jurjen.ladenius/Cloud-20Engineering
1
0
Fork 0
mirror of https://dev.azure.com/effectory/Survey%20Software/_git/Cloud%20Engineering synced 2026-02-27 18:52:18 +01:00
Code Issues Packages Projects Releases Wiki Activity

Azure sql auditing scripts and new cosmos role for _pim_cosmos_ users #98329 #98330 #98328 #98681

Browse Source
This commit is contained in:
Jurjen Ladenius
2024-04-11 14:38:26 +02:00
parent 3df9ea6d44
commit c91b0f0908
4 changed files with 1468 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
Custom roles/Cosmos DB List Keys.json Normal file
View File

@@ -0,0 +1,22 @@
{
"id": "/providers/Microsoft.Authorization/roleDefinitions/01032560-a033-4a7e-977d-c360b71b9217",
"properties": {
"roleName": "Cosmos DB List Keys",
"description": "Lets you list keys for Azure Cosmos DB accounts. Used for PIM cosmos roles.",
"assignableScopes": [
"/providers/Microsoft.Management/managementGroups/e9792fd7-4044-47e7-a40d-3fba46f1cd09"
],
"permissions": [
{
"actions": [
"Microsoft.DocumentDB/databaseAccounts/readonlyKeys/*",
"Microsoft.DocumentDB/databaseAccounts/listKeys/*",
"Microsoft.DocumentDB/databaseAccounts/listConnectionStrings/*"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
]
}
}