适用于混合现实的 Azure 内置角色

本文列出了混合现实类别中的 Azure 内置角色。

远程渲染管理员

为用户提供 Azure 远程渲染的转换、管理会话、渲染和诊断功能

操作 描述
不操作
DataActions
Microsoft.MixedReality/RemoteRenderingAccounts/convert/action 启动资产转换
Microsoft.MixedReality/RemoteRenderingAccounts/convert/read 获取资产转换属性
Microsoft.MixedReality/RemoteRenderingAccounts/convert/delete 停止资产转换
Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/read 获取会话属性
Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/action 启动会话
Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/delete 停止会话
Microsoft.MixedReality/RemoteRenderingAccounts/render/read 连接到会话
Microsoft.MixedReality/RemoteRenderingAccounts/diagnostic/read 连接到远程渲染检查器
NotDataActions
{
  "assignableScopes": [
    "/"
  ],
  "description": "Provides user with conversion, manage session, rendering and diagnostics capabilities for Azure Remote Rendering",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/3df8b902-2a6f-47c7-8cc5-360e9b272a7e",
  "name": "3df8b902-2a6f-47c7-8cc5-360e9b272a7e",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.MixedReality/RemoteRenderingAccounts/convert/action",
        "Microsoft.MixedReality/RemoteRenderingAccounts/convert/read",
        "Microsoft.MixedReality/RemoteRenderingAccounts/convert/delete",
        "Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/read",
        "Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/action",
        "Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/delete",
        "Microsoft.MixedReality/RemoteRenderingAccounts/render/read",
        "Microsoft.MixedReality/RemoteRenderingAccounts/diagnostic/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Remote Rendering Administrator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

远程渲染客户端

为用户提供 Azure 远程渲染的管理会话、渲染和诊断功能。

操作 描述
不操作
DataActions
Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/read 获取会话属性
Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/action 启动会话
Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/delete 停止会话
Microsoft.MixedReality/RemoteRenderingAccounts/render/read 连接到会话
Microsoft.MixedReality/RemoteRenderingAccounts/diagnostic/read 连接到远程渲染检查器
NotDataActions
{
  "assignableScopes": [
    "/"
  ],
  "description": "Provides user with manage session, rendering and diagnostics capabilities for Azure Remote Rendering.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/d39065c4-c120-43c9-ab0a-63eed9795f0a",
  "name": "d39065c4-c120-43c9-ab0a-63eed9795f0a",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/read",
        "Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/action",
        "Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/delete",
        "Microsoft.MixedReality/RemoteRenderingAccounts/render/read",
        "Microsoft.MixedReality/RemoteRenderingAccounts/diagnostic/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Remote Rendering Client",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

空间定位点帐户参与者

允许管理帐户中的空间定位点,但不能删除它们

操作 描述
不操作
DataActions
Microsoft.MixedReality/SpatialAnchorsAccounts/create/action 创建空间定位点
Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read 发现附近的空间定位点
Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read 获取空间定位点的属性
Microsoft.MixedReality/SpatialAnchorsAccounts/query/read 查找空间定位点
Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read 提交诊断数据以帮助提高 Azure 空间定位点服务的质量
Microsoft.MixedReality/SpatialAnchorsAccounts/write 更新空间定位点属性
NotDataActions
{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you manage spatial anchors in your account, but not delete them",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/8bbe83f1-e2a6-4df7-8cb4-4e04d4e5c827",
  "name": "8bbe83f1-e2a6-4df7-8cb4-4e04d4e5c827",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.MixedReality/SpatialAnchorsAccounts/create/action",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/query/read",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/write"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Spatial Anchors Account Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

空间定位点帐户所有者

允许管理帐户中的空间定位点,包括删除它们

操作 描述
不操作
DataActions
Microsoft.MixedReality/SpatialAnchorsAccounts/create/action 创建空间定位点
Microsoft.MixedReality/SpatialAnchorsAccounts/delete 删除空间定位点
Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read 发现附近的空间定位点
Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read 获取空间定位点的属性
Microsoft.MixedReality/SpatialAnchorsAccounts/query/read 查找空间定位点
Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read 提交诊断数据以帮助提高 Azure 空间定位点服务的质量
Microsoft.MixedReality/SpatialAnchorsAccounts/write 更新空间定位点属性
NotDataActions
{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you manage spatial anchors in your account, including deleting them",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/70bbe301-9835-447d-afdd-19eb3167307c",
  "name": "70bbe301-9835-447d-afdd-19eb3167307c",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.MixedReality/SpatialAnchorsAccounts/create/action",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/delete",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/query/read",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/write"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Spatial Anchors Account Owner",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

空间定位点帐户读取者

允许查找并读取帐户中的空间定位点的属性

操作 描述
不操作
DataActions
Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read 发现附近的空间定位点
Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read 获取空间定位点的属性
Microsoft.MixedReality/SpatialAnchorsAccounts/query/read 查找空间定位点
Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read 提交诊断数据以帮助提高 Azure 空间定位点服务的质量
NotDataActions
{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you locate and read properties of spatial anchors in your account",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/5d51204f-eb77-4b1c-b86a-2ec626c49413",
  "name": "5d51204f-eb77-4b1c-b86a-2ec626c49413",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/query/read",
        "Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Spatial Anchors Account Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

后续步骤