Azure Management and governance built-in role
Advisor Reviews Reader
Reads Azure Advisor resiliency reviews, linked triage recommendations, and triage resources without approving, rejecting, or resetting review outcomes. It is control-plane read access with no DataActions.
Role-definition permissions are imported from Microsoft Learn. Practical scope, use cases, prerequisites, best practices, security considerations, assignment guidance, and relationships have been reviewed against the official sources below.
Role definition ID: c64499e0-74c3-47ad-921c-13865957895c
Control-plane actions (3)
Microsoft.Advisor/resiliencyReviews/readMicrosoft.Advisor/triageRecommendations/readMicrosoft.Advisor/triageResources/read
Data-plane actions (0)
None — this role grants no data-plane (data access) actions.
Excluded actions (0)
None
Assignable scopes (1)
/
Practical scope
Azure RBAC assignments apply at the selected scope and are inherited by child scopes. Keep the assignment at the narrowest resource, resource group, subscription, or management-group boundary that contains the intended resources. Assign at the workload resource group or subscription represented by the review; inherited parent assignments expose reviews across all child workloads.
Common use cases (2)
- Let an auditor, application owner, or stakeholder inspect resiliency review findings without changing triage decisions.
- Provide read-only review context during architecture, continuity, or operational readiness assessments.
Prerequisites (2)
- A resiliency review must exist for the workload.
- The principal must only need review and recommendation visibility, not lifecycle or triage changes.
Best practices (2)
- Assign at the narrowest workload boundary and avoid subscription-wide review visibility when a resource group is sufficient.
- Escalate to Advisor Reviews Contributor only for an approved triage decision.
Security considerations (2)
- Review findings can reveal workload architecture, dependencies, and resilience weaknesses.
- The role has no write Actions or DataActions and cannot remediate resources.
Assignment guidance
Assign to review participants who require visibility only, scoped to the reviewed workload. Use the Contributor counterpart only when approve, reject, or reset authority is explicitly required.
Related roles (1)
- Advisor Reviews Contributor: Adds approve, reject, and reset actions for triage recommendations.
Common questions
When should I assign the Advisor Reviews Reader Azure role?
Assign Advisor Reviews Reader when you need to: Let an auditor, application owner, or stakeholder inspect resiliency review findings without changing triage decisions.; and Provide read-only review context during architecture, continuity, or operational readiness assessments.. Practical scope: Azure RBAC assignments apply at the selected scope and are inherited by child scopes. Keep the assignment at the narrowest resource, resource group, subscription, or management-group boundary that contains the intended resources. Assign at the workload resource group or subscription represented by the review; inherited parent assignments expose reviews across all child workloads.
What permissions does the Advisor Reviews Reader Azure role grant?
The role definition grants 3 combined control-plane and data-plane actions. Representative operations include: Microsoft.Advisor/resiliencyReviews/read; Microsoft.Advisor/triageRecommendations/read; and Microsoft.Advisor/triageResources/read. Review the permission sections above for the complete definition and exclusions.
What are the security risks of the Advisor Reviews Reader Azure role?
Key considerations when assigning Advisor Reviews Reader: Review findings can reveal workload architecture, dependencies, and resilience weaknesses.; and The role has no write Actions or DataActions and cannot remediate resources.. Follow the assignment guidance above and use the narrowest practical scope.
Editorial sources (6)
- Azure built-in roles for Management and governance →
Supports: Description, Practical scope, Security considerations. Retrieved 2026-07-16.
- Steps to assign an Azure role →
Supports: Prerequisites, Assignment guidance. Retrieved 2026-07-16.
- Understand scope for Azure RBAC →
Supports: Practical scope, Assignment guidance. Retrieved 2026-07-16.
- Best practices for Azure RBAC →
Supports: Best practices, Assignment guidance. Retrieved 2026-07-16.
- Azure Advisor Resiliency Reviews →
Supports: Description, Practical scope, Common use cases, Prerequisites, Best practices, Security considerations, Assignment guidance, Related roles. Retrieved 2026-07-16.
- Roles and permissions in Azure Advisor →
Supports: Common use cases, Prerequisites, Best practices, Security considerations. Retrieved 2026-07-16.