Azure Management and governance built-in role
Managed Application Publisher Operator
Allows the publisher to read resources in the managed resource group for Managed Application and request JIT access for additional operations. This role is only used by the Managed Application service to provide access to publishers.
Control-plane and data-plane permissions below are imported directly from Microsoft Learn. In-app editorial guidance (use cases, best practices, security notes) and least-privilege recommendations are still pending review.
Role definition ID: b9331d33-8a36-4f8c-b097-4f54124fdb44
Control-plane actions (3)
*/readMicrosoft.Resources/deployments/*Microsoft.Solutions/jitRequests/*
Data-plane actions (0)
None — this role grants no data-plane (data access) actions.
Excluded actions (0)
None
Assignable scopes (1)
/