Uses of Class
com.azure.resourcemanager.authorization.models.BuiltInRole

Packages that use BuiltInRole

Package	Description
com.azure.resourcemanager.authorization.models	Package containing the data models for AuthorizationManagementClient.
com.azure.resourcemanager.authorization.utils	This package contains utility classes for working with Azure authorization.

Uses of BuiltInRole in com.azure.resourcemanager.authorization.models

Fields in com.azure.resourcemanager.authorization.models declared as BuiltInRole

Modifier and Type	Field	Description
static BuiltInRole	BuiltInRole.API_MANAGEMENT_SERVICE_CONTRIBUTOR	A role that can manage API Management service and the APIs.
static BuiltInRole	BuiltInRole.API_MANAGEMENT_SERVICE_OPERATOR_ROLE	A role that can manage API Management service, but not the APIs themselves.
static BuiltInRole	BuiltInRole.API_MANAGEMENT_SERVICE_READER_ROLE	A role that has read-only access to API Management service and APIs.
static BuiltInRole	BuiltInRole.APPLICATION_INSIGHTS_COMPONENT_CONTRIBUTOR	A role that can manage Application Insights components.
static BuiltInRole	BuiltInRole.AUTOMATION_OPERATOR	A role that is able to start, stop, suspend, and resume jobs.
static BuiltInRole	BuiltInRole.AZURE_COSMOS_DB_ACCOUNT_CONTRIBUTOR	A role that can manage Azure Cosmos DB accounts.
static BuiltInRole	BuiltInRole.BACKUP_CONTRIBUTOR	A role that can manage backup in Recovery Services vault.
static BuiltInRole	BuiltInRole.BACKUP_OPERATOR	A role that can manage backup except removing backup, in Recovery Services vault.
static BuiltInRole	BuiltInRole.BACKUP_READER	A role that can view all backup management services.
static BuiltInRole	BuiltInRole.BILLING_READER	A role that can view all billing information.
static BuiltInRole	BuiltInRole.BIZTALK_CONTRIBUTOR	A role that can manage BizTalk services.
static BuiltInRole	BuiltInRole.CLASSIC_NETWORK_CONTRIBUTOR	A role that can manage classic virtual networks and reserved IPs.
static BuiltInRole	BuiltInRole.CLASSIC_STORAGE_ACCOUNT_CONTRIBUTOR	A role that can manage classic storage accounts.
static BuiltInRole	BuiltInRole.CLASSIC_VIRTUAL_MACHINE_CONTRIBUTOR	A role that can manage classic virtual machines, but not the virtual network or storage account to which they are connected.
static BuiltInRole	BuiltInRole.CLEARDB_MYSQL_DB_CONTRIBUTOR	A role that can manage ClearDB MySQL databases.
static BuiltInRole	BuiltInRole.CONTRIBUTOR	A role that can manage everything except access..
static BuiltInRole	BuiltInRole.DATA_FACTORY_CONTRIBUTOR	A role that can create and manage data factories, and child resources within them..
static BuiltInRole	BuiltInRole.DEVTEST_LABS_USER	A role that can view everything and connect, start, restart, and shutdown virtual machines.
static BuiltInRole	BuiltInRole.DNS_ZONE_CONTRIBUTOR	A role that can manage DNS zones and records.
static BuiltInRole	BuiltInRole.INTELLIGENT_SYSTEMS_ACCOUNT_CONTRIBUTOR	A role that can manage Intelligent Systems accounts.
static BuiltInRole	BuiltInRole.KEY_VAULT_ADMINISTRATOR	Perform all data plane operations on a key vault and all objects in it, including certificates, keys, and secrets.
static BuiltInRole	BuiltInRole.KEY_VAULT_CERTIFICATES_OFFICER	Perform any action on the certificates of a key vault, except manage permissions.
static BuiltInRole	BuiltInRole.KEY_VAULT_CONTRIBUTOR	A role that can manage key vaults, but not access to them.
static BuiltInRole	BuiltInRole.KEY_VAULT_CRYPTO_OFFICER	Perform any action on the keys of a key vault, except manage permissions.
static BuiltInRole	BuiltInRole.KEY_VAULT_CRYPTO_SERVICE_ENCRYPTION_USER	Read metadata of keys and perform wrap/unwrap operations.
static BuiltInRole	BuiltInRole.KEY_VAULT_CRYPTO_USER	Perform cryptographic operations using keys.
static BuiltInRole	BuiltInRole.KEY_VAULT_READER	Read metadata of key vaults and its certificates, keys, and secrets.
static BuiltInRole	BuiltInRole.KEY_VAULT_SECRETS_OFFICER	Perform any action on the secrets of a key vault, except manage permissions.
static BuiltInRole	BuiltInRole.KEY_VAULT_SECRETS_USER	Read secret contents.
static BuiltInRole	BuiltInRole.MANAGED_IDENTITY_CONTRIBUTOR	A role that can manage user assigned identities.
static BuiltInRole	BuiltInRole.MANAGED_IDENTITY_OPERATOR	A role that can read and assign user assigned identities.
static BuiltInRole	BuiltInRole.MONITORING_CONTRIBUTOR	A role that can read monitoring data and edit monitoring settings.
static BuiltInRole	BuiltInRole.MONITORING_READER	A role that can read all monitoring data.
static BuiltInRole	BuiltInRole.NETWORK_CONTRIBUTOR	A role that can manage all network resources.
static BuiltInRole	BuiltInRole.NEW_RELIC_APM_ACCOUNT_CONTRIBUTOR	A role that can manage New Relic Application Performance Management accounts and applications.
static BuiltInRole	BuiltInRole.OWNER	A role that can manage everything, including access.
static BuiltInRole	BuiltInRole.READER	A role that can view everything, but can't make changes.
static BuiltInRole	BuiltInRole.REDIS_CACHE_CONTRIBUTOR	A role that can manage Redis caches.
static BuiltInRole	BuiltInRole.SCHEDULER_JOB_COLLECTIONS_CONTRIBUTOR	A role that can manage scheduler job collections.
static BuiltInRole	BuiltInRole.SEARCH_SERVICE_CONTRIBUTOR	A role that can manage search services.
static BuiltInRole	BuiltInRole.SECURITY_MANAGER	A role that can manage security components, security policies, and virtual machines.
static BuiltInRole	BuiltInRole.SQL_DB_CONTRIBUTOR	A role that can manage SQL databases, but not their security-related policies.
static BuiltInRole	BuiltInRole.SQL_SECURITY_MANAGER	A role that can manage the security-related policies of SQL servers and databases.
static BuiltInRole	BuiltInRole.SQL_SERVER_CONTRIBUTOR	A role that can manage SQL servers and databases, but not their security-related policies.
static BuiltInRole	BuiltInRole.STORAGE_ACCOUNT_CONTRIBUTOR	A role that can manage storage accounts.
static BuiltInRole	BuiltInRole.STORAGE_ACCOUNT_KEY_OPERATOR_SERVICE_ROLE	Storage Account Key Operators are allowed to list and regenerate keys on Storage Accounts.
static BuiltInRole	BuiltInRole.STORAGE_BLOB_DATA_CONTRIBUTOR	Allows for read, write and delete access to Azure Storage blob containers and data.
static BuiltInRole	BuiltInRole.STORAGE_BLOB_DATA_OWNER	Allows for full access to Azure Storage blob containers and data, including assigning POSIX access control.
static BuiltInRole	BuiltInRole.STORAGE_BLOB_DATA_READER	Allows for read access to Azure Storage blob containers and data.
static BuiltInRole	BuiltInRole.STORAGE_FILE_DATA_SMB_SHARE_CONTRIBUTOR	Allows for read, write, and delete access in Azure Storage file shares over SMB.
static BuiltInRole	BuiltInRole.STORAGE_FILE_DATA_SMB_SHARE_READER	Allows for read access to Azure File Share over SMB.
static BuiltInRole	BuiltInRole.STORAGE_QUEUE_DATA_CONTRIBUTOR	Allows for read, write, and delete access to Azure Storage queues and queue messages.
static BuiltInRole	BuiltInRole.STORAGE_QUEUE_DATA_MESSAGE_PROCESSOR	Allows for peek, receive, and delete access to Azure Storage queue messages.
static BuiltInRole	BuiltInRole.STORAGE_QUEUE_DATA_MESSAGE_SENDER	Allows for sending of Azure Storage queue messages.
static BuiltInRole	BuiltInRole.STORAGE_QUEUE_DATA_READER	Allows for read access to Azure Storage queues and queue messages.
static BuiltInRole	BuiltInRole.USER_ACCESS_ADMINISTRATOR	A role that can manage user access to Azure resources.
static BuiltInRole	BuiltInRole.VIRTUAL_MACHINE_CONTRIBUTOR	A role that can manage virtual machines, but not the virtual network or storage account to which they are connected.
static BuiltInRole	BuiltInRole.WEB_PLAN_CONTRIBUTOR	A role that can manage web plans.
static BuiltInRole	BuiltInRole.WEBSITE_CONTRIBUTOR	A role that can manage websites, but not the web plans to which they are connected.

Methods in com.azure.resourcemanager.authorization.models that return BuiltInRole

Modifier and Type	Method	Description
static BuiltInRole	BuiltInRole.fromString(String name)	Finds or creates a role instance based on the specified name.

Methods in com.azure.resourcemanager.authorization.models that return types with arguments of type BuiltInRole

Modifier and Type	Method	Description
static Collection<BuiltInRole>	BuiltInRole.values()

Methods in com.azure.resourcemanager.authorization.models with parameters of type BuiltInRole

Modifier and Type	Method	Description
RoleAssignment.DefinitionStages.WithScope	RoleAssignment.DefinitionStages.WithRole.withBuiltInRole(BuiltInRole role)	Specifies the name of a built in role for this assignment.
ServicePrincipal.DefinitionStages.WithCreate	ServicePrincipal.DefinitionStages.WithRoleAssignment.withNewRole(BuiltInRole role, String scope)	Assigns a new role to the service principal.
ServicePrincipal.Update	ServicePrincipal.UpdateStages.WithRoleAssignment.withNewRole(BuiltInRole role, String scope)	Assigns a new role to the service principal.
ServicePrincipal.DefinitionStages.WithCreate	ServicePrincipal.DefinitionStages.WithRoleAssignment.withNewRoleInResourceGroup(BuiltInRole role, ResourceGroup resourceGroup)	Assigns a new role to the service principal.
ServicePrincipal.Update	ServicePrincipal.UpdateStages.WithRoleAssignment.withNewRoleInResourceGroup(BuiltInRole role, ResourceGroup resourceGroup)	Assigns a new role to the service principal.
ServicePrincipal.DefinitionStages.WithCreate	ServicePrincipal.DefinitionStages.WithRoleAssignment.withNewRoleInSubscription(BuiltInRole role, String subscriptionId)	Assigns a new role to the service principal.
ServicePrincipal.Update	ServicePrincipal.UpdateStages.WithRoleAssignment.withNewRoleInSubscription(BuiltInRole role, String subscriptionId)	Assigns a new role to the service principal.

Uses of BuiltInRole in com.azure.resourcemanager.authorization.utils

Methods in com.azure.resourcemanager.authorization.utils with parameters of type BuiltInRole

Modifier and Type	Method	Description
RoleAssignmentHelper	RoleAssignmentHelper.withAccessTo(String scope, BuiltInRole asRole)	Specifies that applications running on an Azure service with this identity requires the given access role with scope of access limited to the ARM resource identified by the resource ID specified in the scope parameter.
RoleAssignmentHelper	RoleAssignmentHelper.withAccessToCurrentResourceGroup(BuiltInRole asRole)	Specifies that applications running on an Azure service with this identity requires the given access role with scope of access limited to the current resource group that the identity resides.
RoleAssignmentHelper	RoleAssignmentHelper.withoutAccessTo(String scope, BuiltInRole asRole)	Specifies that an access role assigned to the identity should be removed.