Azure built-in roles for General

  • Article
  • 05/18/2025

This article lists the Azure built-in roles in the General category.

Reader

View all resources, but does not allow you to make any changes.

This role includes the */read action for the control plane. Users that are assigned this role can read control plane information for all Azure resources.

Learn more

Actions Description
*/read Read control plane information for all Azure resources.
NotActions
none
DataActions
none
NotDataActions
none 
{
  "assignableScopes": [
    "/"
  ],
  "description": "View all resources, but does not allow you to make any changes.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7",
  "name": "acdd72a7-3385-48ef-bd42-f606fba81ae7",
  "permissions": [
    {
      "actions": [
        "*/read"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Next steps