs to
Assignable Scopes
The scopes at which the role can be assigned
Member Count
The number of members assigned to this role
Created On
The date and time when the role was created
Updated On
The date and time when the role was last updated
Actions
Actions tab contains a list of management actions that the role allows. This list identifies the operations that can be performed on Azure resources when the role is assigned.
Not Actions
Not Actions tab contains a list of management actions that are excluded from the role. These are operations that are explicitly denied even if allowed by Actions.
Data Actions
Data Actions tab contains a list of data operations that the role allows. These are operations performed on data within Azure resources (e.g., reading blob data).
Not Data Actions
Not Data Actions tab contains a list of data operations that are excluded from the role. These are data operations that are explicitly denied even if allowed by Data Actions.
Groups
Groups tab contains a list of groups that have been assigned this role. This list also contains Enabled and On Prem Sync Enabled columns to identify the status of these groups.
Service Principals
Service Principals tab contains a list of service principals that have been assigned this role. This list also contains Enabled, App Display Name, Service Principal Type columns to identify the status of these service principals.
Users
Users tab contains a list of users that have been assigned this role. This list also contains Enabled and On Prem Sync Enabled columns to identify the status of these users.
Last updated
Was this helpful?