Azure permissions for Management and governance

Article
10/07/2024

This article lists the permissions for the Azure resource providers in the Management and governance category. You can use these permissions in your own Azure custom roles to provide granular access control to resources in Azure. Permission strings have the following format: {Company}.{ProviderName}/{resourceType}/{action}

Microsoft.Advisor

Your personalized Azure best practices recommendation engine.

Azure service: Azure Advisor

Action	Description
Microsoft.Advisor/generateRecommendations/action	Gets generate recommendations status
Microsoft.Advisor/register/action	Registers the subscription for the Microsoft Advisor
Microsoft.Advisor/unregister/action	Unregisters the subscription for the Microsoft Advisor
Microsoft.Advisor/advisorScore/read	Gets the score data for given subscription
Microsoft.Advisor/assessments/read	Read assessments
Microsoft.Advisor/assessments/write	Write assessments
Microsoft.Advisor/assessmentTypes/read	Read assessmentTypes
Microsoft.Advisor/configurations/read	Get configurations
Microsoft.Advisor/configurations/write	Creates/updates configuration
Microsoft.Advisor/generateRecommendations/read	Gets generate recommendations status
Microsoft.Advisor/metadata/read	Get Metadata
Microsoft.Advisor/operations/read	Gets the operations for the Microsoft Advisor
Microsoft.Advisor/recommendations/read	Reads recommendations
Microsoft.Advisor/recommendations/write	Writes recommendations
Microsoft.Advisor/recommendations/available/action	New recommendation is available in Microsoft Advisor
Microsoft.Advisor/recommendations/suppressions/read	Gets suppressions
Microsoft.Advisor/recommendations/suppressions/write	Creates/updates suppressions
Microsoft.Advisor/recommendations/suppressions/delete	Deletes suppression
Microsoft.Advisor/resiliencyReviews/read	Read resiliencyReviews
Microsoft.Advisor/suppressions/read	Gets suppressions
Microsoft.Advisor/suppressions/write	Creates/updates suppressions
Microsoft.Advisor/suppressions/delete	Deletes suppression
Microsoft.Advisor/triageRecommendations/read	Read triageRecommendations
Microsoft.Advisor/triageRecommendations/approve/action	Approve triageRecommendations
Microsoft.Advisor/triageRecommendations/reject/action	Reject triageRecommendations
Microsoft.Advisor/triageRecommendations/reset/action	Reset triageRecommendations
Microsoft.Advisor/workloads/read	Read workloads

Microsoft.Authorization

Azure service: Azure Policy, Azure RBAC, Azure Resource Manager

Action	Description
Microsoft.Authorization/elevateAccess/action	Grants the caller User Access Administrator access at the tenant scope
Microsoft.Authorization/classicAdministrators/read	Reads the administrators for the subscription. Does not have an effect if used as a NotAction in a custom role.
Microsoft.Authorization/classicAdministrators/write	Add or modify administrator to a subscription.
Microsoft.Authorization/classicAdministrators/delete	Removes the administrator from the subscription.
Microsoft.Authorization/classicAdministrators/operationstatuses/read	Gets the administrator operation statuses of the subscription.
Microsoft.Authorization/denyAssignments/read	Get information about a deny assignment.
Microsoft.Authorization/denyAssignments/write	Create a deny assignment at the specified scope.
Microsoft.Authorization/denyAssignments/delete	Delete a deny assignment at the specified scope.
Microsoft.Authorization/diagnosticSettings/read	Read the information about diagnostics settings
Microsoft.Authorization/diagnosticSettings/write	Create or update the information of diagnostics settings
Microsoft.Authorization/diagnosticSettings/delete	Delete diagnostics settings
Microsoft.Authorization/diagnosticSettingsCategories/read	Get the information about diagnostic settings categories
Microsoft.Authorization/locks/read	Gets locks at the specified scope.
Microsoft.Authorization/locks/write	Add locks at the specified scope.
Microsoft.Authorization/locks/delete	Delete locks at the specified scope.
Microsoft.Authorization/operations/read	Gets the list of operations
Microsoft.Authorization/permissions/read	Lists all the permissions the caller has at a given scope.
Microsoft.Authorization/policies/audit/action	Action taken as a result of evaluation of Azure Policy with 'audit' effect
Microsoft.Authorization/policies/auditIfNotExists/action	Action taken as a result of evaluation of Azure Policy with 'auditIfNotExists' effect
Microsoft.Authorization/policies/deny/action	Action taken as a result of evaluation of Azure Policy with 'deny' effect
Microsoft.Authorization/policies/deployIfNotExists/action	Action taken as a result of evaluation of Azure Policy with 'deployIfNotExists' effect
Microsoft.Authorization/policyAssignments/read	Get information about a policy assignment.
Microsoft.Authorization/policyAssignments/write	Create a policy assignment at the specified scope.
Microsoft.Authorization/policyAssignments/delete	Delete a policy assignment at the specified scope.
Microsoft.Authorization/policyAssignments/exempt/action	Exempt a policy assignment at the specified scope.
Microsoft.Authorization/policyAssignments/privateLinkAssociations/read	Get information about private link association.
Microsoft.Authorization/policyAssignments/privateLinkAssociations/write	Creates or updates a private link association.
Microsoft.Authorization/policyAssignments/privateLinkAssociations/delete	Deletes a private link association.
Microsoft.Authorization/policyAssignments/resourceManagementPrivateLinks/read	Get information about resource management private link.
Microsoft.Authorization/policyAssignments/resourceManagementPrivateLinks/write	Creates or updates a resource management private link.
Microsoft.Authorization/policyAssignments/resourceManagementPrivateLinks/delete	Deletes a resource management private link.
Microsoft.Authorization/policyAssignments/resourceManagementPrivateLinks/privateEndpointConnectionProxies/read	Get information about private endpoint connection proxy.
Microsoft.Authorization/policyAssignments/resourceManagementPrivateLinks/privateEndpointConnectionProxies/write	Creates or updates a private endpoint connection proxy.
Microsoft.Authorization/policyAssignments/resourceManagementPrivateLinks/privateEndpointConnectionProxies/delete	Deletes a private endpoint connection proxy.
Microsoft.Authorization/policyAssignments/resourceManagementPrivateLinks/privateEndpointConnectionProxies/validate/action	Validates a private endpoint connection proxy.
Microsoft.Authorization/policyAssignments/resourceManagementPrivateLinks/privateEndpointConnections/read	Get information about private endpoint connection.
Microsoft.Authorization/policyAssignments/resourceManagementPrivateLinks/privateEndpointConnections/write	Creates or updates a private endpoint connection.
Microsoft.Authorization/policyAssignments/resourceManagementPrivateLinks/privateEndpointConnections/delete	Deletes a private endpoint connection.
Microsoft.Authorization/policyDefinitions/read	Get information about a policy definition.
Microsoft.Authorization/policyDefinitions/write	Create a custom policy definition.
Microsoft.Authorization/policyDefinitions/delete	Delete a policy definition.
Microsoft.Authorization/policyExemptions/read	Get information about a policy exemption.
Microsoft.Authorization/policyExemptions/write	Create a policy exemption at the specified scope.
Microsoft.Authorization/policyExemptions/delete	Delete a policy exemption at the specified scope.
Microsoft.Authorization/policySetDefinitions/read	Get information about a policy set definition.
Microsoft.Authorization/policySetDefinitions/write	Create a custom policy set definition.
Microsoft.Authorization/policySetDefinitions/delete	Delete a policy set definition.
Microsoft.Authorization/providerOperations/read	Get operations for all resource providers which can be used in role definitions.
Microsoft.Authorization/roleAssignments/read	Get information about a role assignment.
Microsoft.Authorization/roleAssignments/write	Create a role assignment at the specified scope.
Microsoft.Authorization/roleAssignments/delete	Delete a role assignment at the specified scope.
Microsoft.Authorization/roleAssignmentScheduleInstances/read	Gets the role assignment schedule instances at given scope.
Microsoft.Authorization/roleAssignmentScheduleRequests/read	Gets the role assignment schedule requests at given scope.
Microsoft.Authorization/roleAssignmentScheduleRequests/write	Creates a role assignment schedule request at given scope.
Microsoft.Authorization/roleAssignmentScheduleRequests/cancel/action	Cancels a pending role assignment schedule request.
Microsoft.Authorization/roleAssignmentSchedules/read	Gets the role assignment schedules at given scope.
Microsoft.Authorization/roleDefinitions/read	Get information about a role definition.
Microsoft.Authorization/roleDefinitions/write	Create or update a custom role definition with specified permissions and assignable scopes.
Microsoft.Authorization/roleDefinitions/delete	Delete the specified custom role definition.
Microsoft.Authorization/roleEligibilityScheduleInstances/read	Gets the role eligibility schedule instances at given scope.
Microsoft.Authorization/roleEligibilityScheduleRequests/read	Gets the role eligibility schedule requests at given scope.
Microsoft.Authorization/roleEligibilityScheduleRequests/write	Creates a role eligibility schedule request at given scope.
Microsoft.Authorization/roleEligibilityScheduleRequests/cancel/action	Cancels a pending role eligibility schedule request.
Microsoft.Authorization/roleEligibilitySchedules/read	Gets the role eligibility schedules at given scope.
Microsoft.Authorization/roleManagementPolicies/read	Get Role management policies
Microsoft.Authorization/roleManagementPolicies/write	Update a role management policy
Microsoft.Authorization/roleManagementPolicyAssignments/read	Get role management policy assignments

Microsoft.Automation

Simplify cloud management with process automation.

Azure service: Automation

Action	Description
Microsoft.Automation/register/action	Registers the subscription to Azure Automation
Microsoft.Automation/automationAccounts/convertGraphRunbookContent/action	Convert Graph Runbook Content to its raw serialized format and vice-versa
Microsoft.Automation/automationAccounts/read	Gets an Azure Automation account
Microsoft.Automation/automationAccounts/write	Creates or updates an Azure Automation account
Microsoft.Automation/automationAccounts/listKeys/action	Reads the Keys for the automation account
Microsoft.Automation/automationAccounts/delete	Deletes an Azure Automation account
Microsoft.Automation/automationAccounts/agentRegistrationInformation/read	Read an Azure Automation DSC's registration information
Microsoft.Automation/automationAccounts/agentRegistrationInformation/regenerateKey/action	Writes a request to regenerate Azure Automation DSC keys
Microsoft.Automation/automationAccounts/certificates/getCount/action	Reads the count of certificates
Microsoft.Automation/automationAccounts/certificates/read	Gets an Azure Automation certificate asset
Microsoft.Automation/automationAccounts/certificates/write	Creates or updates an Azure Automation certificate asset
Microsoft.Automation/automationAccounts/certificates/delete	Deletes an Azure Automation certificate asset
Microsoft.Automation/automationAccounts/compilationjobs/write	Writes an Azure Automation DSC's Compilation
Microsoft.Automation/automationAccounts/compilationjobs/read	Reads an Azure Automation DSC's Compilation
Microsoft.Automation/automationAccounts/configurations/read	Gets an Azure Automation DSC's content
Microsoft.Automation/automationAccounts/configurations/getCount/action	Reads the count of an Azure Automation DSC's content
Microsoft.Automation/automationAccounts/configurations/write	Writes an Azure Automation DSC's content
Microsoft.Automation/automationAccounts/configurations/delete	Deletes an Azure Automation DSC's content
Microsoft.Automation/automationAccounts/configurations/content/read	Reads the configuration media content
Microsoft.Automation/automationAccounts/connections/read	Gets an Azure Automation connection asset
Microsoft.Automation/automationAccounts/connections/getCount/action	Reads the count of connections
Microsoft.Automation/automationAccounts/connections/write	Creates or updates an Azure Automation connection asset
Microsoft.Automation/automationAccounts/connections/delete	Deletes an Azure Automation connection asset
Microsoft.Automation/automationAccounts/connectionTypes/read	Gets an Azure Automation connection type asset
Microsoft.Automation/automationAccounts/connectionTypes/write	Creates an Azure Automation connection type asset
Microsoft.Automation/automationAccounts/connectionTypes/delete	Deletes an Azure Automation connection type asset
Microsoft.Automation/automationAccounts/credentials/read	Gets an Azure Automation credential asset
Microsoft.Automation/automationAccounts/credentials/getCount/action	Reads the count of credentials
Microsoft.Automation/automationAccounts/credentials/write	Creates or updates an Azure Automation credential asset
Microsoft.Automation/automationAccounts/credentials/delete	Deletes an Azure Automation credential asset
Microsoft.Automation/automationAccounts/diagnosticSettings/read	Gets the diagnostic setting for the resource
Microsoft.Automation/automationAccounts/diagnosticSettings/write	Sets the diagnostic setting for the resource
Microsoft.Automation/automationAccounts/hybridRunbookWorkerGroups/read	Reads a Hybrid Runbook Worker Group
Microsoft.Automation/automationAccounts/hybridRunbookWorkerGroups/write	Creates a Hybrid Runbook Worker Group
Microsoft.Automation/automationAccounts/hybridRunbookWorkerGroups/delete	Deletes a Hybrid Runbook Worker Group
Microsoft.Automation/automationAccounts/hybridRunbookWorkerGroups/hybridRunbookWorkers/read	Reads a Hybrid Runbook Worker
Microsoft.Automation/automationAccounts/hybridRunbookWorkerGroups/hybridRunbookWorkers/write	Creates a Hybrid Runbook Worker
Microsoft.Automation/automationAccounts/hybridRunbookWorkerGroups/hybridRunbookWorkers/move/action	Moves Hybrid Runbook Worker from one Worker Group to another
Microsoft.Automation/automationAccounts/hybridRunbookWorkerGroups/hybridRunbookWorkers/delete	Deletes a Hybrid Runbook Worker
Microsoft.Automation/automationAccounts/jobs/runbookContent/action	Gets the content of the Azure Automation runbook at the time of the job execution
Microsoft.Automation/automationAccounts/jobs/read	Gets an Azure Automation job
Microsoft.Automation/automationAccounts/jobs/write	Creates an Azure Automation job
Microsoft.Automation/automationAccounts/jobs/stop/action	Stops an Azure Automation job
Microsoft.Automation/automationAccounts/jobs/suspend/action	Suspends an Azure Automation job
Microsoft.Automation/automationAccounts/jobs/resume/action	Resumes an Azure Automation job
Microsoft.Automation/automationAccounts/jobs/output/read	Gets the output of a job
Microsoft.Automation/automationAccounts/jobs/streams/read	Gets an Azure Automation job stream
Microsoft.Automation/automationAccounts/jobSchedules/read	Gets an Azure Automation job schedule
Microsoft.Automation/automationAccounts/jobSchedules/write	Creates an Azure Automation job schedule
Microsoft.Automation/automationAccounts/jobSchedules/delete	Deletes an Azure Automation job schedule
Microsoft.Automation/automationAccounts/linkedWorkspace/read	Gets the workspace linked to the automation account
Microsoft.Automation/automationAccounts/logDefinitions/read	Gets the available logs for the automation account
Microsoft.Automation/automationAccounts/modules/read	Gets an Azure Automation Powershell module
Microsoft.Automation/automationAccounts/modules/getCount/action	Gets the count of Powershell modules within the Automation Account
Microsoft.Automation/automationAccounts/modules/write	Creates or updates an Azure Automation Powershell module
Microsoft.Automation/automationAccounts/modules/delete	Deletes an Azure Automation Powershell module
Microsoft.Automation/automationAccounts/modules/activities/read	Gets Azure Automation Activities
Microsoft.Automation/automationAccounts/nodeConfigurations/rawContent/action	Reads an Azure Automation DSC's node configuration content
Microsoft.Automation/automationAccounts/nodeConfigurations/read	Reads an Azure Automation DSC's node configuration
Microsoft.Automation/automationAccounts/nodeConfigurations/write	Writes an Azure Automation DSC's node configuration
Microsoft.Automation/automationAccounts/nodeConfigurations/delete	Deletes an Azure Automation DSC's node configuration
Microsoft.Automation/automationAccounts/nodecounts/read	Reads node count summary for the specified type
Microsoft.Automation/automationAccounts/nodes/read	Reads Azure Automation DSC nodes
Microsoft.Automation/automationAccounts/nodes/write	Creates or updates Azure Automation DSC nodes
Microsoft.Automation/automationAccounts/nodes/delete	Deletes Azure Automation DSC nodes
Microsoft.Automation/automationAccounts/nodes/reports/read	Reads Azure Automation DSC reports
Microsoft.Automation/automationAccounts/nodes/reports/content/read	Reads Azure Automation DSC report contents
Microsoft.Automation/automationAccounts/objectDataTypes/fields/read	Gets Azure Automation TypeFields
Microsoft.Automation/automationAccounts/privateEndpointConnectionProxies/read	Reads Azure Automation Private Endpoint Connection Proxy
Microsoft.Automation/automationAccounts/privateEndpointConnectionProxies/write	Creates an Azure Automation Private Endpoint Connection Proxy
Microsoft.Automation/automationAccounts/privateEndpointConnectionProxies/validate/action	Validate a Private endpoint connection request (groupId Validation)
Microsoft.Automation/automationAccounts/privateEndpointConnectionProxies/delete	Delete an Azure Automation Private Endpoint Connection Proxy
Microsoft.Automation/automationAccounts/privateEndpointConnectionProxies/operationResults/read	Get Azure Automation private endpoint proxy operation results.
Microsoft.Automation/automationAccounts/privateEndpointConnections/read	Get Azure Automation Private Endpoint Connection status
Microsoft.Automation/automationAccounts/privateEndpointConnections/write	Approve or reject an Azure Automation Private Endpoint Connection
Microsoft.Automation/automationAccounts/privateEndpointConnections/delete	Delete an Azure Automation Private Endpoint Connection
Microsoft.Automation/automationAccounts/privateLinkResources/read	Reads Group Information for private endpoints
Microsoft.Automation/automationAccounts/providers/Microsoft.Insights/metricDefinitions/read	Gets Automation Metric Definitions
Microsoft.Automation/automationAccounts/python2Packages/read	Gets an Azure Automation Python 2 package
Microsoft.Automation/automationAccounts/python2Packages/write	Creates or updates an Azure Automation Python 2 package
Microsoft.Automation/automationAccounts/python2Packages/delete	Deletes an Azure Automation Python 2 package
Microsoft.Automation/automationAccounts/python3Packages/read	Gets an Azure Automation Python 3 package
Microsoft.Automation/automationAccounts/python3Packages/write	Creates or updates an Azure Automation Python 3 package
Microsoft.Automation/automationAccounts/python3Packages/delete	Deletes an Azure Automation Python 3 package
Microsoft.Automation/automationAccounts/runbooks/read	Gets an Azure Automation runbook
Microsoft.Automation/automationAccounts/runbooks/getCount/action	Gets the count of Azure Automation runbooks
Microsoft.Automation/automationAccounts/runbooks/write	Creates or updates an Azure Automation runbook
Microsoft.Automation/automationAccounts/runbooks/delete	Deletes an Azure Automation runbook
Microsoft.Automation/automationAccounts/runbooks/publish/action	Publishes an Azure Automation runbook draft
Microsoft.Automation/automationAccounts/runbooks/content/read	Gets the content of an Azure Automation runbook
Microsoft.Automation/automationAccounts/runbooks/draft/read	Gets an Azure Automation runbook draft
Microsoft.Automation/automationAccounts/runbooks/draft/undoEdit/action	Undo edits to an Azure Automation runbook draft
Microsoft.Automation/automationAccounts/runbooks/draft/write	Creates an Azure Automation runbook draft
Microsoft.Automation/automationAccounts/runbooks/draft/content/write	Creates the content of an Azure Automation runbook draft
Microsoft.Automation/automationAccounts/runbooks/draft/operationResults/read	Gets Azure Automation runbook draft operation results
Microsoft.Automation/automationAccounts/runbooks/draft/testJob/read	Gets an Azure Automation runbook draft test job
Microsoft.Automation/automationAccounts/runbooks/draft/testJob/write	Creates an Azure Automation runbook draft test job
Microsoft.Automation/automationAccounts/runbooks/draft/testJob/stop/action	Stops an Azure Automation runbook draft test job
Microsoft.Automation/automationAccounts/runbooks/draft/testJob/suspend/action	Suspends an Azure Automation runbook draft test job
Microsoft.Automation/automationAccounts/runbooks/draft/testJob/resume/action	Resumes an Azure Automation runbook draft test job
Microsoft.Automation/automationAccounts/runbooks/operationResults/read	Gets Azure Automation runbook operation results
Microsoft.Automation/automationAccounts/schedules/read	Gets an Azure Automation schedule asset
Microsoft.Automation/automationAccounts/schedules/getCount/action	Gets the count of Azure Automation schedules
Microsoft.Automation/automationAccounts/schedules/write	Creates or updates an Azure Automation schedule asset
Microsoft.Automation/automationAccounts/schedules/delete	Deletes an Azure Automation schedule asset
Microsoft.Automation/automationAccounts/softwareUpdateConfigurationMachineRuns/read	Gets an Azure Automation Software Update Configuration Machine Run
Microsoft.Automation/automationAccounts/softwareUpdateConfigurationRuns/read	Gets an Azure Automation Software Update Configuration Run
Microsoft.Automation/automationAccounts/softwareUpdateConfigurations/write	Creates or updates Azure Automation Software Update Configuration
Microsoft.Automation/automationAccounts/softwareUpdateConfigurations/read	Gets an Azure Automation Software Update Configuration
Microsoft.Automation/automationAccounts/softwareUpdateConfigurations/delete	Deletes an Azure Automation Software Update Configuration
Microsoft.Automation/automationAccounts/statistics/read	Gets Azure Automation Statistics
Microsoft.Automation/automationAccounts/updateDeploymentMachineRuns/read	Get an Azure Automation update deployment machine
Microsoft.Automation/automationAccounts/updateManagementPatchJob/read	Gets an Azure Automation update management patch job
Microsoft.Automation/automationAccounts/usages/read	Gets Azure Automation Usage
Microsoft.Automation/automationAccounts/variables/read	Reads an Azure Automation variable asset
Microsoft.Automation/automationAccounts/variables/write	Creates or updates an Azure Automation variable asset
Microsoft.Automation/automationAccounts/variables/delete	Deletes an Azure Automation variable asset
Microsoft.Automation/automationAccounts/watchers/write	Creates an Azure Automation watcher job
Microsoft.Automation/automationAccounts/watchers/read	Gets an Azure Automation watcher job
Microsoft.Automation/automationAccounts/watchers/delete	Delete an Azure Automation watcher job
Microsoft.Automation/automationAccounts/watchers/start/action	Start an Azure Automation watcher job
Microsoft.Automation/automationAccounts/watchers/stop/action	Stop an Azure Automation watcher job
Microsoft.Automation/automationAccounts/watchers/streams/read	Gets an Azure Automation watcher job stream
Microsoft.Automation/automationAccounts/watchers/watcherActions/write	Create an Azure Automation watcher job actions
Microsoft.Automation/automationAccounts/watchers/watcherActions/read	Gets an Azure Automation watcher job actions
Microsoft.Automation/automationAccounts/watchers/watcherActions/delete	Delete an Azure Automation watcher job actions
Microsoft.Automation/deletedAutomationAccounts/read	Gets an Azure Automation deleted account
Microsoft.Automation/operations/read	Gets Available Operations for Azure Automation resources

Microsoft.Billing

Manage your subscriptions and see usage and billing.

Azure service: Cost Management + Billing

Action	Description
Microsoft.Billing/validateAddress/action	Validates an address. Use the operation to validate an address before using it as soldTo or a billTo address.
Microsoft.Billing/register/action
Microsoft.Billing/billingAccounts/read	Lists the billing accounts that a user has access to.
Microsoft.Billing/billingAccounts/write	Updates the properties of a billing account. Currently, displayName and address can be updated for billing accounts with agreement type Microsoft Customer Agreement. Currently address and notification email address can be updated for billing accounts with agreement type Microsoft Online Services Agreement. Currently, purchase order number can be edited for billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/listInvoiceSectionsWithCreateSubscriptionPermission/action	Lists the invoice sections for which the user has permission to create Azure subscriptions. The operation is supported only for billing accounts with agreement type Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/confirmTransition/action
Microsoft.Billing/billingAccounts/billingProfiles/action
Microsoft.Billing/billingAccounts/addPaymentTerms/action	Adds payment terms to all the billing profiles under the billing account. Currently, payment terms can be added only on billing accounts that have Agreement Type as 'Microsoft Customer Agreement' and AccountType as 'Enterprise'. This action needs pre-authorization and only Field Sellers are authorized to add the payment terms and is not a self-serve action.
Microsoft.Billing/billingAccounts/cancelPaymentTerms/action	Cancels all the payment terms on billing account that falls after the cancellation date in the request. Currently, cancel payment terms is only served by admin actions and is not a self-serve action.
Microsoft.Billing/billingAccounts/validatePaymentTerms/action	Validates payment terms on a billing account with agreement type 'Microsoft Customer Agreement' and account type 'Enterprise'.
Microsoft.Billing/billingAccounts/addDailyInvoicingOverrideTerms/write
Microsoft.Billing/billingAccounts/addDepartment/write
Microsoft.Billing/billingAccounts/addEnrollmentAccount/write
Microsoft.Billing/billingAccounts/addPaymentTerms/write
Microsoft.Billing/billingAccounts/agreements/read	Lists the agreements for a billing account.
Microsoft.Billing/billingAccounts/alertPreferences/write	Creates or updates an AlertPreference for the specifed Billing Account.
Microsoft.Billing/billingAccounts/alertPreferences/read	Gets the AlertPreference with the given Id.
Microsoft.Billing/billingAccounts/alerts/read	Gets the alert definition by an Id.
Microsoft.Billing/billingAccounts/associatedTenants/read	Lists the associated tenants that can collaborate with the billing account on commerce activities like viewing and downloading invoices, managing payments, making purchases, and managing or provisioning licenses.
Microsoft.Billing/billingAccounts/associatedTenants/write	Create or update an associated tenant for the billing account.
Microsoft.Billing/billingAccounts/availableBalance/read	The Available Credit or Payment on Account Balance for a billing account. The credit balance can be used to settle due or past due invoices and is supported for billing accounts with agreement type Microsoft Customer Agreement. The payment on account balance is supported for billing accounts with agreement type Microsoft Customer Agreement or Microsoft Online Services Program.
Microsoft.Billing/billingAccounts/billingPeriods/read	Lists the valid Billing Periods for a Billing Account. The operation is supported only for billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/billingPermissions/read	Lists the billing permissions the caller has on a billing account.
Microsoft.Billing/billingAccounts/billingProfiles/read	Lists the billing profiles that a user has access to. The operation is supported for billing accounts with agreement of type Microsoft Customer Agreement and Microsoft Partner Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/write	Creates or updates a billing profile. The operation is supported for billing accounts with agreement type Microsoft Customer Agreement, Microsoft Partner Agreement and Enterprise Agreement. If you are a MCA Individual (Pay-as-you-go) customer, then please use the Azure portal experience to create the billing profile.
Microsoft.Billing/billingAccounts/billingProfiles/purchaseProduct/action
Microsoft.Billing/billingAccounts/billingProfiles/priceProduct/action
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/action
Microsoft.Billing/billingAccounts/billingProfiles/alerts/read	Lists the alerts for a billing profile. The operation is supported for billing accounts with agreement type Microsoft Customer Agreement and Microsoft Partner Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/availableBalance/read	The Available Credit or Payment on Account Balance for a billing profile. The credit balance can be used to settle due or past due invoices and is supported for billing accounts with agreement type Microsoft Customer Agreement. The payment on account balance is supported for billing accounts with agreement type Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/billingPeriods/read	Lists the valid Billing Periods for a Billing Profile. The operation is supported only for billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/billingPermissions/read	Lists the billing permissions the caller has on a billing profile.
Microsoft.Billing/billingAccounts/billingProfiles/billingProviders/register/write	Registers a resource provider with Microsoft.Billing at billing profile scope.
Microsoft.Billing/billingAccounts/billingProfiles/billingProviders/unregister/write	Unregisters a resource provider with Microsoft.Billing at billing profile scope.
Microsoft.Billing/billingAccounts/billingProfiles/billingRequests/read	The list of billing requests submitted for the billing profile.
Microsoft.Billing/billingAccounts/billingProfiles/billingRoleAssignments/read	Gets a role assignment for the caller on a billing profile. The operation is supported for billing accounts with agreement type Microsoft Partner Agreement or Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/billingRoleAssignments/write	Deletes a role assignment on a billing profile. The operation is supported for billing accounts with agreement type Microsoft Partner Agreement or Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/billingRoleDefinitions/read	Gets the definition for a role on a billing profile. The operation is supported for billing accounts with agreement type Microsoft Partner Agreement or Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/billingSubscriptions/read	Gets a subscription by its billing profile and ID. The operation is supported for billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/checkAccess/write	Provides a list of check access response objects for a billing profile.
Microsoft.Billing/billingAccounts/billingProfiles/createBillingRoleAssignment/write	Adds a role assignment on a billing profile. The operation is supported for billing accounts with agreement type Microsoft Partner Agreement or Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/customers/read	Lists the customers that are billed to a billing profile. The operation is supported only for billing accounts with agreement type Microsoft Partner Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/customers/billingPermissions/read	Lists the billing permissions the caller has for a customer.
Microsoft.Billing/billingAccounts/billingProfiles/customers/billingRequests/read	The list of billing requests submitted for the customer.
Microsoft.Billing/billingAccounts/billingProfiles/customers/billingRoleAssignments/read	Gets a role assignment for the caller on a customer. The operation is supported for billing accounts with agreement type Microsoft Partner Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/customers/billingRoleAssignments/write	Deletes a role assignment on a customer. The operation is supported for billing accounts with agreement type Microsoft Partner Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/customers/billingRoleDefinitions/read	Gets the definition for a role on a customer. The operation is supported only for billing accounts with agreement type Microsoft Partner Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/customers/billingSubscriptions/read	Lists the subscriptions for a customer. The operation is supported only for billing accounts with agreement type Microsoft Partner Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/customers/checkAccess/write	Provides a list of check access response objects for a customer.
Microsoft.Billing/billingAccounts/billingProfiles/customers/createBillingRoleAssignment/write	Adds a role assignment on a customer. The operation is supported for billing accounts with agreement type Microsoft Partner Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/customers/policies/read	Lists the policies for a customer. This operation is supported only for billing accounts with agreement type Microsoft Partner Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/customers/policies/write	Updates the policies for a customer. This operation is supported only for billing accounts with agreement type Microsoft Partner Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/customers/resolveBillingRoleAssignments/write	Lists the role assignments for the caller on a customer while fetching user info for each role assignment. The operation is supported for billing accounts with agreement type Microsoft Partner Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/customers/transactions/read	Lists the billed or unbilled transactions by customer id for given start date and end date. Transactions include purchases, refunds and Azure usage charges. Unbilled transactions are listed under pending invoice Id and do not include tax. Tax is added to the amount once an invoice is generated.
Microsoft.Billing/billingAccounts/billingProfiles/departments/read	Lists the departments that a user has access to. The operation is supported only for billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/departments/billingPeriods/read	Lists the valid Billing Periods by billing profile ID and department name. The operation is supported only for Departments under billing profiles with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/departments/billingPermissions/read
Microsoft.Billing/billingAccounts/billingProfiles/departments/billingRoleDefinitions/read	Gets the definition for a role on a department. The operation is supported for billing profiles with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/departments/billingSubscriptions/read	List billing subscriptions by billing profile ID and department name. This operation is supported only for billing accounts of type Enterprise Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/departments/enrollmentAccounts/read	Get list of enrollment accounts using billing
Microsoft.Billing/billingAccounts/billingProfiles/departments/enrollmentAccounts/billingPeriods/read	Lists the valid Billing Periods for an Enrollment Account under Department under Billing Profile. The operation is supported only for enrollment profiles under billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/enrollmentAccounts/read	Lists the enrollment accounts for a specific billing account and a billing profile belonging to it.
Microsoft.Billing/billingAccounts/billingProfiles/enrollmentAccounts/billingPeriods/read	Lists the valid Billing Periods for an Enrollment Account under Billing Profile. The operation is supported only for billing profiles under billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/enrollmentAccounts/billingPermissions/read
Microsoft.Billing/billingAccounts/billingProfiles/enrollmentAccounts/billingSubscriptions/read	List billing subscriptions by billing profile ID and enrollment account name. This operation is supported only for billing accounts of type Enterprise Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/invoices/download/action
Microsoft.Billing/billingAccounts/billingProfiles/invoices/read	Lists the invoices for a billing profile for a given start date and end date. The operation is supported for billing accounts with agreement type Microsoft Partner Agreement or Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/invoices/paynow/write	Initiates a pay now operation for an invoice.
Microsoft.Billing/billingAccounts/billingProfiles/invoices/pricesheet/download/action
Microsoft.Billing/billingAccounts/billingProfiles/invoices/validateRefundEligibility/write
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/read	Lists the invoice sections that a user has access to. The operation is supported only for billing accounts with agreement type Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/write	Creates or updates an invoice section. The operation is supported only for billing accounts with agreement type Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/billingPermissions/read	Lists the billing permissions the caller has for an invoice section.
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/billingRequests/read	The list of billing requests submitted for the invoice section.
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/billingRoleAssignments/read	Gets a role assignment for the caller on an invoice section. The operation is supported for billing accounts with agreement type Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/billingRoleAssignments/write	Deletes a role assignment on an invoice section. The operation is supported for billing accounts with agreement type Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/billingRoleDefinitions/read	Gets the definition for a role on an invoice section. The operation is supported only for billing accounts with agreement type Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/billingSubscriptions/transfer/action
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/billingSubscriptions/move/action
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/billingSubscriptions/validateMoveEligibility/action
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/billingSubscriptions/write
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/billingSubscriptions/read	Lists the subscriptions that are billed to an invoice section. The operation is supported only for billing accounts with agreement type Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/checkAccess/write	Provides a list of check access response objects for an invoice section.
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/createBillingRoleAssignment/write	Adds a role assignment on an invoice section. The operation is supported for billing accounts with agreement type Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/products/transfer/action
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/products/move/action
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/products/validateMoveEligibility/action
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/products/read	Lists the products for an invoice section. These don't include products billed based on usage. The operation is supported only for billing accounts with agreement type Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/resolveBillingRoleAssignments/write	Lists the role assignments for the caller on an invoice section while fetching user info for each role assignment. The operation is supported for billing accounts with agreement type Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/transactions/read	Lists the billed or unbilled transactions by invoice section name for given start date and end date. Transactions include purchases, refunds and Azure usage charges. Unbilled transactions are listed under pending invoice Id and do not include tax. Tax is added to the amount once an invoice is generated.
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/validateDeleteEligibility/write	Validates if the invoice section can be deleted. The operation is supported for billing accounts with agreement type Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections/validateDeleteInvoiceSectionEligibility/write
Microsoft.Billing/billingAccounts/billingProfiles/notificationContacts/read	Lists the NotificationContacts for the given billing profile. The operation is supported only for billing profiles with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/policies/read	Lists the policies for a billing profile. This operation is supported only for billing accounts with agreement type Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/policies/write	Updates the policies for a billing profile. This operation is supported only for billing accounts with agreement type Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/pricesheet/download/action
Microsoft.Billing/billingAccounts/billingProfiles/products/read	Lists the products for a billing profile. These don't include products billed based on usage. The operation is supported for billing accounts with agreement type Microsoft Customer Agreement or Microsoft Partner Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/resolveBillingRoleAssignments/write	Lists the role assignments for the caller on an billing profile while fetching user info for each role assignment. The operation is supported for billing accounts with agreement type Microsoft Partner Agreement or Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/transactions/read	Lists the billed or unbilled transactions by billing profile name for given start and end date. Transactions include purchases, refunds and Azure usage charges. Unbilled transactions are listed under pending invoice Id and do not include tax. Tax is added to the amount once an invoice is generated.
Microsoft.Billing/billingAccounts/billingProfiles/validateDeleteBillingProfileEligibility/write
Microsoft.Billing/billingAccounts/billingProfiles/validateDeleteEligibility/write	Validates if the billing profile can be deleted. The operation is supported for billing accounts with agreement type Microsoft Customer Agreement and Microsoft Partner Agreement.
Microsoft.Billing/billingAccounts/billingProfiles/validateRefundEligibility/write	Validates whether the billing profile has any invoices eligible for an expedited refund. The operation is supported for billing accounts with the agreement type Microsoft Customer Agreement and the account type Individual.
Microsoft.Billing/billingAccounts/billingProfilesSummaries/read	Gets the summary of billing profiles under a billing account. The operation is supported for billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/billingProviders/register/write	Registers a resource provider with Microsoft.Billing at billing account scope.
Microsoft.Billing/billingAccounts/billingProviders/unregister/write	Unregisters a resource provider with Microsoft.Billing at billing account scope.
Microsoft.Billing/billingAccounts/billingRequests/read	The list of billing requests submitted for the billing account.
Microsoft.Billing/billingAccounts/billingRoleAssignments/write	Create or update a billing role assignment. The operation is supported only for billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/billingRoleAssignments/read	Gets a role assignment for the caller on a billing account. The operation is supported for billing accounts with agreement type Microsoft Partner Agreement, Microsoft Customer Agreement or Enterprise Agreement.
Microsoft.Billing/billingAccounts/billingRoleDefinitions/read	Gets the definition for a role on a billing account. The operation is supported for billing accounts with agreement type Microsoft Partner Agreement, Microsoft Customer Agreement or Enterprise Agreement.
Microsoft.Billing/billingAccounts/billingSubscriptionAliases/read	Gets a subscription by its alias ID. The operation is supported for seat based billing subscriptions.
Microsoft.Billing/billingAccounts/billingSubscriptionAliases/write	Creates or updates a billing subscription by its alias ID. The operation is supported for seat based billing subscriptions.
Microsoft.Billing/billingAccounts/billingSubscriptions/read	Lists the subscriptions for a billing account.
Microsoft.Billing/billingAccounts/billingSubscriptions/downloadDocuments/action	Download invoice using download link from list
Microsoft.Billing/billingAccounts/billingSubscriptions/move/action
Microsoft.Billing/billingAccounts/billingSubscriptions/validateMoveEligibility/action
Microsoft.Billing/billingAccounts/billingSubscriptions/write	Updates the properties of a billing subscription.
Microsoft.Billing/billingAccounts/billingSubscriptions/cancel/write	Cancels a usage-based subscription. This operation is supported only for billing accounts of type Microsoft Partner Agreement.
Microsoft.Billing/billingAccounts/billingSubscriptions/downloadDocuments/write	Gets a URL to download multiple invoice documents (invoice pdf, tax receipts, credit notes) as a zip file.
Microsoft.Billing/billingAccounts/billingSubscriptions/enable/write	Enable an azure billing subscription.
Microsoft.Billing/billingAccounts/billingSubscriptions/invoices/read	Lists the invoices for a subscription.
Microsoft.Billing/billingAccounts/billingSubscriptions/invoices/download/write	Gets a URL to download an invoice by billing subscription.
Microsoft.Billing/billingAccounts/billingSubscriptions/merge/write	Merges the billing subscription provided in the request with a target billing subscription.
Microsoft.Billing/billingAccounts/billingSubscriptions/move/write	Moves charges for a subscription to a new invoice section. The new invoice section must belong to the same billing profile as the existing invoice section. This operation is supported for billing accounts with agreement type Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/billingSubscriptions/split/write	Splits a subscription into a new subscription with quantity less than current subscription quantity and not equal to 0.
Microsoft.Billing/billingAccounts/billingSubscriptions/validateMoveEligibility/write	Validates if charges for a subscription can be moved to a new invoice section. This operation is supported for billing accounts with agreement type Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/cancelDailyInvoicingOverrideTerms/write
Microsoft.Billing/billingAccounts/cancelPaymentTerms/write
Microsoft.Billing/billingAccounts/checkAccess/write	Provides a list of check access response objects for a billing account.
Microsoft.Billing/billingAccounts/confirmTransition/write	Gets the transition details for a billing account that has transitioned from agreement type Microsoft Online Services Program to agreement type Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/createBillingRoleAssignment/write	Adds a role assignment on a billing account. The operation is supported for billing accounts with agreement type Microsoft Partner Agreement or Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/customers/read	Lists the customers that are billed to a billing account. The operation is supported only for billing accounts with agreement type Microsoft Partner Agreement.
Microsoft.Billing/billingAccounts/customers/initiateTransfer/action
Microsoft.Billing/billingAccounts/customers/billingPermissions/read	Lists the billing permissions the caller has for a customer at billing account level.
Microsoft.Billing/billingAccounts/customers/billingSubscriptions/read	Lists the subscriptions for a customer at billing account level. The operation is supported only for billing accounts with agreement type Microsoft Partner Agreement.
Microsoft.Billing/billingAccounts/customers/checkAccess/write
Microsoft.Billing/billingAccounts/customers/policies/read	Lists the policies for a customer at billing account scope. This operation is supported only for billing accounts with agreement type Microsoft Partner Agreement.
Microsoft.Billing/billingAccounts/customers/policies/write	Updates the policies for a customer at billing account scope. This operation is supported only for billing accounts with agreement type Microsoft Partner Agreement.
Microsoft.Billing/billingAccounts/customers/products/read	Lists the products for a customer. These don't include products billed based on usage.The operation is supported only for billing accounts with agreement type Microsoft Partner Agreement.
Microsoft.Billing/billingAccounts/customers/resolveBillingRoleAssignments/write
Microsoft.Billing/billingAccounts/customers/transfers/write
Microsoft.Billing/billingAccounts/customers/transfers/read
Microsoft.Billing/billingAccounts/departments/read	Lists the departments that a user has access to. The operation is supported only for billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/departments/write
Microsoft.Billing/billingAccounts/departments/addEnrollmentAccount/write
Microsoft.Billing/billingAccounts/departments/billingPeriods/read	Lists the valid Billing Periods for a Department. The operation is supported only for Departments under billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/departments/billingPermissions/read	Lists the billing permissions the caller has for a department.
Microsoft.Billing/billingAccounts/departments/billingRoleAssignments/write	Create or update a billing role assignment. The operation is supported only for billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/departments/billingRoleAssignments/read	Gets a role assignment for the caller on a department. The operation is supported only for billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/departments/billingRoleDefinitions/read	Gets the definition for a role on a department. The operation is supported for billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/departments/billingSubscriptions/read	Lists the subscriptions for a department. The operation is supported for billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/departments/checkAccess/write	Provides a list of check access response objects for a department.
Microsoft.Billing/billingAccounts/departments/enrollmentAccounts/read	Lists the enrollment accounts for a department. The operation is supported only for billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/departments/enrollmentAccounts/write
Microsoft.Billing/billingAccounts/departments/enrollmentAccounts/billingPeriods/read	Lists the valid Billing Periods for an Enrollment Account under Department. The operation is supported only for enrollment accounts under billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/departments/enrollmentAccounts/remove/write
Microsoft.Billing/billingAccounts/downloadDocuments/write	Gets a URL to download multiple invoice documents (invoice pdf, tax receipts, credit notes) as a zip file. The operation is supported for billing accounts with agreement type Microsoft Partner Agreement or Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/enrollmentAccounts/read	Lists the enrollment accounts for a billing account. The operation is supported only for billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/enrollmentAccounts/write
Microsoft.Billing/billingAccounts/enrollmentAccounts/activate/write
Microsoft.Billing/billingAccounts/enrollmentAccounts/activationStatus/read
Microsoft.Billing/billingAccounts/enrollmentAccounts/billingPeriods/read	Lists the valid Billing Periods for an Enrollment Account. The operation is supported only for enrollment accounts under billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/enrollmentAccounts/billingPermissions/read	Lists the billing permissions the caller has for an enrollment account.
Microsoft.Billing/billingAccounts/enrollmentAccounts/billingRoleAssignments/write	Create or update a billing role assignment. The operation is supported only for billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/enrollmentAccounts/billingRoleAssignments/read	Gets a role assignment for the caller on a enrollment Account. The operation is supported only for billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/enrollmentAccounts/billingRoleDefinitions/read	Gets the definition for a role on an enrollment account. The operation is supported for billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/enrollmentAccounts/billingSubscriptions/write
Microsoft.Billing/billingAccounts/enrollmentAccounts/billingSubscriptions/read	Lists the subscriptions for an enrollment account. The operation is supported for billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/enrollmentAccounts/checkAccess/write	Provides a list of check access response objects for an enrollment account.
Microsoft.Billing/billingAccounts/enrollmentAccounts/transferBillingSubscriptions/write
Microsoft.Billing/billingAccounts/invoices/download/action
Microsoft.Billing/billingAccounts/invoices/read	Lists the invoices for a billing account for a given start date and end date. The operation is supported for billing accounts with agreement type Microsoft Partner Agreement, Microsoft Customer Agreement, or Microsoft Online Services Program.
Microsoft.Billing/billingAccounts/invoices/amend/write	Regenerate an invoice by billing account name and invoice name. The operation is supported for billing accounts with agreement type Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/invoices/download/write	Gets a URL to download an invoice document. The operation is supported for billing accounts with agreement type Microsoft Partner Agreement, Microsoft Customer Agreement or Enterprise Agreement.
Microsoft.Billing/billingAccounts/invoices/downloadSummary/write	Gets a URL to download the summary document for an invoice. The operation is supported for billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/invoices/pricesheet/download/action
Microsoft.Billing/billingAccounts/invoices/transactions/read	Lists the transactions for an invoice. Transactions include purchases, refunds and Azure usage charges.
Microsoft.Billing/billingAccounts/invoices/transactionsDownload/write	Gets a URL to download the transactions document for an invoice. The operation is supported for billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/invoices/transactionSummary/read	Gets the transaction summary for an invoice. Transactions include purchases, refunds and Azure usage charges.
Microsoft.Billing/billingAccounts/invoiceSections/write
Microsoft.Billing/billingAccounts/invoiceSections/elevate/action
Microsoft.Billing/billingAccounts/invoiceSections/read
Microsoft.Billing/billingAccounts/listBillingProfilesWithViewPricesheetPermissions/read
Microsoft.Billing/billingAccounts/listProductRecommendations/write	Lists ProductIds or offerIds recommended for purchase on an account. Please specify the type of the cohort for the billing account in the 'x-ms-recommendations-cohort-type' header as a required string parameter.
Microsoft.Billing/billingAccounts/notificationContacts/read	Lists the NotificationContacts for the given billing account. The operation is supported only for billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/notificationContacts/write	Update a notification contact by ID. The operation is supported only for billing accounts with agreement type Enterprise Agreement.
Microsoft.Billing/billingAccounts/operationResults/read
Microsoft.Billing/billingAccounts/policies/read	Get the policies for a billing account of Enterprise Agreement type.
Microsoft.Billing/billingAccounts/policies/write	Update the policies for a billing account of Enterprise Agreement type.
Microsoft.Billing/billingAccounts/products/read	Lists the products for a billing account. These don't include products billed based on usage. The operation is supported for billing accounts with agreement type Microsoft Customer Agreement or Microsoft Partner Agreement.
Microsoft.Billing/billingAccounts/products/move/action	Moves a product's charges to a new invoice section. The new invoice section must belong to the same billing profile as the existing invoice section. This operation is supported only for products that are purchased with a recurring charge and for billing accounts with agreement type Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/products/validateMoveEligibility/action	Validates if a product's charges can be moved to a new invoice section. This operation is supported only for products that are purchased with a recurring charge and for billing accounts with agreement type Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/products/write	Updates the properties of a Product. Currently, auto renew can be updated. The operation is supported only for billing accounts with agreement type Microsoft Customer Agreement.
Microsoft.Billing/billingAccounts/purchaseProduct/write
Microsoft.Billing/billingAccounts/resolveBillingRoleAssignments/write	Lists the role assignments for the caller on a billing account while fetching user info for each role assignment. The operation is supported for billing accounts with agreement type Microsoft Partner Agreement, Microsoft Customer Agreement or Enterprise Agreement.
Microsoft.Billing/billingAccounts/validateDailyInvoicingOverrideTerms/write
Microsoft.Billing/billingAccounts/validatePaymentTerms/write
Microsoft.Billing/billingPeriods/read
Microsoft.Billing/billingProperty/read	Gets the billing properties for a subscription
Microsoft.Billing/billingProperty/write	Updates the billing property of a subscription. Currently, cost center can be updated for billing accounts with agreement type Microsoft Customer Agreement and subscription service usage address can be updated for billing accounts with agreement type Microsoft Online Service Program.
Microsoft.Billing/billingRequests/read	The list of billing requests submitted by a user.
Microsoft.Billing/billingRequests/write	Create or update a billing request.
Microsoft.Billing/departments/read
Microsoft.Billing/enrollmentAccounts/read
Microsoft.Billing/invoices/read
Microsoft.Billing/invoices/download/action	Download invoice using download link from list
Microsoft.Billing/operations/read	List of operations supported by provider.
Microsoft.Billing/paymentMethods/read	Lists the payment methods owned by the caller.
Microsoft.Billing/paymentMethods/write	Deletes a payment method owned by the caller.
Microsoft.Billing/policies/read	Lists the policies that are managed by the Billing Admin for the defined subscriptions. This is supported for Microsoft Online Services Program, Microsoft Customer Agreement and Microsoft Partner Agreement.
Microsoft.Billing/promotions/read	List or get promotions
Microsoft.Billing/validateAddress/write

Microsoft.BillingBenefits

Azure service: Azure savings plans

Action	Description
Microsoft.BillingBenefits/savingsPlanOrders/action	Update a Savings plan order
Microsoft.BillingBenefits/register/action	Registers the BillingBenefits resource provider and enables the creation of BillingBenefits resources.
Microsoft.BillingBenefits/credits/read	Read all Credits
Microsoft.BillingBenefits/credits/write	Create or update a Credit
Microsoft.BillingBenefits/credits/delete	Delete a Credit
Microsoft.BillingBenefits/credits/cancel/action	Cancel a Credit
Microsoft.BillingBenefits/credits/sources/read	Read all Sources
Microsoft.BillingBenefits/credits/sources/write	Create or update a Source
Microsoft.BillingBenefits/credits/sources/delete	Delete a Source
Microsoft.BillingBenefits/maccs/read	Read all MACCs
Microsoft.BillingBenefits/maccs/write	Create a MACC
Microsoft.BillingBenefits/maccs/delete	Delete a MACC
Microsoft.BillingBenefits/maccs/cancel/action	Cancel a MACC
Microsoft.BillingBenefits/maccs/chargeShortfall/action	Charge shortfall on MACC
Microsoft.BillingBenefits/maccs/contributors/read	Get all Contributors
Microsoft.BillingBenefits/savingsPlanOrderAliases/read	Read all savings plan order aliases
Microsoft.BillingBenefits/savingsPlanOrderAliases/write	Create a Savings plan order alias
Microsoft.BillingBenefits/savingsPlanOrders/read	Read all savings plan orders
Microsoft.BillingBenefits/savingsPlanOrders/write	Create a savings plan orders
Microsoft.BillingBenefits/savingsPlanOrders/savingsPlans/read	Read All SavingsPlans
Microsoft.BillingBenefits/savingsPlanOrders/savingsPlans/write	Patch an existing Savings plan

Microsoft.Blueprint

Enabling quick, repeatable creation of governed environments.

Azure service: Azure Blueprints

Action	Description
Microsoft.Blueprint/register/action	Registers the Azure Blueprints Resource Provider
Microsoft.Blueprint/blueprintAssignments/read	Read any blueprint artifacts
Microsoft.Blueprint/blueprintAssignments/write	Create or update any blueprint artifacts
Microsoft.Blueprint/blueprintAssignments/delete	Delete any blueprint artifacts
Microsoft.Blueprint/blueprintAssignments/whoisblueprint/action	Get Azure Blueprints service principal object Id.
Microsoft.Blueprint/blueprintAssignments/assignmentOperations/read	Read any blueprint artifacts
Microsoft.Blueprint/blueprints/read	Read any blueprints
Microsoft.Blueprint/blueprints/write	Create or update any blueprints
Microsoft.Blueprint/blueprints/delete	Delete any blueprints
Microsoft.Blueprint/blueprints/artifacts/read	Read any blueprint artifacts
Microsoft.Blueprint/blueprints/artifacts/write	Create or update any blueprint artifacts
Microsoft.Blueprint/blueprints/artifacts/delete	Delete any blueprint artifacts
Microsoft.Blueprint/blueprints/versions/read	Read any blueprints
Microsoft.Blueprint/blueprints/versions/write	Create or update any blueprints
Microsoft.Blueprint/blueprints/versions/delete	Delete any blueprints
Microsoft.Blueprint/blueprints/versions/artifacts/read	Read any blueprint artifacts

Microsoft.Consumption

Programmatic access to cost and usage data for your Azure resources.

Azure service: Cost Management

Action	Description
Microsoft.Consumption/register/action	Register to Consumption RP
Microsoft.Consumption/aggregatedcost/read	List AggregatedCost for management group.
Microsoft.Consumption/balances/read	List the utilization summary for a billing period for a management group.
Microsoft.Consumption/budgets/read	List the budgets by a subscription or a management group.
Microsoft.Consumption/budgets/write	Creates and update the budgets by a subscription or a management group.
Microsoft.Consumption/budgets/delete	Delete the budgets by a subscription or a management group.
Microsoft.Consumption/charges/read	List charges
Microsoft.Consumption/credits/read	List credits
Microsoft.Consumption/events/read	List events
Microsoft.Consumption/externalBillingAccounts/tags/read	List tags for EA and subscriptions.
Microsoft.Consumption/externalSubscriptions/tags/read	List tags for EA and subscriptions.
Microsoft.Consumption/forecasts/read	List forecasts
Microsoft.Consumption/lots/read	List lots
Microsoft.Consumption/marketplaces/read	List the marketplace resource usage details for a scope for EA and WebDirect subscriptions.
Microsoft.Consumption/operationresults/read	List operationresults
Microsoft.Consumption/operations/read	List all supported operations by Microsoft.Consumption resource provider.
Microsoft.Consumption/operationstatus/read	List operationstatus
Microsoft.Consumption/pricesheets/read	List the Pricesheets data for a subscription or a management group.
Microsoft.Consumption/reservationDetails/read	List the utilization details for reserved instances by reservation order or management groups. The details data is per instance per day level.
Microsoft.Consumption/reservationRecommendationDetails/read	List Reservation Recommendation Details
Microsoft.Consumption/reservationRecommendations/read	List single or shared recommendations for Reserved instances for a subscription.
Microsoft.Consumption/reservationSummaries/read	List the utilization summary for reserved instances by reservation order or management groups. The summary data is either at monthly or daily level.
Microsoft.Consumption/reservationTransactions/read	List the transaction history for reserved instances by management groups.
Microsoft.Consumption/tags/read	List tags for EA and subscriptions.
Microsoft.Consumption/tenants/register/action	Register action for scope of Microsoft.Consumption by a tenant.
Microsoft.Consumption/tenants/read	List tenants
Microsoft.Consumption/terms/read	List the terms for a subscription or a management group.
Microsoft.Consumption/usageDetails/read	List the usage details for a scope for EA and WebDirect subscriptions.

Microsoft.Features

Azure service: Azure Resource Manager

Action	Description
Microsoft.Features/register/action	Registers the feature of a subscription.
Microsoft.Features/featureProviders/subscriptionFeatureRegistrations/read	Gets the feature registration of a subscription in a given resource provider.
Microsoft.Features/featureProviders/subscriptionFeatureRegistrations/write	Adds the feature registration of a subscription in a given resource provider.
Microsoft.Features/featureProviders/subscriptionFeatureRegistrations/delete	Deletes the feature registration of a subscription in a given resource provider.
Microsoft.Features/features/read	Gets the features of a subscription.
Microsoft.Features/operations/read	Gets the list of operations.
Microsoft.Features/providers/features/read	Gets the feature of a subscription in a given resource provider.
Microsoft.Features/providers/features/register/action	Registers the feature for a subscription in a given resource provider.
Microsoft.Features/providers/features/unregister/action	Unregisters the feature for a subscription in a given resource provider.
Microsoft.Features/subscriptionFeatureRegistrations/read	Gets the feature registration of a subscription.

Microsoft.GuestConfiguration

Audit settings inside a machine using Azure Policy.

Azure service: Azure Policy

Action	Description
Microsoft.GuestConfiguration/register/action	Registers the subscription for the Microsoft.GuestConfiguration resource provider.
Microsoft.GuestConfiguration/guestConfigurationAssignments/write	Create new guest configuration assignment.
Microsoft.GuestConfiguration/guestConfigurationAssignments/read	Get guest configuration assignment.
Microsoft.GuestConfiguration/guestConfigurationAssignments/delete	Delete guest configuration assignment.
Microsoft.GuestConfiguration/guestConfigurationAssignments/healthcheck/action	Get guest configuration assignment.
Microsoft.GuestConfiguration/guestConfigurationAssignments/reports/read	Get guest configuration assignment report.
Microsoft.GuestConfiguration/operations/read	Gets the operations for the Microsoft.GuestConfiguration resource provider

Microsoft.Intune

Enable your workforce to be productive on all their devices, while keeping your organization's information protected.

Azure service: Microsoft Monitoring Insights

Action	Description
Microsoft.Intune/diagnosticsettings/write	Writing a diagnostic setting
Microsoft.Intune/diagnosticsettings/read	Reading a diagnostic setting
Microsoft.Intune/diagnosticsettings/delete	Deleting a diagnostic setting
Microsoft.Intune/diagnosticsettingscategories/read	Reading a diagnostic setting categories

Microsoft.Maintenance

Azure service: Azure Maintenance, Azure Update Manager

Action	Description
Microsoft.Maintenance/applyUpdates/write	Write apply updates to a resource.
Microsoft.Maintenance/applyUpdates/read	Read apply updates to a resource.
Microsoft.Maintenance/configurationAssignments/write	Create or update maintenance configuration assignment.
Microsoft.Maintenance/configurationAssignments/read	Read maintenance configuration assignment.
Microsoft.Maintenance/configurationAssignments/delete	Delete maintenance configuration assignment.
Microsoft.Maintenance/configurationAssignments/maintenanceScope/InGuestPatch/write	Create or update a maintenance configuration assignment for InGuestPatch maintenance scope.
Microsoft.Maintenance/configurationAssignments/maintenanceScope/InGuestPatch/read	Read maintenance configuration assignment for InGuestPatch maintenance scope.
Microsoft.Maintenance/configurationAssignments/maintenanceScope/InGuestPatch/delete	Delete maintenance configuration assignment for InGuestPatch maintenance scope.
Microsoft.Maintenance/maintenanceConfigurations/write	Create or update maintenance configuration.
Microsoft.Maintenance/maintenanceConfigurations/read	Read maintenance configuration.
Microsoft.Maintenance/maintenanceConfigurations/delete	Delete maintenance configuration.
Microsoft.Maintenance/maintenanceConfigurations/eventGridFilters/delete	Notifies Microsoft.Maintenance that an EventGrid Subscription for Maintenance Configuration is being deleted.
Microsoft.Maintenance/maintenanceConfigurations/eventGridFilters/read	Notifies Microsoft.Maintenance that an EventGrid Subscription for Maintenance Configuration is being viewed.
Microsoft.Maintenance/maintenanceConfigurations/eventGridFilters/write	Notifies Microsoft.Maintenance that a new EventGrid Subscription for Maintenance Configuration is being created.
Microsoft.Maintenance/maintenanceConfigurations/maintenanceScope/InGuestPatch/write	Create or update a maintenance configuration for InGuestPatch maintenance scope.
Microsoft.Maintenance/maintenanceConfigurations/maintenanceScope/InGuestPatch/read	Read maintenance configuration for InGuestPatch maintenance scope.
Microsoft.Maintenance/maintenanceConfigurations/maintenanceScope/InGuestPatch/delete	Delete maintenance configuration for InGuestPatch maintenance scope.
Microsoft.Maintenance/scheduledevents/acknowledge/action	Acknowledge scheduled event of the resource
Microsoft.Maintenance/updates/read	Read updates to a resource.

Microsoft.ManagedServices

Azure service: Azure Lighthouse

Action	Description
Microsoft.ManagedServices/register/action	Register to Managed Services.
Microsoft.ManagedServices/unregister/action	Unregister from Managed Services.
Microsoft.ManagedServices/marketplaceRegistrationDefinitions/read	Retrieves a list of Managed Services registration definitions.
Microsoft.ManagedServices/operations/read	Retrieves a list of Managed Services operations.
Microsoft.ManagedServices/operationStatuses/read	Reads the operation status for the resource.
Microsoft.ManagedServices/registrationAssignments/read	Retrieves a list of Managed Services registration assignments.
Microsoft.ManagedServices/registrationAssignments/write	Add or modify Managed Services registration assignment.
Microsoft.ManagedServices/registrationAssignments/delete	Removes Managed Services registration assignment.
Microsoft.ManagedServices/registrationDefinitions/read	Retrieves a list of Managed Services registration definitions.
Microsoft.ManagedServices/registrationDefinitions/write	Add or modify Managed Services registration definition.
Microsoft.ManagedServices/registrationDefinitions/delete	Removes Managed Services registration definition.

Microsoft.Management

Use management groups to efficiently apply governance controls and manage groups of Azure subscriptions.

Azure service: Management Groups

Action	Description
Microsoft.Management/checkNameAvailability/action	Checks if the specified management group name is valid and unique.
Microsoft.Management/getEntities/action	List all entities (Management Groups, Subscriptions, etc.) for the authenticated user.
Microsoft.Management/register/action	Register the specified subscription with Microsoft.Management
Microsoft.Management/managementGroups/read	List management groups for the authenticated user.
Microsoft.Management/managementGroups/write	Create or update a management group.
Microsoft.Management/managementGroups/delete	Delete management group.
Microsoft.Management/managementGroups/descendants/read	Gets all the descendants (Management Groups, Subscriptions) of a Management Group.
Microsoft.Management/managementGroups/settings/read	Lists existing management group hierarchy settings.
Microsoft.Management/managementGroups/settings/write	Creates or updates management group hierarchy settings.
Microsoft.Management/managementGroups/settings/delete	Deletes management group hierarchy settings.
Microsoft.Management/managementGroups/subscriptions/read	Lists subscription under the given management group.
Microsoft.Management/managementGroups/subscriptions/write	Associates existing subscription with the management group.
Microsoft.Management/managementGroups/subscriptions/delete	De-associates subscription from the management group.
Microsoft.Management/serviceGroups/write	Create or Update a Service Group
Microsoft.Management/serviceGroups/read	Read a Service Group
Microsoft.Management/serviceGroups/delete	Delete a Service Group

Microsoft.PolicyInsights

Summarize policy states for the subscription level policy definition.

Azure service: Azure Policy

Action	Description
Microsoft.PolicyInsights/register/action	Registers the Microsoft Policy Insights resource provider and enables actions on it.
Microsoft.PolicyInsights/unregister/action	Unregisters the Microsoft Policy Insights resource provider.
Microsoft.PolicyInsights/asyncOperationResults/read	Gets the async operation result.
Microsoft.PolicyInsights/attestations/read	Get compliance state attestations.
Microsoft.PolicyInsights/attestations/write	Create or update compliance state attestations.
Microsoft.PolicyInsights/attestations/delete	Delete compliance state attestations.
Microsoft.PolicyInsights/checkPolicyRestrictions/read	Get details about the restrictions that policy will enforce on a resource.
Microsoft.PolicyInsights/componentPolicyStates/queryResults/read	Query information about component policy states.
Microsoft.PolicyInsights/eventGridFilters/read	Get Event Grid filters used to track which scopes to publish state change notifications for.
Microsoft.PolicyInsights/eventGridFilters/write	Create or update Event Grid filters.
Microsoft.PolicyInsights/eventGridFilters/delete	Delete Event Grid filters.
Microsoft.PolicyInsights/operations/read	Gets supported operations on Microsoft.PolicyInsights namespace
Microsoft.PolicyInsights/policyEvents/queryResults/action	Query information about policy events.
Microsoft.PolicyInsights/policyEvents/queryResults/read	Query information about policy events.
Microsoft.PolicyInsights/policyMetadata/read	Get Policy Metadata resources.
Microsoft.PolicyInsights/policyStates/queryResults/action	Query information about policy states.
Microsoft.PolicyInsights/policyStates/summarize/action	Query summary information about policy latest states.
Microsoft.PolicyInsights/policyStates/triggerEvaluation/action	Triggers a new compliance evaluation for the selected scope.
Microsoft.PolicyInsights/policyStates/queryResults/read	Query information about policy states.
Microsoft.PolicyInsights/policyStates/summarize/read	Query summary information about policy latest states.
Microsoft.PolicyInsights/policyTrackedResources/queryResults/read	Query information about resources required by DeployIfNotExists policies.
Microsoft.PolicyInsights/remediations/read	Get policy remediations.
Microsoft.PolicyInsights/remediations/write	Create or update Microsoft Policy remediations.
Microsoft.PolicyInsights/remediations/delete	Delete policy remediations.
Microsoft.PolicyInsights/remediations/cancel/action	Cancel in-progress Microsoft Policy remediations.
Microsoft.PolicyInsights/remediations/listDeployments/read	Lists the deployments required by a policy remediation.
DataAction	Description
Microsoft.PolicyInsights/checkDataPolicyCompliance/action	Check the compliance status of a given component against data policies.
Microsoft.PolicyInsights/policyEvents/logDataEvents/action	Log the resource component policy events.

Microsoft.Portal

Build, manage, and monitor all Azure products in a single, unified console.

Azure service: Azure portal

Action	Description
Microsoft.Portal/register/action	Register to Portal
Microsoft.Portal/dashboards/read	Reads the dashboards for the subscription.
Microsoft.Portal/dashboards/write	Add or modify dashboard to a subscription.
Microsoft.Portal/dashboards/delete	Removes the dashboard from the subscription.
Microsoft.Portal/tenantConfigurations/read	Reads Tenant configuration
Microsoft.Portal/tenantConfigurations/write	Adds or updates Tenant configuration. User has to be a Tenant Admin for this operation.
Microsoft.Portal/tenantConfigurations/delete	Removes Tenant configuration. User has to be a Tenant Admin for this operation.

Microsoft.RecoveryServices

Hold and organize backup data for various Azure services such as IaaS VMs (Linux or Windows) and Azure SQL databases.

Azure service: Site Recovery

Action	Description
Microsoft.RecoveryServices/register/action	Registers subscription for given Resource Provider
Microsoft.RecoveryServices/unregister/action	Unregisters subscription for given Resource Provider
Microsoft.RecoveryServices/Locations/backupCrossRegionRestore/action	Trigger Cross region restore.
Microsoft.RecoveryServices/Locations/backupCrrJob/action	Get Cross Region Restore Job Details in the secondary region for Recovery Services Vault.
Microsoft.RecoveryServices/Locations/backupCrrJobCancel/action	Get Cross Region Restore Job Details in the secondary region for Recovery Services Vault.
Microsoft.RecoveryServices/Locations/backupCrrJobs/action	List Cross Region Restore Jobs in the secondary region for Recovery Services Vault.
Microsoft.RecoveryServices/Locations/backupPreValidateProtection/action
Microsoft.RecoveryServices/Locations/backupStatus/action	Check Backup Status for Recovery Services Vaults
Microsoft.RecoveryServices/Locations/backupValidateFeatures/action	Validate Features
Microsoft.RecoveryServices/locations/allocateStamp/action	AllocateStamp is internal operation used by service
Microsoft.RecoveryServices/locations/checkNameAvailability/action	Check Resource Name Availability is an API to check if resource name is available
Microsoft.RecoveryServices/locations/capabilities/action	List capabilities at a given location.
Microsoft.RecoveryServices/locations/allocatedStamp/read	GetAllocatedStamp is internal operation used by service
Microsoft.RecoveryServices/Locations/backupAadProperties/read	Get AAD Properties for authentication in the third region for Cross Region Restore.
Microsoft.RecoveryServices/Locations/backupCrrOperationResults/read	Returns CRR Operation Result for Recovery Services Vault.
Microsoft.RecoveryServices/Locations/backupCrrOperationsStatus/read	Returns CRR Operation Status for Recovery Services Vault.
Microsoft.RecoveryServices/Locations/backupProtectedItem/write	Create a backup Protected Item
Microsoft.RecoveryServices/Locations/backupProtectedItems/read	Returns the list of all Protected Items.
Microsoft.RecoveryServices/locations/operationStatus/read	Gets Operation Status for a given Operation
Microsoft.RecoveryServices/operations/read	Operation returns the list of Operations for a Resource Provider
Microsoft.RecoveryServices/Vaults/backupJobsExport/action	Export Jobs
Microsoft.RecoveryServices/Vaults/backupSecurityPIN/action	Returns Security PIN Information for Recovery Services Vault.
Microsoft.RecoveryServices/Vaults/backupTriggerValidateOperation/action	Validate Operation on Protected Item
Microsoft.RecoveryServices/Vaults/backupValidateOperation/action	Validate Operation on Protected Item
Microsoft.RecoveryServices/Vaults/write	Create Vault operation creates an Azure resource of type 'vault'
Microsoft.RecoveryServices/Vaults/read	The Get Vault operation gets an object representing the Azure resource of type 'vault'
Microsoft.RecoveryServices/Vaults/delete	The Delete Vault operation deletes the specified Azure resource of type 'vault'
Microsoft.RecoveryServices/Vaults/PrivateEndpointConnectionsApproval/action	Approve the Private Endpoint Connection.
Microsoft.RecoveryServices/Vaults/backupconfig/read	Returns Configuration for Recovery Services Vault.
Microsoft.RecoveryServices/Vaults/backupconfig/write	Updates Configuration for Recovery Services Vault.
Microsoft.RecoveryServices/Vaults/backupDeletedProtectionContainers/read	Returns all containers belonging to the subscription
Microsoft.RecoveryServices/Vaults/backupEncryptionConfigs/read	Gets Backup Resource Encryption Configuration.
Microsoft.RecoveryServices/Vaults/backupEncryptionConfigs/write	Updates Backup Resource Encryption Configuration
Microsoft.RecoveryServices/Vaults/backupEngines/read	Returns all the backup management servers registered with vault.
Microsoft.RecoveryServices/Vaults/backupFabrics/refreshContainers/action	Refreshes the container list
Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/delete	Delete a backup Protection Intent
Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/read	Get a backup Protection Intent
Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/write	Create a backup Protection Intent
Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/read	Returns status of the operation
Microsoft.RecoveryServices/Vaults/backupFabrics/operationsStatus/read	Returns status of the operation
Microsoft.RecoveryServices/Vaults/backupFabrics/protectableContainers/read	Get all protectable containers
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/delete	Deletes the registered Container
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/inquire/action	Do inquiry for workloads within a container
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/read	Returns all registered containers
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/write	Creates a registered container
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/items/read	Get all items in a container
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/operationResults/read	Gets result of Operation performed on Protection Container.
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/operationsStatus/read	Gets status of Operation performed on Protection Container.
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/backup/action	Performs Backup for Protected Item.
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/delete	Deletes Protected Item
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read	Returns object details of the Protected Item
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPointsRecommendedForMove/action	Get Recovery points recommended for move to another tier
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/write	Create a backup Protected Item
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationResults/read	Gets Result of Operation Performed on Protected Items.
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationsStatus/read	Returns the status of Operation performed on Protected Items.
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/accessToken/action	Get AccessToken for Cross Region Restore.
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/move/action	Move Recovery point to another tier
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/provisionInstantItemRecovery/action	Provision Instant Item Recovery for Protected Item
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/read	Get Recovery Points for Protected Items.
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/restore/action	Restore Recovery Points for Protected Items.
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/revokeInstantItemRecovery/action	Revoke Instant Item Recovery for Protected Item
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/write	Update Recovery Point for Protected Item.
Microsoft.RecoveryServices/Vaults/backupJobs/cancel/action	Cancel the Job
Microsoft.RecoveryServices/Vaults/backupJobs/read	Returns all Job Objects
Microsoft.RecoveryServices/Vaults/backupJobs/retry/action	Retry the Job
Microsoft.RecoveryServices/Vaults/backupJobs/backupChildJobs/read	Returns all Job Objects
Microsoft.RecoveryServices/Vaults/backupJobs/operationResults/read	Returns the Result of Job Operation.
Microsoft.RecoveryServices/Vaults/backupJobs/operationsStatus/read	Returns the status of Job Operation.
Microsoft.RecoveryServices/Vaults/backupOperationResults/read	Returns Backup Operation Result for Recovery Services Vault.
Microsoft.RecoveryServices/Vaults/backupOperations/read	Returns Backup Operation Status for Recovery Services Vault.
Microsoft.RecoveryServices/Vaults/backupPolicies/delete	Delete a Protection Policy
Microsoft.RecoveryServices/Vaults/backupPolicies/read	Returns all Protection Policies
Microsoft.RecoveryServices/Vaults/backupPolicies/write	Creates Protection Policy
Microsoft.RecoveryServices/Vaults/backupPolicies/operationResults/read	Get Results of Policy Operation.
Microsoft.RecoveryServices/Vaults/backupPolicies/operations/read	Get Status of Policy Operation.
Microsoft.RecoveryServices/Vaults/backupProtectableItems/read	Returns list of all Protectable Items.
Microsoft.RecoveryServices/Vaults/backupProtectedItems/read	Returns the list of all Protected Items.
Microsoft.RecoveryServices/Vaults/backupProtectionContainers/read	Returns all containers belonging to the subscription
Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read	List all backup Protection Intents
Microsoft.RecoveryServices/Vaults/backupResourceGuardProxies/delete	The Delete ResourceGuard proxy operation deletes the specified Azure resource of type 'ResourceGuard proxy'
Microsoft.RecoveryServices/Vaults/backupResourceGuardProxies/read	Get ResourceGuard proxy operation gets an object representing the Azure resource of type 'ResourceGuard proxy'
Microsoft.RecoveryServices/Vaults/backupResourceGuardProxies/read	Get the list of ResourceGuard proxies for a resource
Microsoft.RecoveryServices/Vaults/backupResourceGuardProxies/unlockDelete/action	Unlock delete ResourceGuard proxy operation unlocks the next delete critical operation
Microsoft.RecoveryServices/Vaults/backupResourceGuardProxies/write	Create ResourceGuard proxy operation creates an Azure resource of type 'ResourceGuard Proxy'
Microsoft.RecoveryServices/Vaults/backupstorageconfig/read	Returns Storage Configuration for Recovery Services Vault.
Microsoft.RecoveryServices/Vaults/backupstorageconfig/write	Updates Storage Configuration for Recovery Services Vault.
Microsoft.RecoveryServices/Vaults/backupTieringCost/fetchTieringCost/action	Returns the tiering related cost info.
Microsoft.RecoveryServices/Vaults/backupTieringCost/operationResults/read	Returns the result of Operation performed for tiering costs
Microsoft.RecoveryServices/Vaults/backupTieringCost/operationsStatus/read	Returns the status of Operation performed for tiering cost
Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read	Returns summaries for Protected Items and Protected Servers for a Recovery Services .
Microsoft.RecoveryServices/Vaults/backupValidateOperationResults/read	Validate Operation on Protected Item
Microsoft.RecoveryServices/Vaults/backupValidateOperationsStatuses/read	Validate Operation on Protected Item
Microsoft.RecoveryServices/Vaults/certificates/write	The Update Resource Certificate operation updates the resource/vault credential certificate.
Microsoft.RecoveryServices/Vaults/extendedInformation/read	The Get Extended Info operation gets an object's Extended Info representing the Azure resource of type ?vault?
Microsoft.RecoveryServices/Vaults/extendedInformation/write	The Get Extended Info operation gets an object's Extended Info representing the Azure resource of type ?vault?
Microsoft.RecoveryServices/Vaults/extendedInformation/delete	The Get Extended Info operation gets an object's Extended Info representing the Azure resource of type ?vault?
Microsoft.RecoveryServices/Vaults/monitoringAlerts/read	Gets the alerts for the Recovery services vault.
Microsoft.RecoveryServices/Vaults/monitoringAlerts/write	Resolves the alert.
Microsoft.RecoveryServices/Vaults/monitoringConfigurations/read	Gets the Recovery services vault notification configuration.
Microsoft.RecoveryServices/Vaults/monitoringConfigurations/write	Configures e-mail notifications to Recovery services vault.
Microsoft.RecoveryServices/Vaults/operationResults/read	The Get Operation Results operation can be used get the operation status and result for the asynchronously submitted operation
Microsoft.RecoveryServices/Vaults/operationStatus/read	Gets Operation Status for a given Operation
Microsoft.RecoveryServices/Vaults/privateEndpointConnectionProxies/delete	Wait for a few minutes and then try the operation again. If the issue persists, please contact Microsoft support.
Microsoft.RecoveryServices/Vaults/privateEndpointConnectionProxies/read	Get all protectable containers
Microsoft.RecoveryServices/Vaults/privateEndpointConnectionProxies/validate/action	Get all protectable containers
Microsoft.RecoveryServices/Vaults/privateEndpointConnectionProxies/write	Get all protectable containers
Microsoft.RecoveryServices/Vaults/privateEndpointConnectionProxies/operationsStatus/read	Get all protectable containers
Microsoft.RecoveryServices/Vaults/privateEndpointConnections/delete	Delete Private Endpoint requests. This call is made by Backup Admin.
Microsoft.RecoveryServices/Vaults/privateEndpointConnections/write	Approve or Reject Private Endpoint requests. This call is made by Backup Admin.
Microsoft.RecoveryServices/Vaults/privateEndpointConnections/read	Returns all the private endpoint connections.
Microsoft.RecoveryServices/Vaults/privateEndpointConnections/operationsStatus/read	Returns the operation status for a private endpoint connection.
Microsoft.RecoveryServices/Vaults/privateLinkResources/read	Returns all the private link resources.
Microsoft.RecoveryServices/Vaults/providers/Microsoft.Insights/diagnosticSettings/read	Azure Backup Diagnostics
Microsoft.RecoveryServices/Vaults/providers/Microsoft.Insights/diagnosticSettings/write	Azure Backup Diagnostics
Microsoft.RecoveryServices/Vaults/providers/Microsoft.Insights/logDefinitions/read	Azure Backup Logs
Microsoft.RecoveryServices/Vaults/providers/Microsoft.Insights/metricDefinitions/read	Azure Backup Metrics
Microsoft.RecoveryServices/Vaults/registeredIdentities/write	The Register Service Container operation can be used to register a container with Recovery Service.
Microsoft.RecoveryServices/Vaults/registeredIdentities/read	The Get Containers operation can be used get the containers registered for a resource.
Microsoft.RecoveryServices/Vaults/registeredIdentities/delete	The UnRegister Container operation can be used to unregister a container.
Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read	The Get Operation Results operation can be used get the operation status and result for the asynchronously submitted operation
Microsoft.RecoveryServices/vaults/replicationAlertSettings/read	Read any Alerts Settings
Microsoft.RecoveryServices/vaults/replicationAlertSettings/write	Create or Update any Alerts Settings
Microsoft.RecoveryServices/vaults/replicationEvents/read	Read any Events
Microsoft.RecoveryServices/vaults/replicationFabrics/read	Read any Fabrics
Microsoft.RecoveryServices/vaults/replicationFabrics/write	Create or Update any Fabrics
Microsoft.RecoveryServices/vaults/replicationFabrics/remove/action	Remove Fabric
Microsoft.RecoveryServices/vaults/replicationFabrics/checkConsistency/action	Checks Consistency of the Fabric
Microsoft.RecoveryServices/vaults/replicationFabrics/delete	Delete any Fabrics
Microsoft.RecoveryServices/vaults/replicationFabrics/renewcertificate/action	Renew Certificate for Fabric
Microsoft.RecoveryServices/vaults/replicationFabrics/deployProcessServerImage/action	Deploy Process Server Image
Microsoft.RecoveryServices/vaults/replicationFabrics/reassociateGateway/action	Reassociate Gateway
Microsoft.RecoveryServices/vaults/replicationFabrics/migratetoaad/action	Migrate Fabric To AAD
Microsoft.RecoveryServices/vaults/replicationFabrics/moveWebApp/action	Move WebApp
Microsoft.RecoveryServices/vaults/replicationFabrics/removeInfra/action
Microsoft.RecoveryServices/vaults/replicationFabrics/operationresults/read	Track the results of an asynchronous operation on the resource Fabrics
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationLogicalNetworks/read	Read any Logical Networks
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/read	Read any Networks
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/replicationNetworkMappings/read	Read any Network Mappings
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/replicationNetworkMappings/write	Create or Update any Network Mappings
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/replicationNetworkMappings/delete	Delete any Network Mappings
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/read	Read any Protection Containers
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/discoverProtectableItem/action	Discover Protectable Item
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/write	Create or Update any Protection Containers
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/remove/action	Remove Protection Container
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/switchprotection/action	Switch Protection Container
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/switchClusterProtection/action
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/operationresults/read	Track the results of an asynchronous operation on the resource Protection Containers
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationMigrationItems/read	Read any Migration Items
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationMigrationItems/write	Create or Update any Migration Items
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationMigrationItems/delete	Delete any Migration Items
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationMigrationItems/resync/action	Resynchronize
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationMigrationItems/migrate/action	Migrate Item
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationMigrationItems/testMigrate/action	Test Migrate
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationMigrationItems/testMigrateCleanup/action	Test Migrate Cleanup
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationMigrationItems/pauseReplication/action
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationMigrationItems/resumeReplication/action
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationMigrationItems/migrationRecoveryPoints/read	Read any Migration Recovery Points
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationMigrationItems/operationresults/read	Track the results of an asynchronous operation on the resource Migration Items
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectableItems/read	Read any Protectable Items
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/read	Read any Protected Items
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/write	Create or Update any Protected Items
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/delete	Delete any Protected Items
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/remove/action	Remove Protected Item
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/plannedFailover/action	Planned Failover
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/unplannedFailover/action	Failover
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/testFailover/action	Test Failover
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/testFailoverCleanup/action	Test Failover Cleanup
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/failoverCommit/action	Failover Commit
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/reProtect/action	ReProtect Protected Item
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/updateMobilityService/action	Update Mobility Service
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/repairReplication/action	Repair replication
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/applyRecoveryPoint/action	Apply Recovery Point
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/submitFeedback/action	Submit Feedback
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/addDisks/action	Add disks
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/removeDisks/action	Remove disks
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/ResolveHealthErrors/action
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/failoverCancel/action	Failover Cancel
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/updateAppliance/action
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/operationresults/read	Track the results of an asynchronous operation on the resource Protected Items
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/recoveryPoints/read	Read any Replication Recovery Points
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/targetComputeSizes/read	Read any Target Compute Sizes
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionClusters/read	Read any
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionClusters/delete	Delete any
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionClusters/unplannedFailover/action
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionClusters/testFailover/action
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionClusters/testFailoverCleanup/action
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionClusters/applyRecoveryPoint/action
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionClusters/failoverCommit/action
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionClusters/repairReplication/action
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionClusters/operationresults/read	Track the results of an asynchronous operation on the resource
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings/read	Read any Protection Container Mappings
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings/write	Create or Update any Protection Container Mappings
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings/remove/action	Remove Protection Container Mapping
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings/delete	Delete any Protection Container Mappings
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings/operationresults/read	Track the results of an asynchronous operation on the resource Protection Container Mappings
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/read	Read any Recovery Services Providers
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/write	Create or Update any Recovery Services Providers
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/remove/action	Remove Recovery Services Provider
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/delete	Delete any Recovery Services Providers
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/refreshProvider/action	Refresh Provider
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/operationresults/read	Track the results of an asynchronous operation on the resource Recovery Services Providers
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/read	Read any Storage Classifications
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/replicationStorageClassificationMappings/read	Read any Storage Classification Mappings
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/replicationStorageClassificationMappings/write	Create or Update any Storage Classification Mappings
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/replicationStorageClassificationMappings/delete	Delete any Storage Classification Mappings
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/replicationStorageClassificationMappings/operationresults/read	Track the results of an asynchronous operation on the resource Storage Classification Mappings
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationvCenters/read	Read any vCenters
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationvCenters/write	Create or Update any vCenters
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationvCenters/delete	Delete any vCenters
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationvCenters/operationresults/read	Track the results of an asynchronous operation on the resource vCenters
Microsoft.RecoveryServices/vaults/replicationJobs/read	Read any Jobs
Microsoft.RecoveryServices/vaults/replicationJobs/cancel/action	Cancel Job
Microsoft.RecoveryServices/vaults/replicationJobs/restart/action	Restart job
Microsoft.RecoveryServices/vaults/replicationJobs/resume/action	Resume Job
Microsoft.RecoveryServices/vaults/replicationJobs/operationresults/read	Track the results of an asynchronous operation on the resource Jobs
Microsoft.RecoveryServices/vaults/replicationMigrationItems/read	Read any Migration Items
Microsoft.RecoveryServices/vaults/replicationNetworkMappings/read	Read any Network Mappings
Microsoft.RecoveryServices/vaults/replicationNetworks/read	Read any Networks
Microsoft.RecoveryServices/vaults/replicationOperationStatus/read	Read any Vault Replication Operation Status
Microsoft.RecoveryServices/vaults/replicationPolicies/read	Read any Policies
Microsoft.RecoveryServices/vaults/replicationPolicies/write	Create or Update any Policies
Microsoft.RecoveryServices/vaults/replicationPolicies/delete	Delete any Policies
Microsoft.RecoveryServices/vaults/replicationPolicies/operationresults/read	Track the results of an asynchronous operation on the resource Policies
Microsoft.RecoveryServices/vaults/replicationProtectedItems/read	Read any Protected Items
Microsoft.RecoveryServices/vaults/replicationProtectionContainerMappings/read	Read any Protection Container Mappings
Microsoft.RecoveryServices/vaults/replicationProtectionContainers/read	Read any Protection Containers
Microsoft.RecoveryServices/vaults/replicationProtectionIntents/read	Read any
Microsoft.RecoveryServices/vaults/replicationProtectionIntents/write	Create or Update any
Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/read	Read any Recovery Plans
Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/write	Create or Update any Recovery Plans
Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/delete	Delete any Recovery Plans
Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/plannedFailover/action	Planned Failover Recovery Plan
Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/unplannedFailover/action	Failover Recovery Plan
Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/testFailover/action	Test Failover Recovery Plan
Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/testFailoverCleanup/action	Test Failover Cleanup Recovery Plan
Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/failoverCommit/action	Failover Commit Recovery Plan
Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/reProtect/action	ReProtect Recovery Plan
Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/failoverCancel/action	Cancel Failover Recovery Plan
Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/operationresults/read	Track the results of an asynchronous operation on the resource Recovery Plans
Microsoft.RecoveryServices/vaults/replicationRecoveryServicesProviders/read	Read any Recovery Services Providers
Microsoft.RecoveryServices/vaults/replicationStorageClassificationMappings/read	Read any Storage Classification Mappings
Microsoft.RecoveryServices/vaults/replicationStorageClassifications/read	Read any Storage Classifications
Microsoft.RecoveryServices/vaults/replicationSupportedOperatingSystems/read	Read any
Microsoft.RecoveryServices/vaults/replicationSupportedRegionMappings/read	Read any
Microsoft.RecoveryServices/vaults/replicationUsages/read	Read any Vault Replication Usages
Microsoft.RecoveryServices/vaults/replicationVaultHealth/read	Read any Vault Replication Health
Microsoft.RecoveryServices/vaults/replicationVaultHealth/refresh/action	Refresh Vault Health
Microsoft.RecoveryServices/vaults/replicationVaultHealth/operationresults/read	Track the results of an asynchronous operation on the resource Vault Replication Health
Microsoft.RecoveryServices/vaults/replicationVaultSettings/read	Read any
Microsoft.RecoveryServices/vaults/replicationVaultSettings/write	Create or Update any
Microsoft.RecoveryServices/vaults/replicationvCenters/read	Read any vCenters
Microsoft.RecoveryServices/Vaults/usages/read	Returns usage details for a Recovery Services Vault.
Microsoft.RecoveryServices/vaults/usages/read	Read any Vault Usages
Microsoft.RecoveryServices/Vaults/vaultTokens/read	The Vault Token operation can be used to get Vault Token for vault level backend operations.

Microsoft.ResourceGraph

Powerful tool to query, explore, and analyze your cloud resources at scale.

Azure service: Azure Resource Graph

Action	Description
Microsoft.ResourceGraph/operations/read	Gets the list of supported operations
Microsoft.ResourceGraph/queries/read	Gets the specified graph query
Microsoft.ResourceGraph/queries/delete	Deletes the specified graph query
Microsoft.ResourceGraph/queries/write	Creates/Updates the specified graph query
Microsoft.ResourceGraph/resourceChangeDetails/read	Gets the details of the specified resource change
Microsoft.ResourceGraph/resourceChanges/read	Lists changes to a resource for a given time interval
Microsoft.ResourceGraph/resources/read	Submits a query on resources within specified subscriptions, management groups or tenant scope
Microsoft.ResourceGraph/resourcesHistory/read	List all snapshots of resources history within specified subscriptions, management groups or tenant scope

Microsoft.ResourceHealth

Diagnose and get support for service problems that affect your Azure resources.

Azure service: Azure Service Health

Action	Description
Microsoft.ResourceHealth/events/action	Endpoint to fetch details for event
Microsoft.ResourceHealth/register/action	Registers the subscription for the Microsoft ResourceHealth
Microsoft.ResourceHealth/unregister/action	Unregisters the subscription for the Microsoft ResourceHealth
Microsoft.Resourcehealth/healthevent/action	Denotes the change in health state for the specified resource
Microsoft.ResourceHealth/AvailabilityStatuses/read	Gets the availability statuses for all resources in the specified scope
Microsoft.ResourceHealth/AvailabilityStatuses/current/read	Gets the availability status for the specified resource
Microsoft.ResourceHealth/emergingissues/read	Get Azure services' emerging issues
Microsoft.ResourceHealth/events/read	Get Service Health Events for given subscription
Microsoft.ResourceHealth/events/fetchEventDetails/action	Endpoint to fetch details for event
Microsoft.ResourceHealth/events/listSecurityAdvisoryImpactedResources/action	Get Impacted Resources for a given event of type SecurityAdvisory
Microsoft.ResourceHealth/events/impactedResources/read	Get Impacted Resources for a given event
Microsoft.Resourcehealth/healthevent/Activated/action	Denotes the change in health state for the specified resource
Microsoft.Resourcehealth/healthevent/Updated/action	Denotes the change in health state for the specified resource
Microsoft.Resourcehealth/healthevent/Resolved/action	Denotes the change in health state for the specified resource
Microsoft.Resourcehealth/healthevent/InProgress/action	Denotes the change in health state for the specified resource
Microsoft.Resourcehealth/healthevent/Pending/action	Denotes the change in health state for the specified resource
Microsoft.ResourceHealth/impactedResources/read	Get Impacted Resources for given subscription
Microsoft.ResourceHealth/metadata/read	Gets Metadata
Microsoft.ResourceHealth/Notifications/read	Receives Azure Resource Manager notifications
Microsoft.ResourceHealth/Operations/read	Get the operations available for the Microsoft ResourceHealth
Microsoft.ResourceHealth/potentialoutages/read	Get Potential Outages for given subscription

Microsoft.Resources

Deployment and management service for Azure that enables you to create, update, and delete resources in your Azure subscription.