Azure Management and governance built-in role
Azure Connected Machine Resource Manager
Custom Role for AzureStackHCI RP to manage hybrid compute machines and hybrid connectivity endpoints in a resource group
Control-plane and data-plane permissions below are imported directly from Microsoft Learn. In-app editorial guidance (use cases, best practices, security notes) and least-privilege recommendations are still pending review.
Role definition ID: f5819b54-e033-4d82-ac66-4fec3cbf3f4c
Control-plane actions (34)
Microsoft.Authorization/*/readMicrosoft.GuestConfiguration/guestConfigurationAssignments/*/readMicrosoft.GuestConfiguration/guestConfigurationAssignments/readMicrosoft.GuestConfiguration/guestConfigurationAssignments/writeMicrosoft.HybridCompute/machines/readMicrosoft.HybridCompute/machines/extensions/readMicrosoft.HybridCompute/*/readMicrosoft.HybridCompute/machines/deleteMicrosoft.HybridCompute/machines/extensions/deleteMicrosoft.HybridCompute/machines/extensions/writeMicrosoft.HybridCompute/machines/licenseProfiles/deleteMicrosoft.HybridCompute/machines/licenseProfiles/readMicrosoft.HybridCompute/machines/licenseProfiles/writeMicrosoft.HybridCompute/machines/UpgradeExtensions/actionMicrosoft.HybridCompute/machines/writeMicrosoft.HybridConnectivity/endpoints/readMicrosoft.HybridConnectivity/endpoints/serviceConfigurations/readMicrosoft.HybridConnectivity/endpoints/serviceConfigurations/writeMicrosoft.HybridConnectivity/endpoints/writeMicrosoft.Resources/subscriptions/resourceGroups/readMicrosoft.EdgeMarketplace/locations/operationStatuses/readMicrosoft.EdgeMarketPlace/offers/getAccessToken/actionMicrosoft.EdgeMarketPlace/offers/generateAccessToken/actionMicrosoft.EdgeMarketplace/publishers/readMicrosoft.EdgeMarketplace/offers/readMicrosoft.ExtendedLocation/customLocations/readMicrosoft.Attestation/attestationProviders/writeMicrosoft.Attestation/attestationProviders/readMicrosoft.Attestation/attestationProviders/deleteMicrosoft.Attestation/attestationProviders/attestation/readMicrosoft.Attestation/attestationProviders/attestation/writeMicrosoft.Attestation/attestationProviders/attestation/deleteMicrosoft.HybridCompute/settings/readMicrosoft.HybridCompute/settings/write
Data-plane actions (0)
None — this role grants no data-plane (data access) actions.
Excluded actions (0)
None
Assignable scopes (1)
/