Azure Kubernetes Fleet Manager RBAC Writer
PrivilegiadaContributorIAM ScopeContainers·57 permissões
Dado verificado em · Fonte
Total de permissões
57Actions
0NotActions
0DataActions
0Role ID
5af6afb3-c06c-4fa4-8848-71a8aee05683Categoria
ContainersRisk Tier
Contributor (CTB)Risk Tier: Contributor
Grants full write access to create and manage all resources but cannot assign roles or manage access to others.
Descrição
MicrosoftGrants read/write access to most Kubernetes resources within a namespace in the fleet-managed hub cluster. This role does not allow viewing or modifying roles or role bindings. However, this role allows accessing Secrets as any ServiceAccount in the namespace, so it can be used to gain the API access levels of any ServiceAccount in the namespace. Applying this role at cluster scope will give access across all namespaces.
Role Definition (JSON)
{"Name": "Azure Kubernetes Fleet Manager RBAC Writer","Id": "5af6afb3-c06c-4fa4-8848-71a8aee05683","IsCustom": false,"Description": "Grants read/write access to most Kubernetes resources within a namespace in the fleet-managed hub cluster. This role does not allow viewing or modifying roles or role bindings. However, this role allows accessing Secrets as any ServiceAccount in the namespace, so it can be used to gain the API access levels of any ServiceAccount in the namespace. Applying this role at cluster scope will give access across all namespaces.","Actions": [],"NotActions": [],"DataActions": [],"NotDataActions": [],"AssignableScopes": ["/"]
Assignable Scopes
/
PowerShell
Get-AzRoleDefinition -Name "Azure Kubernetes Fleet Manager RBAC Writer"
Azure CLI
az role definition list --name "Azure Kubernetes Fleet Manager RBAC Writer"