Azure Management and governance built-in role
Advisor Reviews Reader
Reads Azure Advisor resiliency reviews, linked triage recommendations, and triage resources without approving, rejecting, or resetting review outcomes. It is control-plane read access with no DataActions.
Role-definition permissions are imported from Microsoft Learn. Practical scope, use cases, prerequisites, best practices, security considerations, assignment guidance, and relationships have been reviewed against the official sources below.
Role definition ID: c64499e0-74c3-47ad-921c-13865957895c
Control-plane actions (3)
Microsoft.Advisor/resiliencyReviews/readMicrosoft.Advisor/triageRecommendations/readMicrosoft.Advisor/triageResources/read
Data-plane actions (0)
None — this role grants no data-plane (data access) actions.
Excluded actions (0)
None
Assignable scopes (1)
/
Practical scope
Azure RBAC assignments apply at the selected scope and are inherited by child scopes. Keep the assignment at the narrowest resource, resource group, subscription, or management-group boundary that contains the intended resources. Assign at the workload resource group or subscription represented by the review; inherited parent assignments expose reviews across all child workloads.
Common use cases (2)
- Let an auditor, application owner, or stakeholder inspect resiliency review findings without changing triage decisions.
- Provide read-only review context during architecture, continuity, or operational readiness assessments.
Prerequisites (2)
- A resiliency review must exist for the workload.
- The principal must only need review and recommendation visibility, not lifecycle or triage changes.
Best practices (2)
- Assign at the narrowest workload boundary and avoid subscription-wide review visibility when a resource group is sufficient.
- Escalate to Advisor Reviews Contributor only for an approved triage decision.
Security considerations (2)
- Review findings can reveal workload architecture, dependencies, and resilience weaknesses.
- The role has no write Actions or DataActions and cannot remediate resources.
Assignment guidance
Assign to review participants who require visibility only, scoped to the reviewed workload. Use the Contributor counterpart only when approve, reject, or reset authority is explicitly required.
Related roles (1)
- Advisor Reviews Contributor: Adds approve, reject, and reset actions for triage recommendations.
Editorial sources (6)
- Azure built-in roles for Management and governance →
Supports: Description, Practical scope, Security considerations. Retrieved 2026-07-16.
- Steps to assign an Azure role →
Supports: Prerequisites, Assignment guidance. Retrieved 2026-07-16.
- Understand scope for Azure RBAC →
Supports: Practical scope, Assignment guidance. Retrieved 2026-07-16.
- Best practices for Azure RBAC →
Supports: Best practices, Assignment guidance. Retrieved 2026-07-16.
- Azure Advisor Resiliency Reviews →
Supports: Description, Practical scope, Common use cases, Prerequisites, Best practices, Security considerations, Assignment guidance, Related roles. Retrieved 2026-07-16.
- Roles and permissions in Azure Advisor →
Supports: Common use cases, Prerequisites, Best practices, Security considerations. Retrieved 2026-07-16.