Azure Storage built-in role
Storage Connector Contributor
Allows creating and managing storage connectors to access remote data sources in-place in a storage account. This role is in preview and subject to change.
Control-plane and data-plane permissions below are imported directly from Microsoft Learn. In-app editorial guidance (use cases, best practices, security notes) and least-privilege recommendations are still pending review.
Role definition ID: 9d819e60-1b9f-4871-b492-4e6cdee0b50a
Control-plane actions (15)
Microsoft.Authorization/*/readMicrosoft.Insights/alertRules/*Microsoft.Resources/deployments/*Microsoft.Resources/subscriptions/resourceGroups/readMicrosoft.Storage/storageAccounts/readMicrosoft.Storage/storageAccounts/listServiceSas/actionMicrosoft.Storage/storageAccounts/blobServices/readMicrosoft.Storage/storageAccounts/blobServices/containers/readMicrosoft.Storage/storageAccounts/blobServices/containers/writeMicrosoft.Storage/locations/DataManagementRPOperationStatuses/readMicrosoft.Storage/locations/DataManagementRPOperationStatuses/writeMicrosoft.Storage/storageAccounts/connectors/readMicrosoft.Storage/storageAccounts/connectors/deleteMicrosoft.Storage/storageAccounts/connectors/writeMicrosoft.Storage/storageAccounts/connectors/testExistingConnection/action
Data-plane actions (2)
Microsoft.Storage/storageAccounts/blobServices/containers/blobs/readMicrosoft.Storage/storageAccounts/blobServices/containers/blobs/write
Excluded actions (0)
None
Assignable scopes (1)
/