What are Azure built-in roles?

Azure built-in roles are predefined RBAC (Role-Based Access Control) roles provided by Microsoft Azure. They grant specific permissions to Azure resources and cannot be modified. Examples include Owner, Contributor, Reader, and 862+ specialized roles for services like Storage, Key Vault, and Virtual Machines.

How many Azure built-in roles are there?

There are currently 865 Azure built-in roles. This number grows as Microsoft adds new Azure services and features. This site monitors and tracks all changes to these roles.

What is the difference between Owner, Contributor, and Reader roles?

Owner has full access including the ability to assign roles to others. Contributor can create and manage all resources but cannot grant access to others. Reader can only view resources but cannot make any changes. These are the three fundamental Azure built-in roles.

How do I find the right Azure role for my needs?

Use our Role Recommender tool to find the least-privilege Azure built-in role. Enter the operations you need (like Microsoft.Storage/storageAccounts/read) and get recommendations for the most appropriate role with minimal excess permissions.

Where can I find the role definition ID for an Azure built-in role?

Each Azure built-in role has a unique GUID as its role definition ID. You can find these IDs on this site by clicking on any role to view its details. For example, the Contributor role ID is b24988ac-6180-42a0-ab88-20f7382dd24c.

What are actions, notActions, dataActions, and notDataActions in Azure RBAC?

In Azure RBAC, 'actions' define allowed control plane operations (like managing resources), while 'dataActions' define data plane operations (like reading blob data). 'notActions' and 'notDataActions' are exclusions that remove specific permissions from the allowed set. The effective permissions are: actions minus notActions, and dataActions minus notDataActions.

How often are Azure built-in roles updated by Microsoft?

Microsoft updates Azure built-in roles regularly as new Azure services and features are released. This site monitors for changes daily and shows the complete change history for each role, including what permissions were added or removed.

Can I create custom roles in Azure RBAC?

Yes, Azure allows you to create custom RBAC roles when built-in roles don't meet your needs. Custom roles let you define exact permissions by specifying actions, notActions, dataActions, and notDataActions. However, following the principle of least privilege, it's recommended to use built-in roles when possible.

Azure Built-in Roles List - RBAC Permissions Reference

Updated	Role	Event
2025-12-19	DevCenter Project Admin `331c37c6-af14-46d9-b9f4-e1909e1b95a0`	Updated Edit
2025-12-19	Defender for Storage Data Scanner `1e7ca9b1-60d1-4db8-a914-f2ca1ff27c40`	Updated Edit
2025-12-18	Azure Red Hat OpenShift First Party Network `42f3c60f-e7b1-46d7-ba56-6de681664342`	Created New
2025-12-18	Fabric Resource Management Administrator `337a31c1-4e14-4ef9-83ed-584bb8d2b70a`	Updated Edit
2025-12-18	Azure AI Owner `c883944f-8b7b-4483-af10-35834be79c4a`	Created New
2025-12-18	Azure Stack HCI Device Management Role `865ae368-6a45-4bd1-8fbf-0d5151f56fc1`	Updated Edit
2025-12-17	Arc Container Storage Contributor `ee99642a-225b-4fe8-a771-9d9036053e87`	Created New
2025-12-17	Defender Serverless Scanner `68ac31b4-936a-4046-a6d2-ba6f8a757bf6`	Updated Edit
2025-12-17	Log Analytics Contributor `92aaf0da-9dab-42b6-94a3-d43ce8d16293`	Updated Edit
2025-12-17	Log Analytics Reader `73c42c96-874c-492b-b04d-ab87d138a893`	Updated Edit
2025-12-15	Log Analytics Reader `73c42c96-874c-492b-b04d-ab87d138a893`	Updated Edit
2025-12-15	MongoDB Atlas Contributor `045b6ee5-0c68-42c4-9be0-7389794309f5`	Created New
2025-12-10	Defender for AI Threat Protection Purview Operator `cc27d9db-08f8-4bdf-81a8-d03bb8db2dd9`	Deleted Del
2025-12-10	Defender for AI Threat Protection Purview Operator `cc27d9db-08f8-4bdf-81a8-d03bb8db2dd9`	Created New
2025-12-10	Azure Device Onboarding Contributor `a954a0e0-f57f-4606-8421-fd7bd4e54b0f`	Created New
2025-11-25	Defender Unified RBAC Scoped Reader `d56b031f-8d90-4376-9231-b5c94fce88ef`	Created New
2025-11-18	Defender Settings Contributor `7d0c0268-1199-449b-a52e-75c20879f46b`	Created New
2025-11-17	Defender API Security `6f91a4f9-10ee-4b95-b8cd-96ee73c5968d`	Created New
2025-11-14	Playwright Workspace Contributor `78cf819f-0969-4ebe-8759-015c6efcd5bf`	Created New
2025-11-14	Playwright Workspace Owner `45265627-32f7-4da4-9ab0-b1cb0e9ec70b`	Created New
2025-11-12	Cognitive Services Security Integration Admin `14f26b53-9d80-4924-8141-f664426a48f6`	Created New
2025-11-11	Storage Connector Contributor `9d819e60-1b9f-4871-b492-4e6cdee0b50a`	Created New
2025-11-11	Defender CSPM `46023a6a-0702-4cbf-956c-d8c3ac27bc2b`	Created New
2025-11-11	Storage File Data SMB Take Ownership `5d9bac3f-34b2-432f-bde5-78aa8e73ce6b`	Created New
2025-11-07	ARN Service Event Grid Subscriber Role `dc0882cc-bc27-4d21-9ea2-f821aaa10fb1`	Created New
2025-11-04	Azure Resilience Management Drills Target Resource Contributor `82c6a823-ae9c-4b90-b5c5-bff581c45896`	Created New
2025-11-04	Azure Resilience Management Drills Target Resource Administrator `e4c7f620-39b8-4688-bba2-70dd82ef367b`	Created New
2025-11-04	Azure Resilience Management Drills Assets Administrator `5a2ec2f1-2375-4950-9906-59ec1d979249`	Created New
2025-11-04	Azure Resilience Management Drills Assets Contributor `344b740c-5e7c-4d32-89b2-ee3b51cb89bc`	Created New
2025-11-03	Defender Cloud Secrets Posture `512ef07a-840c-48d2-9be4-9a30a75a5c70`	Created New
2025-11-03	Informatica DataManagement Contributor role `2e481b5d-5af3-463b-8b01-f9c948aaf0c5`	Created New
2025-11-03	Microsoft Confluent Contributor role `5052f0f9-7e27-4570-bc13-9ee1cf442526`	Created New
2025-10-30	SRE Agent Author `eb64ab4c-23eb-4f63-a9c2-27da365f04e7`	Created New
2025-10-29	Relationship Administrator `b54df9c1-53dc-45cc-a86d-7a83cced2ed0`	Created New
2025-10-29	Relationship Reader `5eaf7b81-a48f-45ed-b6b4-c64bfe86d523`	Created New
2025-10-29	Service Group Member Relationship Contributor `05b1aaf9-00c9-477b-b0e8-2da660b78c51`	Created New
2025-10-24	Azure Kubernetes Fleet Manager RBAC Reader for Member Clusters `463ad26c-fcce-4469-9c7f-5653d8acbab5`	Created New
2025-10-24	Azure Kubernetes Fleet Manager RBAC Cluster Admin for Member Clusters `79a36d98-eb96-4a76-ae1d-481dc98d2c23`	Created New
2025-10-24	Azure Kubernetes Fleet Manager RBAC Writer for Member Clusters `50346970-0998-40f2-b47d-f3b8809840f8`	Created New
2025-10-24	Azure Kubernetes Fleet Manager RBAC Admin for Member Clusters `d1f699ed-700a-4c77-a22f-29890ac7b115`	Created New
2025-10-23	Managed Mesh for AKS Contributor Role `852e55ca-96ce-48b0-abca-2cd74d9042ca`	Created New
2025-10-22	Azure Resilience Management Goals Contributor `3910633d-19d0-4d31-b5e6-4f3101b137b9`	Created New
2025-10-22	Azure Resilience Management Goals Reader `39ea2c4e-798a-4469-b81d-65dc7c54cbdb`	Created New
2025-10-22	Azure Resilience Management Goals Administrator `a2b7cc47-30ec-462f-a2f4-9ac6e1c266af`	Created New
2025-10-17	Hybrid Network Owner `9d3ef640-3c86-4e0a-8907-8d361559c012`	Created New
2025-10-13	Migrate Arc Discovery Reader - Preview `5d5dddae-e124-4753-972d-aae60b37deb4`	Created New
2025-10-10	Healthcare Agent Contributer `13d06eae-ec82-4345-bcd6-c38625ddffbc`	Created New
2025-10-07	Supercomputer Infrastructure Contributor `68899692-f960-4247-af28-82f55b357997`	Created New
2025-10-02	Storage File Data SMB Admin `bbf004e3-0e4b-4f86-ae4f-1f8fb47b357b`	Created New
2025-09-30	Garnet PubSub Data Reader `da9adf61-39cd-41d5-87a0-30b21f7270d8`	Created New
2025-09-30	Garnet PubSub Data Contributor `56e95fdc-3337-468d-b964-30d07f2a2018`	Created New
2025-09-24	Essential Machine Management Administrator `34013b0a-565b-43aa-8755-1b7c286f6cf7`	Created New

2025-12-19

DevCenter Project Admin

331c37c6-af14-46d9-b9f4-e1909e1b95a0

Updated Edit

2025-12-19

Defender for Storage Data Scanner

1e7ca9b1-60d1-4db8-a914-f2ca1ff27c40

Updated Edit

2025-12-18

Azure Red Hat OpenShift First Party Network

42f3c60f-e7b1-46d7-ba56-6de681664342

Created New

2025-12-18

Fabric Resource Management Administrator

337a31c1-4e14-4ef9-83ed-584bb8d2b70a

Updated Edit

2025-12-18

Azure AI Owner

c883944f-8b7b-4483-af10-35834be79c4a

Created New

2025-12-18

Azure Stack HCI Device Management Role

865ae368-6a45-4bd1-8fbf-0d5151f56fc1

Updated Edit

2025-12-17

Arc Container Storage Contributor

ee99642a-225b-4fe8-a771-9d9036053e87

Created New

2025-12-17

Defender Serverless Scanner

68ac31b4-936a-4046-a6d2-ba6f8a757bf6

Updated Edit

2025-12-17

Log Analytics Contributor

92aaf0da-9dab-42b6-94a3-d43ce8d16293

Updated Edit

2025-12-17

Log Analytics Reader

73c42c96-874c-492b-b04d-ab87d138a893

Updated Edit

2025-12-15

Log Analytics Reader

73c42c96-874c-492b-b04d-ab87d138a893

Updated Edit

2025-12-15

MongoDB Atlas Contributor

045b6ee5-0c68-42c4-9be0-7389794309f5

Created New

2025-12-10

Defender for AI Threat Protection Purview Operator

cc27d9db-08f8-4bdf-81a8-d03bb8db2dd9

Deleted Del

2025-12-10

Defender for AI Threat Protection Purview Operator

cc27d9db-08f8-4bdf-81a8-d03bb8db2dd9

Created New

2025-12-10

Azure Device Onboarding Contributor

a954a0e0-f57f-4606-8421-fd7bd4e54b0f

Created New

2025-11-25

Defender Unified RBAC Scoped Reader

d56b031f-8d90-4376-9231-b5c94fce88ef

Created New

2025-11-18

Defender Settings Contributor

7d0c0268-1199-449b-a52e-75c20879f46b

Created New

2025-11-17

Defender API Security

6f91a4f9-10ee-4b95-b8cd-96ee73c5968d

Created New

2025-11-14

Playwright Workspace Contributor

78cf819f-0969-4ebe-8759-015c6efcd5bf

Created New

2025-11-14

Playwright Workspace Owner

45265627-32f7-4da4-9ab0-b1cb0e9ec70b

Created New

2025-11-12

Cognitive Services Security Integration Admin

14f26b53-9d80-4924-8141-f664426a48f6

Created New

2025-11-11

Storage Connector Contributor

9d819e60-1b9f-4871-b492-4e6cdee0b50a

Created New

2025-11-11

Defender CSPM

46023a6a-0702-4cbf-956c-d8c3ac27bc2b

Created New

2025-11-11

Storage File Data SMB Take Ownership

5d9bac3f-34b2-432f-bde5-78aa8e73ce6b

Created New

2025-11-07

ARN Service Event Grid Subscriber Role

dc0882cc-bc27-4d21-9ea2-f821aaa10fb1

Created New

2025-11-04

Azure Resilience Management Drills Target Resource Contributor

82c6a823-ae9c-4b90-b5c5-bff581c45896

Created New

2025-11-04

Azure Resilience Management Drills Target Resource Administrator

e4c7f620-39b8-4688-bba2-70dd82ef367b

Created New

2025-11-04

Azure Resilience Management Drills Assets Administrator

5a2ec2f1-2375-4950-9906-59ec1d979249

Created New

2025-11-04

Azure Resilience Management Drills Assets Contributor

344b740c-5e7c-4d32-89b2-ee3b51cb89bc

Created New

2025-11-03

Defender Cloud Secrets Posture

512ef07a-840c-48d2-9be4-9a30a75a5c70

Created New

2025-11-03

Informatica DataManagement Contributor role

2e481b5d-5af3-463b-8b01-f9c948aaf0c5

Created New

2025-11-03

Microsoft Confluent Contributor role

5052f0f9-7e27-4570-bc13-9ee1cf442526

Created New

2025-10-30

SRE Agent Author

eb64ab4c-23eb-4f63-a9c2-27da365f04e7

Created New

2025-10-29

Relationship Administrator

b54df9c1-53dc-45cc-a86d-7a83cced2ed0

Created New

2025-10-29

Relationship Reader

5eaf7b81-a48f-45ed-b6b4-c64bfe86d523

Created New

2025-10-29

Service Group Member Relationship Contributor

05b1aaf9-00c9-477b-b0e8-2da660b78c51

Created New

2025-10-24

Azure Kubernetes Fleet Manager RBAC Reader for Member Clusters

463ad26c-fcce-4469-9c7f-5653d8acbab5

Created New

2025-10-24

Azure Kubernetes Fleet Manager RBAC Cluster Admin for Member Clusters

79a36d98-eb96-4a76-ae1d-481dc98d2c23

Created New

2025-10-24

Azure Kubernetes Fleet Manager RBAC Writer for Member Clusters

50346970-0998-40f2-b47d-f3b8809840f8

Created New

2025-10-24

Azure Kubernetes Fleet Manager RBAC Admin for Member Clusters

d1f699ed-700a-4c77-a22f-29890ac7b115

Created New

2025-10-23

Managed Mesh for AKS Contributor Role

852e55ca-96ce-48b0-abca-2cd74d9042ca

Created New

2025-10-22

Azure Resilience Management Goals Contributor

3910633d-19d0-4d31-b5e6-4f3101b137b9

Created New

2025-10-22

Azure Resilience Management Goals Reader

39ea2c4e-798a-4469-b81d-65dc7c54cbdb

Created New

2025-10-22

Azure Resilience Management Goals Administrator

a2b7cc47-30ec-462f-a2f4-9ac6e1c266af

Created New

2025-10-17

Hybrid Network Owner

9d3ef640-3c86-4e0a-8907-8d361559c012

Created New

2025-10-13

Migrate Arc Discovery Reader - Preview

5d5dddae-e124-4753-972d-aae60b37deb4

Created New

2025-10-10

Healthcare Agent Contributer

13d06eae-ec82-4345-bcd6-c38625ddffbc

Created New

2025-10-07

Supercomputer Infrastructure Contributor

68899692-f960-4247-af28-82f55b357997

Created New

2025-10-02

Storage File Data SMB Admin

bbf004e3-0e4b-4f86-ae4f-1f8fb47b357b

Created New

2025-09-30

Garnet PubSub Data Reader

da9adf61-39cd-41d5-87a0-30b21f7270d8

Created New

2025-09-30

Garnet PubSub Data Contributor

56e95fdc-3337-468d-b964-30d07f2a2018

Created New

2025-09-24

Essential Machine Management Administrator

34013b0a-565b-43aa-8755-1b7c286f6cf7

Created New

Azure RBAC Recent Changes