Azure Storage built-in role

Classic Storage Account Contributor

Lets you manage classic storage accounts, but not access to them.

Control-plane and data-plane permissions below are imported directly from Microsoft Learn. In-app editorial guidance (use cases, best practices, security notes) and least-privilege recommendations are still pending review.

Role definition ID: 86e8f5dc-a6e9-4c67-9d15-de283e8eac25

Control-plane actions (7)

Microsoft.Authorization/*/read
Microsoft.ClassicStorage/storageAccounts/*
Microsoft.Insights/alertRules/*
Microsoft.ResourceHealth/availabilityStatuses/read
Microsoft.Resources/deployments/*
Microsoft.Resources/subscriptions/resourceGroups/read
Microsoft.Support/*

Data-plane actions (0)

None — this role grants no data-plane (data access) actions.

Excluded actions (0)

None

Assignable scopes (1)

Official Microsoft Learn documentation →