Permissions Used for Azure Database Protection

The Commvault software uses the following Azure permissions to perform protection operations for your Azure database instances.

Permission

Usage

Microsoft.DBforMariaDB/servers/*

Perform actions for MariaDB servers

Microsoft.DBforMariaDB/locations/*

Gets information about MariaDB server operations

Microsoft.DBforMySQL/servers/*

Perform actions for MySQL servers

Microsoft.DBforMySQL/locations/*

Gets information about MySQL server operations

Microsoft.DBforMySQL/flexibleServers/*

Perform actions for MySQL Flexible Server

Microsoft.DBforPostgreSQL/servers/*

Perform actions for PostgreSQL Servers

Microsoft.DBforPostgreSQL/locations/*

Gets information about PostgreSQL server operations

Microsoft.DBforPostgreSQL/flexibleServers/*

Perform actions for PostgreSQL Flexible Server

Microsoft.Resources/subscriptions/resourceGroups/*

Perform actions for resource groups

Microsoft.Sql/managedInstances/read

Return the list of SQL managed instances or get the properties for the specified managed instance

Microsoft.Sql/servers/read

Return the list of SQL servers or get the properties for the specified server

Microsoft.Sql/servers/databases/read

Return the list of SQL databases or gets the properties for the specified database

Microsoft.Sql/servers/databases/write

Creates a SQL database with the specified parameters or updates the properties or tags for the specified database

Microsoft.Sql/servers/databases/delete

Deletes an existing SQL database.

Microsoft.Sql/servers/databases/export/action

Export Azure SQL Database

Microsoft.Sql/servers/databases/import/action

Import Azure SQL Database

Microsoft.Sql/servers/import/action

Import new Azure SQL database

Microsoft.Sql/servers/importExportOperationResults/read

Gets in-progress import or export operations

Microsoft.DocumentDB/databaseAccounts/read

Reads a database account

Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/*

Perform actions for SQL containers

Microsoft.DocumentDB/databaseAccounts/listKeys/action

List keys of a database account

Microsoft.DocumentDB/databaseAccounts/readonlykeys/action

Reads the database account readonly keys

Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/*

Create a Cassandra keyspace

Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/*

Perform actions for MongoDB databases

Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/*

Perform actions for MongoDB collections

Microsoft.DocumentDB/databaseAccounts/tables/*

Perform actions for tables

Microsoft.DocumentDB/cassandraClusters/read

Read a managed Cassandra cluster or list all managed Cassandra clusters

Microsoft.Storage/storageAccounts/tableServices/*

Perform actions for table services

Microsoft.Storage/storageAccounts/read

Returns the list of storage accounts or gets the properties for the specified storage account

Microsoft.Storage/storageAccounts/listkeys/action

Returns the access keys for the specified storage account

Microsoft.Resources/subscriptions/resourceGroups/read

Gets or lists resource groups

×

Loading...