Uses of Class
com.azure.resourcemanager.authorization.models.BuiltInRole

Packages that use BuiltInRole

Package	Description
com.azure.resourcemanager.authorization.models	Package containing the data models for AuthorizationManagementClient.
com.azure.resourcemanager.authorization.utils	This package contains utility classes for working with Azure authorization.

Uses of BuiltInRole in com.azure.resourcemanager.authorization.models

Fields in com.azure.resourcemanager.authorization.models declared as BuiltInRole

Modifier and Type	Field	Description
static final BuiltInRole	BuiltInRole.API_MANAGEMENT_SERVICE_CONTRIBUTOR	A role that can manage API Management service and the APIs.
static final BuiltInRole	BuiltInRole.API_MANAGEMENT_SERVICE_OPERATOR_ROLE	A role that can manage API Management service, but not the APIs themselves.
static final BuiltInRole	BuiltInRole.API_MANAGEMENT_SERVICE_READER_ROLE	A role that has read-only access to API Management service and APIs.
static final BuiltInRole	BuiltInRole.APPLICATION_INSIGHTS_COMPONENT_CONTRIBUTOR	A role that can manage Application Insights components.
static final BuiltInRole	BuiltInRole.AUTOMATION_OPERATOR	A role that is able to start, stop, suspend, and resume jobs.
static final BuiltInRole	BuiltInRole.AZURE_COSMOS_DB_ACCOUNT_CONTRIBUTOR	A role that can manage Azure Cosmos DB accounts.
static final BuiltInRole	BuiltInRole.AZURE_KUBERNETES_SERVICE_RBAC_ADMIN	Lets you manage all resources under cluster/namespace, except update or delete resource quotas and namespaces.
static final BuiltInRole	BuiltInRole.AZURE_KUBERNETES_SERVICE_RBAC_CLUSTER_ADMIN	Lets you manage all resources in the cluster.
static final BuiltInRole	BuiltInRole.AZURE_KUBERNETES_SERVICE_RBAC_READER	Allows read-only access to see most objects in a namespace.
static final BuiltInRole	BuiltInRole.AZURE_KUBERNETES_SERVICE_RBAC_WRITER	Allows read/write access to most objects in a namespace.
static final BuiltInRole	BuiltInRole.BACKUP_CONTRIBUTOR	A role that can manage backup in Recovery Services vault.
static final BuiltInRole	BuiltInRole.BACKUP_OPERATOR	A role that can manage backup except removing backup, in Recovery Services vault.
static final BuiltInRole	BuiltInRole.BACKUP_READER	A role that can view all backup management services.
static final BuiltInRole	BuiltInRole.BILLING_READER	A role that can view all billing information.
static final BuiltInRole	BuiltInRole.BIZTALK_CONTRIBUTOR	A role that can manage BizTalk services.
static final BuiltInRole	BuiltInRole.CLASSIC_NETWORK_CONTRIBUTOR	A role that can manage classic virtual networks and reserved IPs.
static final BuiltInRole	BuiltInRole.CLASSIC_STORAGE_ACCOUNT_CONTRIBUTOR	A role that can manage classic storage accounts.
static final BuiltInRole	BuiltInRole.CLASSIC_VIRTUAL_MACHINE_CONTRIBUTOR	A role that can manage classic virtual machines, but not the virtual network or storage account to which they are connected.
static final BuiltInRole	BuiltInRole.CLEARDB_MYSQL_DB_CONTRIBUTOR	A role that can manage ClearDB MySQL databases.
static final BuiltInRole	BuiltInRole.CONTRIBUTOR	A role that can manage everything except access..
static final BuiltInRole	BuiltInRole.DATA_FACTORY_CONTRIBUTOR	A role that can create and manage data factories, and child resources within them..
static final BuiltInRole	BuiltInRole.DEVTEST_LABS_USER	A role that can view everything and connect, start, restart, and shutdown virtual machines.
static final BuiltInRole	BuiltInRole.DNS_ZONE_CONTRIBUTOR	A role that can manage DNS zones and records.
static final BuiltInRole	BuiltInRole.INTELLIGENT_SYSTEMS_ACCOUNT_CONTRIBUTOR	A role that can manage Intelligent Systems accounts.
static final BuiltInRole	BuiltInRole.KEY_VAULT_ADMINISTRATOR	Perform all data plane operations on a key vault and all objects in it, including certificates, keys, and secrets.
static final BuiltInRole	BuiltInRole.KEY_VAULT_CERTIFICATES_OFFICER	Perform any action on the certificates of a key vault, except manage permissions.
static final BuiltInRole	BuiltInRole.KEY_VAULT_CONTRIBUTOR	A role that can manage key vaults, but not access to them.
static final BuiltInRole	BuiltInRole.KEY_VAULT_CRYPTO_OFFICER	Perform any action on the keys of a key vault, except manage permissions.
static final BuiltInRole	BuiltInRole.KEY_VAULT_CRYPTO_SERVICE_ENCRYPTION_USER	Read metadata of keys and perform wrap/unwrap operations.
static final BuiltInRole	BuiltInRole.KEY_VAULT_CRYPTO_USER	Perform cryptographic operations using keys.
static final BuiltInRole	BuiltInRole.KEY_VAULT_READER	Read metadata of key vaults and its certificates, keys, and secrets.
static final BuiltInRole	BuiltInRole.KEY_VAULT_SECRETS_OFFICER	Perform any action on the secrets of a key vault, except manage permissions.
static final BuiltInRole	BuiltInRole.KEY_VAULT_SECRETS_USER	Read secret contents.
static final BuiltInRole	BuiltInRole.MANAGED_IDENTITY_CONTRIBUTOR	A role that can manage user assigned identities.
static final BuiltInRole	BuiltInRole.MANAGED_IDENTITY_OPERATOR	A role that can read and assign user assigned identities.
static final BuiltInRole	BuiltInRole.MONITORING_CONTRIBUTOR	A role that can read monitoring data and edit monitoring settings.
static final BuiltInRole	BuiltInRole.MONITORING_READER	A role that can read all monitoring data.
static final BuiltInRole	BuiltInRole.NETWORK_CONTRIBUTOR	A role that can manage all network resources.
static final BuiltInRole	BuiltInRole.NEW_RELIC_APM_ACCOUNT_CONTRIBUTOR	A role that can manage New Relic Application Performance Management accounts and applications.
static final BuiltInRole	BuiltInRole.OWNER	A role that can manage everything, including access.
static final BuiltInRole	BuiltInRole.READER	A role that can view everything, but can't make changes.
static final BuiltInRole	BuiltInRole.REDIS_CACHE_CONTRIBUTOR	A role that can manage Redis caches.
static final BuiltInRole	BuiltInRole.SCHEDULER_JOB_COLLECTIONS_CONTRIBUTOR	A role that can manage scheduler job collections.
static final BuiltInRole	BuiltInRole.SEARCH_SERVICE_CONTRIBUTOR	A role that can manage search services.
static final BuiltInRole	BuiltInRole.SECURITY_MANAGER	A role that can manage security components, security policies, and virtual machines.
static final BuiltInRole	BuiltInRole.SQL_DB_CONTRIBUTOR	A role that can manage SQL databases, but not their security-related policies.
static final BuiltInRole	BuiltInRole.SQL_SECURITY_MANAGER	A role that can manage the security-related policies of SQL servers and databases.
static final BuiltInRole	BuiltInRole.SQL_SERVER_CONTRIBUTOR	A role that can manage SQL servers and databases, but not their security-related policies.
static final BuiltInRole	BuiltInRole.STORAGE_ACCOUNT_CONTRIBUTOR	A role that can manage storage accounts.
static final BuiltInRole	BuiltInRole.STORAGE_ACCOUNT_KEY_OPERATOR_SERVICE_ROLE	Storage Account Key Operators are allowed to list and regenerate keys on Storage Accounts.
static final BuiltInRole	BuiltInRole.STORAGE_BLOB_DATA_CONTRIBUTOR	Allows for read, write and delete access to Azure Storage blob containers and data.
static final BuiltInRole	BuiltInRole.STORAGE_BLOB_DATA_OWNER	Allows for full access to Azure Storage blob containers and data, including assigning POSIX access control.
static final BuiltInRole	BuiltInRole.STORAGE_BLOB_DATA_READER	Allows for read access to Azure Storage blob containers and data.
static final BuiltInRole	BuiltInRole.STORAGE_FILE_DATA_SMB_SHARE_CONTRIBUTOR	Allows for read, write, and delete access in Azure Storage file shares over SMB.
static final BuiltInRole	BuiltInRole.STORAGE_FILE_DATA_SMB_SHARE_READER	Allows for read access to Azure File Share over SMB.
static final BuiltInRole	BuiltInRole.STORAGE_QUEUE_DATA_CONTRIBUTOR	Allows for read, write, and delete access to Azure Storage queues and queue messages.
static final BuiltInRole	BuiltInRole.STORAGE_QUEUE_DATA_MESSAGE_PROCESSOR	Allows for peek, receive, and delete access to Azure Storage queue messages.
static final BuiltInRole	BuiltInRole.STORAGE_QUEUE_DATA_MESSAGE_SENDER	Allows for sending of Azure Storage queue messages.
static final BuiltInRole	BuiltInRole.STORAGE_QUEUE_DATA_READER	Allows for read access to Azure Storage queues and queue messages.
static final BuiltInRole	BuiltInRole.USER_ACCESS_ADMINISTRATOR	A role that can manage user access to Azure resources.
static final BuiltInRole	BuiltInRole.VIRTUAL_MACHINE_CONTRIBUTOR	A role that can manage virtual machines, but not the virtual network or storage account to which they are connected.
static final BuiltInRole	BuiltInRole.WEB_PLAN_CONTRIBUTOR	A role that can manage web plans.
static final BuiltInRole	BuiltInRole.WEBSITE_CONTRIBUTOR	A role that can manage websites, but not the web plans to which they are connected.

Methods in com.azure.resourcemanager.authorization.models that return BuiltInRole

Modifier and Type	Method	Description
static BuiltInRole	BuiltInRole.fromString(String name)	Finds or creates a role instance based on the specified name.

Methods in com.azure.resourcemanager.authorization.models that return types with arguments of type BuiltInRole

Modifier and Type	Method	Description
static Collection<BuiltInRole>	BuiltInRole.values()

Methods in com.azure.resourcemanager.authorization.models with parameters of type BuiltInRole

Modifier and Type	Method	Description
RoleAssignment.DefinitionStages.WithScope	RoleAssignment.DefinitionStages.WithRole.withBuiltInRole(BuiltInRole role)	Specifies the name of a built in role for this assignment.
ServicePrincipal.DefinitionStages.WithCreate	ServicePrincipal.DefinitionStages.WithRoleAssignment.withNewRole(BuiltInRole role, String scope)	Assigns a new role to the service principal.
ServicePrincipal.Update	ServicePrincipal.UpdateStages.WithRoleAssignment.withNewRole(BuiltInRole role, String scope)	Assigns a new role to the service principal.
ServicePrincipal.DefinitionStages.WithCreate	ServicePrincipal.DefinitionStages.WithRoleAssignment.withNewRoleInResourceGroup(BuiltInRole role, ResourceGroup resourceGroup)	Assigns a new role to the service principal.
ServicePrincipal.Update	ServicePrincipal.UpdateStages.WithRoleAssignment.withNewRoleInResourceGroup(BuiltInRole role, ResourceGroup resourceGroup)	Assigns a new role to the service principal.
ServicePrincipal.DefinitionStages.WithCreate	ServicePrincipal.DefinitionStages.WithRoleAssignment.withNewRoleInSubscription(BuiltInRole role, String subscriptionId)	Assigns a new role to the service principal.
ServicePrincipal.Update	ServicePrincipal.UpdateStages.WithRoleAssignment.withNewRoleInSubscription(BuiltInRole role, String subscriptionId)	Assigns a new role to the service principal.

Uses of BuiltInRole in com.azure.resourcemanager.authorization.utils

Methods in com.azure.resourcemanager.authorization.utils with parameters of type BuiltInRole

Modifier and Type	Method	Description
RoleAssignmentHelper	RoleAssignmentHelper.withAccessTo(String scope, BuiltInRole asRole)	Specifies that applications running on an Azure service with this identity requires the given access role with scope of access limited to the ARM resource identified by the resource ID specified in the scope parameter.
RoleAssignmentHelper	RoleAssignmentHelper.withAccessToCurrentResourceGroup(BuiltInRole asRole)	Specifies that applications running on an Azure service with this identity requires the given access role with scope of access limited to the current resource group that the identity resides.
RoleAssignmentHelper	RoleAssignmentHelper.withoutAccessTo(String scope, BuiltInRole asRole)	Specifies that an access role assigned to the identity should be removed.