Voltar

Azure Kubernetes Fleet Manager RBAC Writer

Azure RBAC · Containers · Contributor

Azure Kubernetes Fleet Manager RBAC Writer

Privilegiada
ContributorIAM ScopeContainers·57 na definição · ≥ 34 efetivas

Dado verificado em · Fonte

Entradas na definição

57

Actions

0

NotActions

0

DataActions

0

Alcance efetivo

piso, não total

Control plane

34

Data plane

51

Na definição (nativo)

57

Piso, não total: expandido contra 17.591 ações de 151 providers colhidas da documentação da Microsoft. A Azure Management API expõe mais — o número real é maior, nunca menor.

Role ID
5af6afb3-c06c-4fa4-8848-71a8aee05683
Categoria
Containers
Risk Tier
Contributor (CTB)
Risk Tier: Contributor

Grants full write access to create and manage all resources but cannot assign roles or manage access to others.

Descrição

Microsoft

Grants read/write access to most Kubernetes resources within a namespace in the fleet-managed hub cluster. This role does not allow viewing or modifying roles or role bindings. However, this role allows accessing Secrets as any ServiceAccount in the namespace, so it can be used to gain the API access levels of any ServiceAccount in the namespace.  Applying this role at cluster scope will give access across all namespaces.

Permissões

MicrosoftCarregando...Azure built-in roles

Role Definition (JSON)

{

  "Name": "Azure Kubernetes Fleet Manager RBAC Writer",

  "Id": "5af6afb3-c06c-4fa4-8848-71a8aee05683",

  "IsCustom": false,

  "Description": "Grants read/write access to most Kubernetes resources within a namespace in the fleet-managed hub cluster. This role does not allow viewing or modifying roles or role bindings. However, this role allows accessing Secrets as any ServiceAccount in the namespace, so it can be used to gain the API access levels of any ServiceAccount in the namespace.  Applying this role at cluster scope will give access across all namespaces.",

  "Actions": [],

  "NotActions": [],

  "DataActions": [],

  "NotDataActions": [],

  "AssignableScopes": [

    "/"

  ]

Assignable Scopes

/

PowerShell

Get-AzRoleDefinition -Name "Azure Kubernetes Fleet Manager RBAC Writer"

Azure CLI

az role definition list --name "Azure Kubernetes Fleet Manager RBAC Writer"
Ver a documentação oficial na Microsoft Learn