{ "properties": { "roleName": "Commvault - VM Protection (Advanced)", "IsCustom": "True", "description": "Lets you manage Virtual Machine Backups, Restores, and Replications through Commvault, but does not grant access to the virtual machines themselves, or to the connected virtual network or storage account.", "assignableScopes": [ "/subscriptions/<>" ], "permissions": [ { "actions": [ "Microsoft.Resources/subscriptions/resourceGroups/read", "Microsoft.Compute/locations/communityGalleries/read", "Microsoft.Compute/locations/communityGalleries/images/read", "Microsoft.Compute/locations/communityGalleries/images/versions/read", "Microsoft.Compute/locations/diagnosticOperations/read", "Microsoft.Compute/locations/diagnostics/read", "Microsoft.Compute/locations/diskOperations/read", "Microsoft.Compute/locations/logAnalytics/getRequestRateByInterval/action", "Microsoft.Compute/locations/logAnalytics/getThrottledRequests/action", "Microsoft.Compute/locations/operations/read", "Microsoft.Compute/locations/vsmOperations/read", "Microsoft.Compute/locations/privateEndpointConnectionProxyAzureAsyncOperation/read", "Microsoft.Compute/locations/privateEndpointConnectionProxyOperationResults/read", "Microsoft.Compute/locations/publishers/read", "Microsoft.Compute/locations/publishers/artifacttypes/offers/read", "Microsoft.Compute/locations/publishers/artifacttypes/offers/skus/read", "Microsoft.Compute/locations/publishers/artifacttypes/offers/skus/versions/read", "Microsoft.Compute/locations/publishers/artifacttypes/types/read", "Microsoft.Compute/locations/publishers/artifacttypes/types/versions/read", "Microsoft.Compute/locations/runCommands/read", "Microsoft.Compute/locations/sharedGalleries/read", "Microsoft.Compute/locations/sharedGalleries/images/read", "Microsoft.Compute/locations/sharedGalleries/images/versions/read", "Microsoft.Compute/locations/usages/read", "Microsoft.Compute/locations/vmSizeRecommendations/generate/action", "Microsoft.Compute/locations/vmSizes/read", "Microsoft.Compute/virtualMachines/read", "Microsoft.Compute/virtualMachines/write", "Microsoft.Compute/virtualMachines/delete", "Microsoft.Compute/virtualMachines/start/action", "Microsoft.Compute/virtualMachines/powerOff/action", "Microsoft.Compute/virtualMachines/restart/action", "Microsoft.Compute/virtualMachines/retrieveBootDiagnosticsData/action", "Microsoft.Compute/virtualMachines/deallocate/action", "Microsoft.Compute/virtualMachines/generalize/action", "Microsoft.Compute/virtualMachines/capture/action", "Microsoft.Compute/virtualMachines/runCommand/action", "Microsoft.Compute/virtualMachines/convertToManagedDisks/action", "Microsoft.Compute/virtualMachines/performMaintenance/action", "Microsoft.Compute/virtualMachines/rollbackOSDisk/action", "Microsoft.Compute/virtualMachines/deletePreservedOSDisk/action", "Microsoft.Compute/virtualMachines/upgradeVMAgent/action", "Microsoft.Compute/virtualMachines/attachDetachDataDisks/action", "Microsoft.Compute/virtualMachines/patchAssessmentResults/latest/read", "Microsoft.Compute/virtualMachines/patchAssessmentResults/latest/softwarePatches/read", "Microsoft.Compute/virtualMachines/patchInstallationResults/read", "Microsoft.Compute/virtualMachines/patchInstallationResults/softwarePatches/read", "Microsoft.Compute/virtualMachines/providers/Microsoft.Insights/diagnosticSettings/read", "Microsoft.Compute/virtualMachines/providers/Microsoft.Insights/diagnosticSettings/write", "Microsoft.Compute/virtualMachines/extensions/read", "Microsoft.Compute/virtualMachines/extensions/write", "Microsoft.Compute/virtualMachines/instanceView/read", "Microsoft.Compute/virtualMachines/runCommands/read", "Microsoft.Compute/virtualMachines/runCommands/write", "Microsoft.Compute/virtualMachines/vmSizes/read", "Microsoft.Compute/snapshots/read", "Microsoft.Compute/snapshots/write", "Microsoft.Compute/snapshots/delete", "Microsoft.Compute/snapshots/beginGetAccess/action", "Microsoft.Compute/snapshots/endGetAccess/action", "Microsoft.Compute/disks/read", "Microsoft.Compute/disks/write", "Microsoft.Compute/disks/delete", "Microsoft.Compute/disks/beginGetAccess/action", "Microsoft.Compute/disks/endGetAccess/action", "Microsoft.Network/loadBalancers/read", "Microsoft.Network/locations/checkAcceleratedNetworkingSupport/action", "Microsoft.Network/locations/checkPrivateLinkServiceVisibility/action", "Microsoft.Network/locations/validateResourceOwnership/action", "Microsoft.Network/locations/setResourceOwnership/action", "Microsoft.Network/locations/effectiveResourceOwnership/action", "Microsoft.Network/locations/setAzureNetworkManagerConfiguration/action", "Microsoft.Network/locations/publishResources/action", "Microsoft.Network/locations/PutResourcePubsubData/action", "Microsoft.Network/locations/getAzureNetworkManagerConfiguration/action", "Microsoft.Network/locations/setLoadBalancerFrontendPublicIpAddresses/action", "Microsoft.Network/locations/queryNetworkSecurityPerimeter/action", "Microsoft.Network/locations/availablePrivateEndpointTypes/read", "Microsoft.Network/locations/availableServiceAliases/read", "Microsoft.Network/locations/setAzureNetworkManagerConfiguration/read", "Microsoft.Network/locations/dnsResolverOperationResults/read", "Microsoft.Network/locations/dnsResolverOperationStatuses/read", "Microsoft.Network/locations/availableDelegations/read", "Microsoft.Network/locations/checkDnsNameAvailability/read", "Microsoft.Network/locations/operations/read", "Microsoft.Network/locations/operationResults/read", "Microsoft.Network/locations/privateLinkServices/privateEndpointConnectionProxies/read", "Microsoft.Network/locations/privateLinkServices/privateEndpointConnectionProxies/write", "Microsoft.Network/locations/privateLinkServices/privateEndpointConnectionProxies/delete", "Microsoft.Network/locations/serviceTags/read", "Microsoft.Network/locations/serviceTagDetails/read", "Microsoft.Network/locations/virtualNetworkAvailableEndpointServices/read", "Microsoft.Network/locations/supportedVirtualMachineSizes/read", "Microsoft.Network/networkInterfaces/read", "Microsoft.Network/networkInterfaces/write", "Microsoft.Network/networkInterfaces/join/action", "Microsoft.Network/networkInterfaces/delete", "Microsoft.Network/networkInterfaces/effectiveRouteTable/action", "Microsoft.Network/networkInterfaces/effectiveNetworkSecurityGroups/action", "Microsoft.Network/networkInterfaces/UpdateParentNicAttachmentOnElasticNic/action", "Microsoft.Network/networkInterfaces/ipconfigurations/read", "Microsoft.Network/networkInterfaces/ipconfigurations/join/action", "Microsoft.Network/networkInterfaces/loadBalancers/read", "Microsoft.Resources/deployments/read", "Microsoft.Resources/deployments/write", "Microsoft.Resources/deployments/delete", "Microsoft.Resources/deployments/cancel/action", "Microsoft.Resources/deployments/validate/action", "Microsoft.Resources/deployments/whatIf/action", "Microsoft.Resources/deployments/exportTemplate/action", "Microsoft.Resources/deployments/operations/read", "Microsoft.Resources/deployments/operationstatuses/read", "Microsoft.Storage/storageAccounts/restoreBlobRanges/action", "Microsoft.Storage/storageAccounts/listkeys/action", "Microsoft.Storage/storageAccounts/read", "Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action", "Microsoft.Storage/storageAccounts/blobServices/getInfo/action", "Microsoft.Storage/storageAccounts/blobServices/write", "Microsoft.Storage/storageAccounts/blobServices/containers/migrate/action", "Microsoft.Storage/storageAccounts/blobServices/containers/write", "Microsoft.Storage/storageAccounts/blobServices/containers/setAcl/action", "Microsoft.Storage/storageAccounts/blobServices/containers/getAcl/action", "Microsoft.Storage/storageAccounts/blobServices/containers/delete", "Microsoft.Storage/storageAccounts/blobServices/containers/read", "Microsoft.Storage/storageAccounts/blobServices/containers/lease/action", "Microsoft.Storage/storageAccounts/blobServices/containers/immutabilityPolicies/extend/action", "Microsoft.Storage/storageAccounts/blobServices/containers/immutabilityPolicies/delete", "Microsoft.Storage/storageAccounts/blobServices/containers/immutabilityPolicies/write", "Microsoft.Storage/storageAccounts/blobServices/containers/immutabilityPolicies/lock/action", "Microsoft.Storage/storageAccounts/blobServices/containers/immutabilityPolicies/read", "Microsoft.Compute/restorePointCollections/read", "Microsoft.Compute/restorePointCollections/write", "Microsoft.Compute/restorePointCollections/delete", "Microsoft.Compute/restorePointCollections/restorePoints/read", "Microsoft.Compute/restorePointCollections/restorePoints/write", "Microsoft.Compute/restorePointCollections/restorePoints/delete", "Microsoft.Compute/restorePointCollections/restorePoints/retrieveSasUris/action", "Microsoft.Compute/restorePointCollections/restorePoints/diskRestorePoints/read", "Microsoft.Compute/restorePointCollections/restorePoints/diskRestorePoints/beginGetAccess/action", "Microsoft.Compute/restorePointCollections/restorePoints/diskRestorePoints/endGetAccess/action", "Microsoft.Compute/diskAccesses/read", "Microsoft.Compute/diskAccesses/write", "Microsoft.Compute/diskAccesses/privateEndpointConnectionsApproval/action", "Microsoft.Compute/diskAccesses/privateEndpointConnectionProxies/read", "Microsoft.Compute/diskAccesses/privateEndpointConnectionProxies/write", "Microsoft.Compute/diskAccesses/privateEndpointConnectionProxies/validate/action", "Microsoft.Compute/diskAccesses/privateEndpointConnections/write", "Microsoft.KeyVault/vaults/read", "Microsoft.KeyVault/vaults/eventGridFilters/read", "Microsoft.KeyVault/vaults/keys/read", "Microsoft.KeyVault/vaults/keys/versions/read", "Microsoft.KeyVault/vaults/privateLinkResources/read", "Microsoft.KeyVault/vaults/providers/Microsoft.Insights/diagnosticSettings/Read", "Microsoft.KeyVault/vaults/providers/Microsoft.Insights/logDefinitions/read", "Microsoft.KeyVault/vaults/providers/Microsoft.Insights/metricDefinitions/read", "Microsoft.KeyVault/vaults/networkSecurityPerimeterAssociationProxies/read", "Microsoft.KeyVault/vaults/networkSecurityPerimeterConfigurations/read", "Microsoft.KeyVault/vaults/privateEndpointConnections/read", "Microsoft.KeyVault/vaults/privateEndpointConnectionProxies/read", "Microsoft.KeyVault/vaults/secrets/read", "Microsoft.Compute/availabilitySets/Read", "Microsoft.Network/loadBalancers/read", "Microsoft.Network/networkSecurityGroups/join/action", "Microsoft.Network/networkSecurityGroups/read", "Microsoft.Network/publicIPAddresses/join/action", "Microsoft.Network/publicIPAddresses/read", "Microsoft.Network/publicIPAddresses/write", "Microsoft.Network/virtualNetworks/read", "Microsoft.Network/virtualNetworks/subnets/read", "Microsoft.Network/virtualNetworks/subnets/join/action", "Microsoft.ResourceHealth/availabilityStatuses/read", "Microsoft.Resources/subscriptions/resourceGroups/read", "Microsoft.Storage/storageAccounts/listKeys/action", "Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action", "Microsoft.Storage/storageAccounts/blobServices/containers/read", "Microsoft.Storage/storageAccounts/blobServices/containers/write", "Microsoft.KeyVault/vaults/accessPolicies/write", "Microsoft.KeyVault/vaults/read", "Microsoft.KeyVault/vaults/write", "Microsoft.KeyVault/vaults/deploy/action", "Microsoft.KeyVault/checkNameAvailability/read", "Microsoft.KeyVault/operations/read", "Microsoft.Compute/proximityPlacementGroups/read", "Microsoft.Compute/proximityPlacementGroups/write", "Microsoft.Compute/proximityPlacementGroups/delete", "Microsoft.Compute/diskEncryptionSets/read", "Microsoft.MarketplaceOrdering/offertypes/publishers/offers/plans/agreements/read", "Microsoft.MarketplaceOrdering/offertypes/publishers/offers/plans/agreements/write", "Microsoft.Network/applicationSecurityGroups/read", "Microsoft.Network/applicationSecurityGroups/joinIpConfiguration/action", "Microsoft.Compute/galleries/read", "Microsoft.Compute/galleries/images/read", "Microsoft.Compute/galleries/images/versions/read", "Microsoft.ManagedIdentity/userAssignedIdentities/read", "Microsoft.ManagedIdentity/userAssignedIdentities/assign/action" ], "notActions": [], "dataActions": [ "Microsoft.KeyVault/vaults/secrets/delete", "Microsoft.KeyVault/vaults/secrets/backup/action", "Microsoft.KeyVault/vaults/secrets/purge/action", "Microsoft.KeyVault/vaults/secrets/update/action", "Microsoft.KeyVault/vaults/secrets/recover/action", "Microsoft.KeyVault/vaults/secrets/restore/action", "Microsoft.KeyVault/vaults/secrets/readMetadata/action", "Microsoft.KeyVault/vaults/secrets/getSecret/action", "Microsoft.KeyVault/vaults/secrets/setSecret/action", "Microsoft.KeyVault/vaults/keys/read", "Microsoft.KeyVault/vaults/keys/update/action", "Microsoft.KeyVault/vaults/keys/create/action", "Microsoft.KeyVault/vaults/keys/import/action", "Microsoft.KeyVault/vaults/keys/recover/action", "Microsoft.KeyVault/vaults/keys/restore/action", "Microsoft.KeyVault/vaults/keys/delete", "Microsoft.KeyVault/vaults/keys/backup/action", "Microsoft.KeyVault/vaults/keys/purge/action", "Microsoft.KeyVault/vaults/keys/encrypt/action", "Microsoft.KeyVault/vaults/keys/decrypt/action", "Microsoft.KeyVault/vaults/keys/wrap/action", "Microsoft.KeyVault/vaults/keys/unwrap/action", "Microsoft.KeyVault/vaults/keys/sign/action", "Microsoft.KeyVault/vaults/keys/verify/action", "Microsoft.KeyVault/vaults/keys/release/action", "Microsoft.KeyVault/vaults/keys/rotate/action", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/move/action", "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/add/action", "Microsoft.Compute/disks/download/action", "Microsoft.Compute/disks/upload/action", "Microsoft.Compute/snapshots/download/action", "Microsoft.Compute/snapshots/upload/action" ], "notDataActions": [] } ] } }