Azure Hybrid + multicloud built-in role
Azure Resource Bridge Deployment Role
Azure Resource Bridge Deployment Role
Control-plane and data-plane permissions below are imported directly from Microsoft Learn. In-app editorial guidance (use cases, best practices, security notes) and least-privilege recommendations are still pending review.
Role definition ID: 7b1f81f9-4196-4058-8aae-762e593270df
Control-plane actions (36)
Microsoft.Authorization/roleassignments/readMicrosoft.AzureStackHCI/Register/ActionMicrosoft.ResourceConnector/register/actionMicrosoft.ResourceConnector/appliances/readMicrosoft.ResourceConnector/appliances/writeMicrosoft.ResourceConnector/appliances/deleteMicrosoft.ResourceConnector/locations/operationresults/readMicrosoft.ResourceConnector/locations/operationsstatus/readMicrosoft.ResourceConnector/appliances/listClusterUserCredential/actionMicrosoft.ResourceConnector/appliances/listKeys/actionMicrosoft.ResourceConnector/appliances/upgradeGraphs/readMicrosoft.ResourceConnector/telemetryconfig/readMicrosoft.ResourceConnector/operations/readMicrosoft.ExtendedLocation/register/actionMicrosoft.ExtendedLocation/customLocations/deploy/actionMicrosoft.ExtendedLocation/customLocations/readMicrosoft.ExtendedLocation/customLocations/writeMicrosoft.ExtendedLocation/customLocations/deleteMicrosoft.HybridConnectivity/register/actionMicrosoft.Kubernetes/register/actionMicrosoft.KubernetesConfiguration/register/actionMicrosoft.KubernetesConfiguration/extensions/writeMicrosoft.KubernetesConfiguration/extensions/readMicrosoft.KubernetesConfiguration/extensions/deleteMicrosoft.KubernetesConfiguration/extensions/operations/readMicrosoft.KubernetesConfiguration/namespaces/readMicrosoft.KubernetesConfiguration/operations/readMicrosoft.GuestConfiguration/guestConfigurationAssignments/readMicrosoft.HybridContainerService/register/actionMicrosoft.HybridContainerService/kubernetesVersions/readMicrosoft.HybridContainerService/kubernetesVersions/writeMicrosoft.HybridContainerService/skus/readMicrosoft.HybridContainerService/skus/writeMicrosoft.Resources/subscriptions/resourceGroups/readMicrosoft.AzureStackHCI/StorageContainers/WriteMicrosoft.AzureStackHCI/StorageContainers/Read
Data-plane actions (0)
None — this role grants no data-plane (data access) actions.
Excluded actions (0)
None
Assignable scopes (1)
/