Azure Storage built-in role
Storage DataShare Contributor
Allows creating and managing storage dataShares to share data from storage accounts in-place. This role is in preview and subject to change.
Control-plane and data-plane permissions below are imported directly from Microsoft Learn. In-app editorial guidance (use cases, best practices, security notes) and least-privilege recommendations are still pending review.
Role definition ID: 35c49d44-ccc1-4b18-8267-cfb3bacdd396
Control-plane actions (13)
Microsoft.Authorization/*/readMicrosoft.Insights/alertRules/*Microsoft.Resources/deployments/*Microsoft.Resources/subscriptions/resourceGroups/readMicrosoft.Storage/storageAccounts/readMicrosoft.Storage/storageAccounts/listServiceSas/actionMicrosoft.Storage/storageAccounts/blobServices/readMicrosoft.Storage/storageAccounts/blobServices/containers/readMicrosoft.Storage/locations/DataManagementRPOperationStatuses/readMicrosoft.Storage/locations/DataManagementRPOperationStatuses/writeMicrosoft.Storage/storageAccounts/dataShares/readMicrosoft.Storage/storageAccounts/dataShares/deleteMicrosoft.Storage/storageAccounts/dataShares/write
Data-plane actions (1)
Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read
Excluded actions (0)
None
Assignable scopes (1)
/