The Commvault software uses the following Azure permissions to perform protection operations for your Azure database instances.
Permission |
Usage |
---|---|
Microsoft.DBforMariaDB/servers/* |
Perform actions for MariaDB servers |
Microsoft.DBforMariaDB/locations/* |
Gets information about MariaDB server operations |
Microsoft.DBforMySQL/servers/* |
Perform actions for MySQL servers |
Microsoft.DBforMySQL/locations/* |
Gets information about MySQL server operations |
Microsoft.DBforMySQL/flexibleServers/* |
Perform actions for MySQL Flexible Server |
Microsoft.DBforPostgreSQL/servers/* |
Perform actions for PostgreSQL Servers |
Microsoft.DBforPostgreSQL/locations/* |
Gets information about PostgreSQL server operations |
Microsoft.DBforPostgreSQL/flexibleServers/* |
Perform actions for PostgreSQL Flexible Server |
Microsoft.Resources/subscriptions/resourceGroups/* |
Perform actions for resource groups |
Microsoft.Sql/managedInstances/read |
Return the list of SQL managed instances or get the properties for the specified managed instance |
Microsoft.Sql/servers/read |
Return the list of SQL servers or get the properties for the specified server |
Microsoft.Sql/servers/databases/read |
Return the list of SQL databases or gets the properties for the specified database |
Microsoft.Sql/servers/databases/write |
Creates a SQL database with the specified parameters or updates the properties or tags for the specified database |
Microsoft.Sql/servers/databases/delete |
Deletes an existing SQL database. |
Microsoft.Sql/servers/databases/export/action |
Export Azure SQL Database |
Microsoft.Sql/servers/databases/import/action |
Import Azure SQL Database |
Microsoft.Sql/servers/import/action |
Import new Azure SQL database |
Microsoft.Sql/servers/importExportOperationResults/read |
Gets in-progress import or export operations |
Microsoft.DocumentDB/databaseAccounts/read |
Reads a database account |
Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/* |
Perform actions for SQL containers |
Microsoft.DocumentDB/databaseAccounts/listKeys/action |
List keys of a database account |
Microsoft.DocumentDB/databaseAccounts/readonlykeys/action |
Reads the database account readonly keys |
Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/* |
Create a Cassandra keyspace |
Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/* |
Perform actions for MongoDB databases |
Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/* |
Perform actions for MongoDB collections |
Microsoft.DocumentDB/databaseAccounts/tables/* |
Perform actions for tables |
Microsoft.DocumentDB/cassandraClusters/read |
Read a managed Cassandra cluster or list all managed Cassandra clusters |
Microsoft.Storage/storageAccounts/tableServices/* |
Perform actions for table services |
Microsoft.Storage/storageAccounts/read |
Returns the list of storage accounts or gets the properties for the specified storage account |
Microsoft.Storage/storageAccounts/listkeys/action |
Returns the access keys for the specified storage account |
Microsoft.Resources/subscriptions/resourceGroups/read |
Gets or lists resource groups |