Azure 安全权限

本文列出了安全类别中 Azure 资源提供程序的权限。 可以在自己的 Azure 自定义角色中使用这些权限,以针对 Azure 中的资源提供精细的访问控制。 权限字符串具有以下格式:{Company}.{ProviderName}/{resourceType}/{action}

Microsoft.AppComplianceAutomation

Azure 服务:适用于 Microsoft 365 的应用合规性自动化工具

操作 说明
Microsoft.AppComplianceAutomation/onboard/action 将给定订阅加入到 Microsoft.AppComplianceAutomation 提供程序。
Microsoft.AppComplianceAutomation/triggerEvaluation/action 触发对给定订阅的快速评估。
Microsoft.AppComplianceAutomation/listInUseStorageAccounts/action 列出相关报表正在使用的存储帐户
Microsoft.AppComplianceAutomation/checkNameAvailability/action 操作 checkNameAvailability
Microsoft.AppComplianceAutomation/getCollectionCount/action 获取报表计数。
Microsoft.AppComplianceAutomation/getOverviewStatus/action 获取资源概述状态。
Microsoft.AppComplianceAutomation/register/action 注册 Microsoft.AppComplianceAutomation 的订阅
Microsoft.AppComplianceAutomation/unregister/action 注册 Microsoft.AppComplianceAutomation 的订阅
Microsoft.AppComplianceAutomation/locations/operationStatuses/read 读取 OperationStatuses
Microsoft.AppComplianceAutomation/locations/operationStatuses/write 写入 operationStatuses
Microsoft.AppComplianceAutomation/operations/read 读取操作
Microsoft.AppComplianceAutomation/operations/read 获取租户的 AppComplianceAutomation 报表列表。
Microsoft.AppComplianceAutomation/operations/read 获取 AppComplianceAutomation 报表及其属性。
Microsoft.AppComplianceAutomation/reports/write 创建新的 AppComplianceAutomation 报表或更新正在退出的 AppComplianceAutomation 报表。
Microsoft.AppComplianceAutomation/reports/delete 删除 AppComplianceAutomation 报表。
Microsoft.AppComplianceAutomation/reports/write 更新正在退出的 AppComplianceAutomation 报表。
Microsoft.AppComplianceAutomation/reports/checkNameAvailability/action 检查报表的嵌套资源名称可用性,例如:Webhook、证据、快照。
Microsoft.AppComplianceAutomation/reports/fix/action 修复 AppComplianceAutomation 报表错误。 例如:应用符合性自动化工具服务未注册、已删除自动化。
Microsoft.AppComplianceAutomation/reports/getScopingQuestions/action 修复 AppComplianceAutomation 报表错误。 例如:应用符合性自动化工具服务未注册、已删除自动化。
Microsoft.AppComplianceAutomation/reports/syncCertRecord/action 从应用合规性同步证明记录。
Microsoft.AppComplianceAutomation/reports/verify/action 验证 AppComplianceAutomation 报表运行状况。
Microsoft.AppComplianceAutomation/reports/evidences/read 返回指定报表的证据分页列表。
Microsoft.AppComplianceAutomation/reports/evidences/read 获取证据元数据
Microsoft.AppComplianceAutomation/reports/evidences/write 创建或更新指定报表的证据
Microsoft.AppComplianceAutomation/reports/evidences/delete 从指定报表中删除现有证据
Microsoft.AppComplianceAutomation/reports/evidences/download/action 下载证据文件。
Microsoft.AppComplianceAutomation/reports/scopingConfigurations/read 返回指定报表的单一实例范围配置的列表格式。
Microsoft.AppComplianceAutomation/reports/scopingConfigurations/read 获取特定报表的 AppComplianceAutomation 范围配置。
Microsoft.AppComplianceAutomation/reports/scopingConfigurations/write 获取特定报表的 AppComplianceAutomation 范围配置。
Microsoft.AppComplianceAutomation/reports/scopingConfigurations/delete 清理特定报表的 AppComplianceAutomation 范围配置。
Microsoft.AppComplianceAutomation/reports/snapshots/read 获取 AppComplianceAutomation 快照列表。
Microsoft.AppComplianceAutomation/reports/snapshots/read 获取 AppComplianceAutomation 快照及其属性。
Microsoft.AppComplianceAutomation/reports/snapshots/download/action 从快照下载合规性需求,例如,合规性报表、资源列表。
Microsoft.AppComplianceAutomation/reports/webhooks/read 获取 AppComplianceAutomation Webhook 列表。
Microsoft.AppComplianceAutomation/reports/webhooks/read 获取 AppComplianceAutomation Webhook 及其属性。
Microsoft.AppComplianceAutomation/reports/webhooks/write 创建新的 AppComplianceAutomation webhook 或更新正在退出的 AppComplianceAutomation Webhook。
Microsoft.AppComplianceAutomation/reports/webhooks/delete 删除 AppComplianceAutomation Webhook。
Microsoft.AppComplianceAutomation/reports/webhooks/write 更新正在退出的 AppComplianceAutomation Webhook。

Microsoft.DataProtection

Azure 服务:数据保护

操作 说明
Microsoft.DataProtection/register/action 注册给定资源提供程序的订阅
Microsoft.DataProtection/unregister/action 注销给定资源提供程序的订阅
Microsoft.DataProtection/backupVaults/write “创建 BackupVault”操作创建“备份保管库”类型的 Azure 资源
Microsoft.DataProtection/backupVaults/write “更新备份保管库”操作更新类型为“备份保管库”的 Azure 资源
Microsoft.DataProtection/backupVaults/read “获取备份保管库”操作获取表示“备份保管库”类型 Azure 资源的对象
Microsoft.DataProtection/backupVaults/read 获取订阅中备份保管库的列表
Microsoft.DataProtection/backupVaults/read 获取资源组中备份保管库的列表
Microsoft.DataProtection/backupVaults/delete “删除保管库”操作删除类型为“备份保管库”的指定 Azure 资源
Microsoft.DataProtection/backupVaults/validateForBackup/action 验证备份实例的备份
Microsoft.DataProtection/backupVaults/backupInstances/write 创建备份实例
Microsoft.DataProtection/backupVaults/backupInstances/validateForModifyBackup/action 验证备份实例的修改
Microsoft.DataProtection/backupVaults/backupInstances/delete 删除备份实例
Microsoft.DataProtection/backupVaults/backupInstances/read 返回备份实例的详细信息
Microsoft.DataProtection/backupVaults/backupInstances/read 返回所有备份实例
Microsoft.DataProtection/backupVaults/backupInstances/backup/action 对备份实例执行备份
Microsoft.DataProtection/backupVaults/backupInstances/sync/action “同步”操作会重试备份实例上的上一次失败操作,使其处于有效状态。
Microsoft.DataProtection/backupVaults/backupInstances/restore/action 触发对备份实例的还原操作
Microsoft.DataProtection/backupVaults/backupInstances/validateRestore/action 验证是否已对备份实例执行还原
Microsoft.DataProtection/backupVaults/backupInstances/stopProtection/action “停止保护”操作会停止备份实例的备份和保留计划。 现有数据将永久保留。
Microsoft.DataProtection/backupVaults/backupInstances/suspendBackups/action “暂停备份”操作仅停止备份实例的备份。 保留活动将会继续,因此,数据将根据策略保留。
Microsoft.DataProtection/backupVaults/backupInstances/resumeProtection/action 继续保护 ProtectionStopped BI。
Microsoft.DataProtection/backupVaults/backupInstances/resumeBackups/action 继续备份 BackupsSuspended BI。
Microsoft.DataProtection/backupVaults/backupInstances/findRestorableTimeRanges/action 查找可还原的时间范围
Microsoft.DataProtection/backupVaults/backupInstances/operationResults/read 返回备份保管库的备份操作结果。
Microsoft.DataProtection/backupVaults/backupInstances/recoveryPoints/read 返回恢复点的详细信息
Microsoft.DataProtection/backupVaults/backupInstances/recoveryPoints/read 返回所有恢复点
Microsoft.DataProtection/backupVaults/backupJobs/read 获取作业列表
Microsoft.DataProtection/backupVaults/backupJobs/enableProgress/action 获取作业详细信息
Microsoft.DataProtection/backupVaults/backupPolicies/write 创建备份策略
Microsoft.DataProtection/backupVaults/backupPolicies/delete 删除备份策略
Microsoft.DataProtection/backupVaults/backupPolicies/read 返回备份策略的详细信息
Microsoft.DataProtection/backupVaults/backupPolicies/read 返回所有备份策略
Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/read 获取资源的 ResourceGuard 代理列表
Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/read “获取 ResourceGuard 代理”操作获取表示类型为“ResourceGuard 代理”的 Azure 资源的对象
Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/write “创建 ResourceGuard 代理”操作创建类型为“ResourceGuard 代理”的 Azure 资源
Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/delete “删除 ResourceGuard 代理”操作删除类型为“ResourceGuard 代理”的指定 Azure 资源
Microsoft.DataProtection/backupVaults/backupResourceGuardProxies/unlockDelete/action “解锁删除 ResourceGuard 代理”操作解锁下一删除关键操作
Microsoft.DataProtection/backupVaults/deletedBackupInstances/undelete/action 执行对软删除的备份实例的取消删除操作。 备份实例从 SoftDeleted 状态转为 ProtectionStopped 状态。
Microsoft.DataProtection/backupVaults/deletedBackupInstances/read 按名称获取备份保管库中软删除的备份实例
Microsoft.DataProtection/backupVaults/deletedBackupInstances/read 列出备份保管库中软删除的备份实例。
Microsoft.DataProtection/backupVaults/operationResults/read 获取备份保管库的修补操作的操作结果
Microsoft.DataProtection/backupVaults/operationStatus/read 返回备份保管库的备份操作状态。
Microsoft.DataProtection/locations/checkNameAvailability/action 检查所请求的 BackupVault 名称是否可用
Microsoft.DataProtection/locations/getBackupStatus/action 检查恢复服务保管库的备份状态
Microsoft.DataProtection/locations/checkFeatureSupport/action 验证功能是否受支持
Microsoft.DataProtection/locations/operationResults/read 返回备份保管库的备份操作结果。
Microsoft.DataProtection/locations/operationStatus/read 返回备份保管库的备份操作状态。
Microsoft.DataProtection/operations/read 操作返回资源提供程序的操作列表
Microsoft.DataProtection/subscriptions/providers/resourceGuards/read 获取订阅中的 ResourceGuard 的列表
Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/fetchSecondaryRecoveryPoints/action 从次要区域返回已启用跨区域还原的备份保管库的恢复点。
Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/crossRegionRestore/action 在给定的备份实例上触发跨区域还原操作。
Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/validateCrossRegionRestore/action 对跨区域还原操作执行验证。
Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/fetchCrossRegionRestoreJobs/action 列出次要区域中备份实例的跨区域还原作业。
Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/fetchCrossRegionRestoreJob/action 从次要区域获取跨区域还原作业详细信息。
Microsoft.DataProtection/subscriptions/resourceGroups/providers/locations/operationStatus/read 返回备份保管库的备份操作状态。
Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/write “创建 ResourceGuard”操作创建“ResourceGuard”类型的 Azure 资源
Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/read “获取 ResourceGuard”操作获取表示“ResourceGuard”类型的 Azure 资源的对象
Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/delete “删除 ResourceGuard”操作删除“ResourceGuard”类型的指定 Azure 资源
Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/read 获取资源组中的 ResourceGuard 的列表
Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/write “更新 ResourceGuard”操作更新“ResourceGuard”类型的 Azure 资源
Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/{operationName}/read 获取 ResourceGuard 操作请求信息
Microsoft.DataProtection/subscriptions/resourceGroups/providers/resourceGuards/{operationName}/read 获取 ResourceGuard 默认操作请求信息

Microsoft.KeyVault

保护密钥和其他机密并保持对它们的控制。

Azure 服务:密钥保管库

操作 说明
Microsoft.KeyVault/register/action 注册订阅
Microsoft.KeyVault/unregister/action 取消注册订阅
Microsoft.KeyVault/checkNameAvailability/read 检查密钥保管库名称是否有效且未被使用
Microsoft.KeyVault/deletedManagedHsms/read 查看已删除的托管 HSM 的属性
Microsoft.KeyVault/deletedVaults/read 查看软删除的密钥保管库的属性
Microsoft.KeyVault/hsmPools/read 查看 HSM 池的属性
Microsoft.KeyVault/hsmPools/write 创建新 HSM 池或更新现有 HSM 池的属性
Microsoft.KeyVault/hsmPools/delete 删除 HSM 池
Microsoft.KeyVault/hsmPools/joinVault/action 将密钥保管库加入 HSM 池
Microsoft.KeyVault/locations/deleteVirtualNetworkOrSubnets/action 通知 Microsoft.KeyVault 正在删除虚拟网络或子网
Microsoft.KeyVault/locations/notifyNetworkSecurityPerimeterUpdatesAvailable/action 检查网络安全外围的配置是否需要更新。
Microsoft.KeyVault/locations/deletedManagedHsms/read 查看已删除的托管 HSM 的属性
Microsoft.KeyVault/locations/deletedManagedHsms/purge/action 清除已软删除的托管 HSM
Microsoft.KeyVault/locations/deletedManagedHsms/delete 清除已软删除的托管 HSM
Microsoft.KeyVault/locations/deletedVaults/read 查看软删除的密钥保管库的属性
Microsoft.KeyVault/locations/deletedVaults/purge/action 清除软删除的密钥保管库
Microsoft.KeyVault/locations/managedHsmOperationResults/read 检查长时间运行的操作的结果
Microsoft.KeyVault/locations/operationResults/read 检查长时间运行的操作的结果
Microsoft.KeyVault/managedHSMs/read 查看托管 HSM 的属性
Microsoft.KeyVault/managedHSMs/write 新建托管 HSM 或更新现有托管 HSM 的属性
Microsoft.KeyVault/managedHSMs/delete 删除托管 HSM
Microsoft.KeyVault/managedHSMs/PrivateEndpointConnectionsApproval/action 批准或拒绝到 Microsoft.Network 提供程序的专用终结点资源的连接
Microsoft.KeyVault/managedHSMs/keys/read 列出指定托管 HSM 中的密钥,或读取指定密钥的当前版本。
Microsoft.KeyVault/managedHSMs/keys/write 创建新密钥的第一个版本(如果不存在)。 如果已存在,则返回现有密钥,而不进行任何修改。 此 API 不创建后续版本,也不更新现有的密钥。
Microsoft.KeyVault/managedHSMs/keys/versions/read 列出指定密钥的版本,或读取密钥的指定版本。
Microsoft.KeyVault/managedHSMs/privateEndpointConnectionProxies/read 查看到 Microsoft.Network 提供程序的专用终结点资源的连接代理状态
Microsoft.KeyVault/managedHSMs/privateEndpointConnectionProxies/write 更改到 Microsoft.Network 提供程序的专用终结点资源的连接代理状态
Microsoft.KeyVault/managedHSMs/privateEndpointConnectionProxies/delete 删除到 Microsoft.Network 提供程序的专用终结点资源的连接代理
Microsoft.KeyVault/managedHSMs/privateEndpointConnectionProxies/validate/action 验证到 Microsoft.Network 提供程序的专用终结点资源的连接代理
Microsoft.KeyVault/managedHSMs/privateEndpointConnections/read 查看到 Microsoft.Network 提供程序的专用终结点资源的连接状态
Microsoft.KeyVault/managedHSMs/privateEndpointConnections/write 更改到 Microsoft.Network 提供程序的专用终结点资源的连接状态
Microsoft.KeyVault/managedHSMs/privateEndpointConnections/delete 删除到 Microsoft.Network 提供程序的专用终结点资源的连接
Microsoft.KeyVault/managedHSMs/privateLinkResources/read 获取托管 HSM 的指定实例的可用专用链接资源。
Microsoft.KeyVault/managedHSMs/providers/Microsoft.Insights/diagnosticSettings/Read 获取资源的诊断设置
Microsoft.KeyVault/managedHSMs/providers/Microsoft.Insights/diagnosticSettings/Write 创建或更新资源的诊断设置
Microsoft.KeyVault/managedHSMs/providers/Microsoft.Insights/logDefinitions/read 获取托管 HSM 的可用日志
Microsoft.KeyVault/managedHSMs/providers/Microsoft.Insights/metricDefinitions/read 获取密钥保管库的可用指标
Microsoft.KeyVault/operations/read 列出可对 Microsoft.KeyVault 资源提供程序执行的操作
Microsoft.KeyVault/vaults/read 查看密钥保管库的属性
Microsoft.KeyVault/vaults/write 创建新的密钥保管库,或更新现有密钥保管库的属性。 某些属性可能需要更多的权限。
Microsoft.KeyVault/vaults/delete 删除密钥保管库
Microsoft.KeyVault/vaults/deploy/action 部署 Azure 资源时启用对密钥保管库中机密的访问
Microsoft.KeyVault/vaults/PrivateEndpointConnectionsApproval/action 批准或拒绝到 Microsoft.Network 提供程序的专用终结点资源的连接
Microsoft.KeyVault/vaults/joinPerimeter/action 联接网络安全外围的操作,由 NRP 的链接访问检查使用。
Microsoft.KeyVault/vaults/accessPolicies/write 通过合并或替换来更新现有访问策略,或向密钥保管库添加新的访问策略。
Microsoft.KeyVault/vaults/eventGridFilters/read 通知 Microsoft.KeyVault 正在查看 Key Vault 的 EventGrid 订阅
Microsoft.KeyVault/vaults/eventGridFilters/write 通知 Microsoft.KeyVault 正在创建 Key Vault 的新 EventGrid 订阅
Microsoft.KeyVault/vaults/eventGridFilters/delete 通知 Microsoft.KeyVault 正在删除 Key Vault 的 EventGrid 订阅
Microsoft.KeyVault/vaults/keys/read 列出指定保管库中的密钥,或读取指定密钥的当前版本。
Microsoft.KeyVault/vaults/keys/write 创建新密钥的第一个版本(如果不存在)。 如果已存在,则返回现有密钥,而不进行任何修改。 此 API 不创建后续版本,也不更新现有的密钥。
Microsoft.KeyVault/vaults/keys/versions/read 列出指定密钥的版本,或读取密钥的指定版本。
Microsoft.KeyVault/vaults/networkSecurityPerimeterAssociationProxies/delete 删除代理与 Microsoft.Network 提供程序的网络安全外围资源的关联。
Microsoft.KeyVault/vaults/networkSecurityPerimeterAssociationProxies/read 删除代理与 Microsoft.Network 提供程序的网络安全外围资源的关联。
Microsoft.KeyVault/vaults/networkSecurityPerimeterAssociationProxies/write 更改与 Microsoft.Network 提供程序的网络安全外围资源关联的状态
Microsoft.KeyVault/vaults/networkSecurityPerimeterConfigurations/read 读取保管库中存储的网络安全外围配置。
Microsoft.KeyVault/vaults/networkSecurityPerimeterConfigurations/reconcile/action 协调保管库存储中的网络安全外围配置与 NRP 的(Microsoft.Network 资源提供程序)副本。
Microsoft.KeyVault/vaults/privateEndpointConnectionProxies/read 查看到 Microsoft.Network 提供程序的专用终结点资源的连接代理状态
Microsoft.KeyVault/vaults/privateEndpointConnectionProxies/write 更改到 Microsoft.Network 提供程序的专用终结点资源的连接代理状态
Microsoft.KeyVault/vaults/privateEndpointConnectionProxies/delete 删除到 Microsoft.Network 提供程序的专用终结点资源的连接代理
Microsoft.KeyVault/vaults/privateEndpointConnectionProxies/validate/action 验证到 Microsoft.Network 提供程序的专用终结点资源的连接代理
Microsoft.KeyVault/vaults/privateEndpointConnections/read 查看到 Microsoft.Network 提供程序的专用终结点资源的连接状态
Microsoft.KeyVault/vaults/privateEndpointConnections/write 更改到 Microsoft.Network 提供程序的专用终结点资源的连接状态
Microsoft.KeyVault/vaults/privateEndpointConnections/delete 删除到 Microsoft.Network 提供程序的专用终结点资源的连接
Microsoft.KeyVault/vaults/privateLinkResources/read 获取密钥保管库的指定实例的可用专用链接资源
Microsoft.KeyVault/vaults/providers/Microsoft.Insights/diagnosticSettings/Read 获取资源的诊断设置
Microsoft.KeyVault/vaults/providers/Microsoft.Insights/diagnosticSettings/Write 创建或更新资源的诊断设置
Microsoft.KeyVault/vaults/providers/Microsoft.Insights/logDefinitions/read 获取密钥保管库的可用日志
Microsoft.KeyVault/vaults/providers/Microsoft.Insights/metricDefinitions/read 获取密钥保管库的可用指标
Microsoft.KeyVault/vaults/secrets/read 查看机密的属性,但不查看其值。
Microsoft.KeyVault/vaults/secrets/write 创建新机密或更新现有机密的值。
DataAction 说明
Microsoft.KeyVault/vaults/certificatecas/delete 删除证书颁发者
Microsoft.KeyVault/vaults/certificatecas/read 读取证书颁发者
Microsoft.KeyVault/vaults/certificatecas/write 写入证书颁发者
Microsoft.KeyVault/vaults/certificatecontacts/write 管理证书联系人
Microsoft.KeyVault/vaults/certificates/delete 删除证书。 所有版本都会被删除。
Microsoft.KeyVault/vaults/certificates/read 列出指定的 Key Vault 中的证书,或获取有关证书的信息。
Microsoft.KeyVault/vaults/certificates/backup/action 创建证书的备份文件。 该文件可用于还原同一订阅的 Key Vault 中的证书。 可能存在限制。
Microsoft.KeyVault/vaults/certificates/purge/action 清除证书,使其不可恢复。
Microsoft.KeyVault/vaults/certificates/update/action 更新与给定证书关联的指定属性。
Microsoft.KeyVault/vaults/certificates/create/action 创建新证书。 如果证书不存在,则创建第一个版本, 否则会创建一个新版本。
Microsoft.KeyVault/vaults/certificates/import/action 导入包含私钥的现有有效证书。
要导入的证书可以采用 PFX 或 PEM 格式。
如果 Key Vault 中不存在该证书,则会使用指定的内容创建第一个版本。
否则,将使用指定的内容创建一个新版本。
Microsoft.KeyVault/vaults/certificates/recover/action 恢复已删除的证书。 该操作与 Delete 操作相反。 该操作在启用了软删除的保管库中适用,必须在保留间隔内发出。
Microsoft.KeyVault/vaults/certificates/restore/action 从 Key Vault 所生成的备份文件还原证书及其所有版本。
Microsoft.KeyVault/vaults/keyrotationpolicies/read 检索给定密钥的轮换策略。
Microsoft.KeyVault/vaults/keyrotationpolicies/write 更新给定密钥的轮换策略。
Microsoft.KeyVault/vaults/keys/read 列出指定保管库中的密钥,或读取密钥的属性和公共材料。
对于非对称密钥,此操作会公开公钥,并提供执行公钥算法(例如加密和验证签名)的功能。
永远不会公开私钥和对称密钥。
Microsoft.KeyVault/vaults/keys/update/action 更新与给定密钥关联的指定属性。
Microsoft.KeyVault/vaults/keys/create/action 创建新密钥。 如果密钥不存在,则创建第一个版本。 否则,将使用指定的值创建一个新版本。
Microsoft.KeyVault/vaults/keys/import/action 导入在外部创建的密钥。 如果该密钥不存在,则使用导入的材料创建第一个版本。 否则,将使用导入的材料创建一个新版本。
Microsoft.KeyVault/vaults/keys/recover/action 恢复已删除的密钥。 该操作与 Delete 操作相反。 该操作在启用了软删除的保管库中适用,必须在保留间隔内发出。
Microsoft.KeyVault/vaults/keys/restore/action 从 Key Vault 所生成的备份文件还原密钥及其所有版本。
Microsoft.KeyVault/vaults/keys/delete 删除密钥。 所有版本都会被删除。
Microsoft.KeyVault/vaults/keys/backup/action 创建密钥的备份文件。 该文件可用于还原同一订阅的 Key Vault 中的密钥。 可能存在限制。
Microsoft.KeyVault/vaults/keys/purge/action 清除密钥,使其不可恢复。
Microsoft.KeyVault/vaults/keys/encrypt/action 使用密钥加密纯文本。 请注意,如果密钥为非对称密钥,此操作可以由拥有读取访问权限的主体执行。
Microsoft.KeyVault/vaults/keys/decrypt/action 使用密钥解密已加密文本。
Microsoft.KeyVault/vaults/keys/wrap/action 使用 Key Vault 密钥包装对称密钥。 请注意,如果 Key Vault 密钥为非对称密钥,此操作可以由拥有读取访问权限的主体执行。
Microsoft.KeyVault/vaults/keys/unwrap/action 使用 Key Vault 密钥解包对称密钥。
Microsoft.KeyVault/vaults/keys/sign/action 使用密钥为消息摘要(哈希)签名。
Microsoft.KeyVault/vaults/keys/verify/action 使用密钥验证消息摘要(哈希)的签名。 请注意,如果密钥为非对称密钥,此操作可以由拥有读取访问权限的主体执行。
Microsoft.KeyVault/vaults/keys/release/action 使用证明令牌中 KEK 的公共部分来释放密钥。
Microsoft.KeyVault/vaults/keys/rotate/action 创建现有密钥的新版本(使用相同的参数)。
Microsoft.KeyVault/vaults/secrets/delete 删除机密。 所有版本都会被删除。
Microsoft.KeyVault/vaults/secrets/backup/action 创建机密的备份文件。 该文件可用于还原同一订阅的 Key Vault 中的机密。 可能存在限制。
Microsoft.KeyVault/vaults/secrets/purge/action 清除机密,使其不可恢复。
Microsoft.KeyVault/vaults/secrets/update/action 更新与给定机密关联的指定属性。
Microsoft.KeyVault/vaults/secrets/recover/action 恢复已删除的机密。 该操作与 Delete 操作相反。 该操作在启用了软删除的保管库中适用,必须在保留间隔内发出。
Microsoft.KeyVault/vaults/secrets/restore/action 从 Key Vault 所生成的备份文件还原机密及其所有版本。
Microsoft.KeyVault/vaults/secrets/readMetadata/action 列出或查看机密的属性,但不列出或查看机密的值。
Microsoft.KeyVault/vaults/secrets/getSecret/action 获取机密的值。
Microsoft.KeyVault/vaults/secrets/setSecret/action 设置机密的值。 如果机密不存在,则创建第一个版本。 否则,将使用指定的值创建一个新版本。
Microsoft.KeyVault/vaults/storageaccounts/read 读取托管存储帐户的定义。
Microsoft.KeyVault/vaults/storageaccounts/set/action 创建或更新托管存储帐户的定义。
Microsoft.KeyVault/vaults/storageaccounts/delete 删除托管存储帐户的定义。
Microsoft.KeyVault/vaults/storageaccounts/backup/action 创建托管存储帐户及其 SAS(共享访问签名)的定义的备份文件。
Microsoft.KeyVault/vaults/storageaccounts/purge/action 清除托管存储帐户或 SAS(共享访问签名)的软删除定义。
Microsoft.KeyVault/vaults/storageaccounts/regeneratekey/action 重新生成托管存储帐户的访问密钥。
Microsoft.KeyVault/vaults/storageaccounts/recover/action 恢复托管存储帐户或 SAS(共享访问签名)的软删除定义。
Microsoft.KeyVault/vaults/storageaccounts/restore/action 从 Key Vault 所生成的备份文件还原托管存储帐户及其 SAS(共享访问签名)的定义。
Microsoft.KeyVault/vaults/storageaccounts/sas/set/action 创建或更新托管存储帐户的 SAS(共享访问签名)定义。
Microsoft.KeyVault/vaults/storageaccounts/sas/delete 删除托管存储帐户的 SAS(共享访问签名)定义。
Microsoft.KeyVault/vaults/storageaccounts/sas/read 读取托管存储帐户的 SAS(共享访问签名)定义。

Microsoft.Security

保护企业免受混合云工作负荷中的高级威胁。

Azure 服务:安全中心

操作 说明
Microsoft.Security/register/action 注册 Azure 安全中心的订阅
Microsoft.Security/unregister/action 从 Azure 安全中心取消注册订阅
Microsoft.Security/aggregations/action 获取聚合
Microsoft.Security/adaptiveNetworkHardenings/read 获取受 Azure 保护的资源的自适应网络强化建议
Microsoft.Security/adaptiveNetworkHardenings/enforce/action 通过在给定网络安全组上创建匹配的安全规则,强制实施给定的流量强化规则
Microsoft.Security/advancedThreatProtectionSettings/read 获取资源的高级威胁防护设置
Microsoft.Security/advancedThreatProtectionSettings/write 更新资源的高级威胁防护设置
Microsoft.Security/aggregations/read 获取聚合
Microsoft.Security/alerts/read 获取所有可用的安全警报
Microsoft.Security/alertsSuppressionRules/read 获取所有可用的安全警报抑制规则
Microsoft.Security/alertsSuppressionRules/write 创建新的安全警报抑制规则或更新现有规则
Microsoft.Security/alertsSuppressionRules/delete 删除安全警报抑制规则
Microsoft.Security/apiCollections/read 获取 API 集合
Microsoft.Security/apiCollections/write 创建 API 集合
Microsoft.Security/apiCollections/delete 删除 API 集合
Microsoft.Security/applicationWhitelistings/read 获取应用程序允许列表
Microsoft.Security/applicationWhitelistings/write 创建新的或更新现有的应用程序允许列表
Microsoft.Security/assessmentMetadata/read 获取订阅中的可用安全评估元数据
Microsoft.Security/assessmentMetadata/write 创建或更新安全评估元数据
Microsoft.Security/assessments/read 获取订阅的安全评估
Microsoft.Security/assessments/write 创建或更新订阅的安全评估
Microsoft.Security/assessments/governanceAssignments/read 获取用于安全评估的治理分配
Microsoft.Security/assessments/governanceAssignments/write 创建或更新用于安全评估的治理分配
Microsoft.Security/assessments/subAssessments/read 获取订阅的安全子评估
Microsoft.Security/assessments/subAssessments/write 在订阅上创建或更新安全子评估
Microsoft.Security/assignments/read 获取安全分配
Microsoft.Security/assignments/write 创建或更新安全分配
Microsoft.Security/assignments/delete 删除安全分配
Microsoft.Security/automations/read 获取范围的自动化
Microsoft.Security/automations/write 创建或更新范围的自动化
Microsoft.Security/automations/delete 删除范围的自动化
Microsoft.Security/automations/validate/action 验证范围的自动化模型
Microsoft.Security/autoProvisioningSettings/read 获取订阅的安全自动预配设置
Microsoft.Security/autoProvisioningSettings/write 创建或更新订阅的安全自动预配设置
Microsoft.Security/complianceResults/read 获取资源的符合性结果
Microsoft.Security/customRecommendations/read 获取自定义建议
Microsoft.Security/customRecommendations/write 创建或更新自定义建议
Microsoft.Security/customRecommendations/delete 删除自定义建议
Microsoft.Security/datascanners/read 获取范围的 datascanners
Microsoft.Security/datascanners/write 为范围创建或更新 datascanners
Microsoft.Security/datascanners/delete 删除范围的 datascanners
Microsoft.Security/defenderforstoragesettings/read 获取范围的 defenderforstoragesettings
Microsoft.Security/defenderforstoragesettings/write 创建或更新范围的 defenderforstoragesettings
Microsoft.Security/defenderforstoragesettings/delete 删除范围的 defenderforstoragesettings
Microsoft.Security/deviceSecurityGroups/write 创建或更新 IoT 设备安全组
Microsoft.Security/deviceSecurityGroups/delete 删除 IoT 设备安全组
Microsoft.Security/deviceSecurityGroups/read 获取 IoT 设备安全组
Microsoft.Security/externalSecuritySolutions/read 获取外部安全解决方案
Microsoft.Security/governanceRules/read 获取用于管理安全态势的治理规则
Microsoft.Security/governanceRules/write 创建或更新用于管理安全态势的治理规则
Microsoft.Security/informationProtectionPolicies/read 获取资源的信息保护策略
Microsoft.Security/informationProtectionPolicies/write 更新资源的信息保护策略
Microsoft.Security/integration/read 获取范围上的集成
Microsoft.Security/integration/write 创建或更新范围上的集成
Microsoft.Security/integration/delete 委派或更新范围上的集成
Microsoft.Security/iotDefenderSettings/read 获取 IoT Defender 设置
Microsoft.Security/iotDefenderSettings/write 创建或更新 IoT Defender 设置
Microsoft.Security/iotDefenderSettings/delete 删除 IoT Defender 设置
Microsoft.Security/iotDefenderSettings/PackageDownloads/action 获取可下载的 IoT Defender 包信息
Microsoft.Security/iotDefenderSettings/DownloadManagerActivation/action 下载包含订阅配额数据的管理器激活文件
Microsoft.Security/iotSecuritySolutions/write 创建或更新 IoT 安全解决方案
Microsoft.Security/iotSecuritySolutions/delete 删除 IoT 安全解决方案
Microsoft.Security/iotSecuritySolutions/read 获取 IoT 安全解决方案
Microsoft.Security/iotSecuritySolutions/analyticsModels/read 获取 IoT 安全分析模型
Microsoft.Security/iotSecuritySolutions/analyticsModels/read 获取 IoT 警报类型
Microsoft.Security/iotSecuritySolutions/analyticsModels/read 获取 IoT 警报
Microsoft.Security/iotSecuritySolutions/analyticsModels/read 获取 IoT 建议类型
Microsoft.Security/iotSecuritySolutions/analyticsModels/read 获取 IoT 建议
Microsoft.Security/iotSecuritySolutions/analyticsModels/read 获取设备
Microsoft.Security/iotSecuritySolutions/analyticsModels/aggregatedAlerts/read 获取 IoT 聚合警报
Microsoft.Security/iotSecuritySolutions/analyticsModels/aggregatedAlerts/dismiss/action 关闭 IoT 聚合警报
Microsoft.Security/iotSecuritySolutions/analyticsModels/aggregatedRecommendations/read 获取 IoT 聚合建议
Microsoft.Security/iotSensors/read 获取 IoT 传感器
Microsoft.Security/iotSensors/write 创建或更新 IoT 传感器
Microsoft.Security/iotSensors/delete 删除 IoT 传感器
Microsoft.Security/iotSensors/DownloadActivation/action 下载 IoT 传感器的激活文件
Microsoft.Security/iotSensors/TriggerTiPackageUpdate/action 触发威胁情报包更新
Microsoft.Security/iotSensors/DownloadResetPassword/action 下载 IoT 传感器的重置密码文件
Microsoft.Security/iotSite/read 获取 IoT 站点
Microsoft.Security/iotSite/write 创建或更新 IoT 站点
Microsoft.Security/iotSite/delete 删除 IoT 站点
Microsoft.Security/jitNetworkAccessPolicies/read 获取实时网络访问策略
Microsoft.Security/locations/read 获取安全数据位置
Microsoft.Security/locations/alerts/read 获取所有可用的安全警报
Microsoft.Security/locations/alerts/dismiss/action 消除安全警报
Microsoft.Security/locations/alerts/activate/action 激活安全警报
Microsoft.Security/locations/alerts/resolve/action 解决安全警报
Microsoft.Security/locations/alerts/simulate/action 模拟安全警报
Microsoft.Security/locations/externalSecuritySolutions/read 获取外部安全解决方案
Microsoft.Security/locations/jitNetworkAccessPolicies/read 获取实时网络访问策略
Microsoft.Security/locations/jitNetworkAccessPolicies/write 创建新的或更新现有的实时网络访问策略
Microsoft.Security/locations/jitNetworkAccessPolicies/delete 删除适时网络访问策略
Microsoft.Security/locations/jitNetworkAccessPolicies/initiate/action 启动适时网络访问策略请求
Microsoft.Security/locations/securitySolutions/read 获取安全解决方案
Microsoft.Security/locations/securitySolutions/write 创建新的或更新现有的安全解决方案
Microsoft.Security/locations/securitySolutions/delete 删除安全解决方案
Microsoft.Security/locations/tasks/read 获取所有可用的安全建议
Microsoft.Security/locations/tasks/start/action 启用安全建议
Microsoft.Security/locations/tasks/resolve/action 解决安全建议
Microsoft.Security/locations/tasks/activate/action 激活安全建议
Microsoft.Security/locations/tasks/dismiss/action 关闭安全建议
Microsoft.Security/mdeOnboardings/read 获取 Microsoft Defender for Endpoint 加入脚本
Microsoft.Security/policies/read 获取安全策略
Microsoft.Security/policies/write 更新安全策略
Microsoft.Security/pricings/read 获取某一范围的定价设置
Microsoft.Security/pricings/write 更新某一范围的定价设置
Microsoft.Security/pricings/delete 删除某一范围的定价设置
Microsoft.Security/pricings/securityoperators/read 获取范围的安全操作员
Microsoft.Security/pricings/securityoperators/write 更新范围的安全操作员
Microsoft.Security/pricings/securityoperators/delete 删除范围的安全操作员
Microsoft.Security/secureScoreControlDefinitions/read 获取安全评分控制定义
Microsoft.Security/secureScoreControls/read 获取订阅的计算所得安全评分控制
Microsoft.Security/secureScores/read 获取订阅的计算所得安全评分
Microsoft.Security/secureScores/secureScoreControls/read 获取安全评分计算的计算所得安全评分控制
Microsoft.Security/securityConnectors/read 获取安全连接器
Microsoft.Security/securityConnectors/write 更新安全连接器
Microsoft.Security/securityConnectors/delete 删除安全连接器
Microsoft.Security/securityConnectors/devops/listAvailableAzureDevOpsOrgs/action 返回连接器使用的用户令牌可访问的所有 Azure DevOps 组织的列表。
Microsoft.Security/securityConnectors/devops/write 创建或更新 DevOps 配置。
Microsoft.Security/securityConnectors/devops/delete 删除 DevOps 连接器。
Microsoft.Security/securityConnectors/devops/read 获取 DevOps 配置。
Microsoft.Security/securityConnectors/devops/read 列出 DevOps 配置。
Microsoft.Security/securityConnectors/devops/write 更新 DevOps 配置。
Microsoft.Security/securityConnectors/devops/listAvailableGitHubOwners/action 返回连接器使用的用户令牌可访问的所有 GitHub 所有者的列表。
Microsoft.Security/securityConnectors/devops/listAvailableGitLabGroups/action 返回连接器使用的用户令牌可访问的所有 GitLab 组的列表。
Microsoft.Security/securityConnectors/devops/azureDevOpsOrgs/write 创建或更新受监视的 Azure DevOps 组织的详细信息。
Microsoft.Security/securityConnectors/devops/azureDevOpsOrgs/delete 删除受监视的 Azure DevOps 组织。
Microsoft.Security/securityConnectors/devops/azureDevOpsOrgs/read 返回受监视的 Azure DevOps 组织资源。
Microsoft.Security/securityConnectors/devops/azureDevOpsOrgs/read 返回已加入连接器的 Azure DevOps 组织的列表。
Microsoft.Security/securityConnectors/devops/azureDevOpsOrgs/write 更新受监视的 Azure DevOps 组织的详细信息。
Microsoft.Security/securityConnectors/devops/azureDevOpsOrgs/listAvailableProjects/action 返回连接器使用的用户令牌可访问的所有 Azure DevOps 项目的列表。
Microsoft.Security/securityConnectors/devops/azureDevOpsOrgs/projects/write 创建或更新受监视的 Azure DevOps 项目资源。
Microsoft.Security/securityConnectors/devops/azureDevOpsOrgs/projects/delete 删除受监视的 Azure DevOps 项目资源。
Microsoft.Security/securityConnectors/devops/azureDevOpsOrgs/projects/read 返回受监视的 Azure DevOps 项目资源。
Microsoft.Security/securityConnectors/devops/azureDevOpsOrgs/projects/read 返回已加入连接器的 Azure DevOps 项目的列表。
Microsoft.Security/securityConnectors/devops/azureDevOpsOrgs/projects/write 更新受监视的 Azure DevOps 项目资源。
Microsoft.Security/securityConnectors/devops/azureDevOpsOrgs/projects/listAvailableRepos/action 返回连接器使用的用户令牌可访问的所有 Azure DevOps 存储库的列表。
Microsoft.Security/securityConnectors/devops/azureDevOpsOrgs/projects/repos/write 创建或更新受监视的 Azure DevOps 存储库资源。
Microsoft.Security/securityConnectors/devops/azureDevOpsOrgs/projects/repos/delete 删除受监视的 Azure DevOps 存储库资源。
Microsoft.Security/securityConnectors/devops/azureDevOpsOrgs/projects/repos/read 返回受监视的 Azure DevOps 存储库资源。
Microsoft.Security/securityConnectors/devops/azureDevOpsOrgs/projects/repos/read 返回已加入连接器的 Azure DevOps 存储库的列表。
Microsoft.Security/securityConnectors/devops/azureDevOpsOrgs/projects/repos/write 更新受监视的 Azure DevOps 存储库资源。
Microsoft.Security/securityConnectors/devops/gitHubOwners/write 创建或更新受监视的 GitHub 所有者。
Microsoft.Security/securityConnectors/devops/gitHubOwners/delete 删除受监视的 GitHub 所有者。
Microsoft.Security/securityConnectors/devops/gitHubOwners/read 返回受监视的 GitHub 所有者。
Microsoft.Security/securityConnectors/devops/gitHubOwners/read 返回已加入连接器的 GitHub 所有者的列表。
Microsoft.Security/securityConnectors/devops/gitHubOwners/write 更新受监视的 GitHub 所有者。
Microsoft.Security/securityConnectors/devops/gitHubOwners/listAvailableRepos/action 返回连接器使用的用户令牌和应用安装可访问的所有 GitHub 存储库的列表。
Microsoft.Security/securityConnectors/devops/gitHubOwners/repos/write 创建或更新受监视的 GitHub 存储库。
Microsoft.Security/securityConnectors/devops/gitHubOwners/repos/delete 删除受监视的 GitHub 存储库。
Microsoft.Security/securityConnectors/devops/gitHubOwners/repos/read 返回受监视的 GitHub 存储库。
Microsoft.Security/securityConnectors/devops/gitHubOwners/repos/read 返回已加入连接器的 GitHub 存储库的列表。
Microsoft.Security/securityConnectors/devops/gitHubOwners/repos/write 更新受监视的 GitHub 存储库。
Microsoft.Security/securityConnectors/devops/gitLabGroups/write 创建或更新受监视的 GitLab 组的详细信息。
Microsoft.Security/securityConnectors/devops/gitLabGroups/delete 删除受监视的 GitHub 组。
Microsoft.Security/securityConnectors/devops/gitLabGroups/read 为给定的完全限定名称返回受监视的 GitLab 组资源。
Microsoft.Security/securityConnectors/devops/gitLabGroups/read 返回已加入连接器的 GitLab 组的列表。
Microsoft.Security/securityConnectors/devops/gitLabGroups/write 更新受监视的 GitLab 组的详细信息。
Microsoft.Security/securityConnectors/devops/gitLabGroups/listAvailableProjects/action 获取由给定组直接拥有并可由连接器使用的用户令牌访问的所有 GitLab 项目的列表。
Microsoft.Security/securityConnectors/devops/gitLabGroups/listSubgroups/action 获取已加入连接器的给定 GitLab 组的嵌套子组。
Microsoft.Security/securityConnectors/devops/gitLabGroups/listAvailableSubgroups/action 获取给定 GitLab 组的所有嵌套子组,这些子组可由连接器使用的用户令牌访问。
Microsoft.Security/securityConnectors/devops/gitLabGroups/projects/write 创建或更新受监视的 GitLab 项目的详细信息。
Microsoft.Security/securityConnectors/devops/gitLabGroups/projects/delete 删除受监视的 GitHub 项目。
Microsoft.Security/securityConnectors/devops/gitLabGroups/projects/read 为给定的完全限定的组名称和项目名称返回受监视的 GitLab 项目资源。
Microsoft.Security/securityConnectors/devops/gitLabGroups/projects/read 获取由给定组直接拥有并加入连接器的 GitLab 项目的列表。
Microsoft.Security/securityConnectors/devops/gitLabGroups/projects/write 更新受监视的 GitLab 项目的详细信息。
Microsoft.Security/securityConnectors/devops/operationResults/read 获取 devops 长期运行操作结果。
Microsoft.Security/securityContacts/read 获取安全联系信息
Microsoft.Security/securityContacts/write 更新安全联系信息
Microsoft.Security/securityContacts/delete 删除安全联系信息
Microsoft.Security/securitySolutions/read 获取安全解决方案
Microsoft.Security/securitySolutions/write 创建新的或更新现有的安全解决方案
Microsoft.Security/securitySolutions/delete 删除安全解决方案
Microsoft.Security/securitySolutionsReferenceData/read 获取安全解决方案引用数据
Microsoft.Security/securityStandards/read 获取安全标准
Microsoft.Security/securityStandards/write 创建或更新安全标准
Microsoft.Security/securityStandards/delete 删除安全标准
Microsoft.Security/securityStatuses/read 获取 Azure 资源的安全运行状况
Microsoft.Security/securityStatusesSummaries/read 获取某一范围的安全状态摘要
Microsoft.Security/sensitivitySettings/read 获取租户级敏感度设置
Microsoft.Security/sensitivitySettings/write 更新租户级敏感度设置
Microsoft.Security/serverVulnerabilityAssessments/read 获取给定资源的服务器漏洞评估加入状态
Microsoft.Security/serverVulnerabilityAssessments/write 在资源上创建或更新服务器漏洞评估解决方案
Microsoft.Security/serverVulnerabilityAssessments/delete 从资源中删除服务器漏洞评估解决方案
Microsoft.Security/serverVulnerabilityAssessmentsSettings/read 获取给定订阅的服务器漏洞评估设置加入状态
Microsoft.Security/serverVulnerabilityAssessmentsSettings/write 创建或更新给定订阅的服务器漏洞评估设置
Microsoft.Security/serverVulnerabilityAssessmentsSettings/delete 移除给定订阅的服务器漏洞评估设置
Microsoft.Security/settings/read 获取范围的设置
Microsoft.Security/settings/write 更新范围的设置
Microsoft.Security/sqlVulnerabilityAssessments/baselineRules/action 将规则结果的列表添加到基线。
Microsoft.Security/sqlVulnerabilityAssessments/baselineRules/read 返回数据库的基线(已添加到基线的所有规则)或获取指定规则 ID 的规则基线结果。
Microsoft.Security/sqlVulnerabilityAssessments/baselineRules/write 更改规则基线结果。
Microsoft.Security/sqlVulnerabilityAssessments/baselineRules/delete 从基线中删除规则结果。
Microsoft.Security/sqlVulnerabilityAssessments/scans/read 返回漏洞评估扫描记录的列表,或获取指定扫描 ID 的扫描记录。
Microsoft.Security/sqlVulnerabilityAssessments/scans/scanResults/read 返回漏洞评估规则结果的列表,或获取指定规则 ID 的规则结果。
Microsoft.Security/standardAssignments/read 获取标准分配
Microsoft.Security/standardAssignments/write 创建或更新标准分配
Microsoft.Security/standardAssignments/delete 删除标准分配
Microsoft.Security/standards/read 获取安全标准
Microsoft.Security/standards/write 创建或更新安全标准
Microsoft.Security/standards/delete 删除安全标准
Microsoft.Security/tasks/read 获取所有可用的安全建议
Microsoft.Security/webApplicationFirewalls/read 获取 Web 应用程序防火墙
Microsoft.Security/webApplicationFirewalls/write 创建新的或更新现有的 Web 应用程序防火墙
Microsoft.Security/webApplicationFirewalls/delete 删除 Web 应用程序防火墙
Microsoft.Security/workspaceSettings/read 获取工作区设置
Microsoft.Security/workspaceSettings/write 更新工作区设置
Microsoft.Security/workspaceSettings/delete 删除工作区设置
Microsoft.Security/workspaceSettings/connect/action 更改工作区设置重新连接设置

Microsoft.SecurityGraph

Azure 服务:Microsoft Monitoring Insights

操作 说明
Microsoft.SecurityGraph/diagnosticsettings/write 写入诊断设置
Microsoft.SecurityGraph/diagnosticsettings/read 读取诊断设置
Microsoft.SecurityGraph/diagnosticsettings/delete 删除诊断设置
Microsoft.SecurityGraph/diagnosticsettingscategories/read 读取诊断设置类别

Microsoft.SecurityInsights

Azure 服务:Microsoft Sentinel

操作 说明
Microsoft.SecurityInsights/register/action 将订阅注册到 Azure Sentinel
Microsoft.SecurityInsights/unregister/action 从 Azure Sentinel 取消注册订阅
Microsoft.SecurityInsights/dataConnectorsCheckRequirements/action 检查用户授权和许可证
Microsoft.SecurityInsights/contentTranslators/action 检查翻译内容
Microsoft.SecurityInsights/Aggregations/read 获取聚合信息
Microsoft.SecurityInsights/alertRules/read 获取警报规则
Microsoft.SecurityInsights/alertRules/write 更新警报规则
Microsoft.SecurityInsights/alertRules/delete 删除警报规则
Microsoft.SecurityInsights/alertRules/triggerRuleRun/action 触发按需规则运行执行
Microsoft.SecurityInsights/alertRules/actions/read 获取警报规则的响应操作
Microsoft.SecurityInsights/alertRules/actions/write 更新警报规则的响应操作
Microsoft.SecurityInsights/alertRules/actions/delete 删除警报规则的响应操作
Microsoft.SecurityInsights/automationRules/read 获取自动化规则
Microsoft.SecurityInsights/automationRules/write 更新自动化规则
Microsoft.SecurityInsights/automationRules/delete 删除自动化规则
Microsoft.SecurityInsights/BillingStatistics/read 读取 BillingStatistics
Microsoft.SecurityInsights/Bookmarks/read 获取书签
Microsoft.SecurityInsights/Bookmarks/write 更新书签
Microsoft.SecurityInsights/Bookmarks/delete 删除书签
Microsoft.SecurityInsights/Bookmarks/expand/action 按特定的扩展获取实体的相关实体
Microsoft.SecurityInsights/bookmarks/relations/read 获取书签关系
Microsoft.SecurityInsights/bookmarks/relations/write 更新书签关系
Microsoft.SecurityInsights/bookmarks/relations/delete 删除书签关系
Microsoft.SecurityInsights/businessApplicationAgents/read 获取商业应用程序代理
Microsoft.SecurityInsights/businessApplicationAgents/write 创建或更新商业应用程序代理
Microsoft.SecurityInsights/businessApplicationAgents/delete 删除商业应用程序代理
Microsoft.SecurityInsights/businessApplicationAgents/systems/read 获取商业应用程序代理的系统
Microsoft.SecurityInsights/businessApplicationAgents/systems/write 创建或更新商业应用程序代理的系统
Microsoft.SecurityInsights/businessApplicationAgents/systems/delete 删除商业应用程序代理的系统
Microsoft.SecurityInsights/businessApplicationAgents/systems/listActions/action 列出系统的操作
Microsoft.SecurityInsights/businessApplicationAgents/systems/reportActionStatus/action 报告操作的状态
Microsoft.SecurityInsights/businessApplicationAgents/systems/undoAction/action 撤消操作
Microsoft.SecurityInsights/cases/read 获取案例
Microsoft.SecurityInsights/cases/write 更新案例
Microsoft.SecurityInsights/cases/delete 删除案例
Microsoft.SecurityInsights/cases/comments/read 获取案例注释
Microsoft.SecurityInsights/cases/comments/write 创建案例注释
Microsoft.SecurityInsights/cases/investigations/read 获取案例调查
Microsoft.SecurityInsights/cases/investigations/write 更新案例的元数据
Microsoft.SecurityInsights/ConfidentialWatchlists/read 获取机密监视列表
Microsoft.SecurityInsights/ConfidentialWatchlists/write 创建机密监视列表
Microsoft.SecurityInsights/ConfidentialWatchlists/delete 删除机密监视列表
Microsoft.SecurityInsights/ContentPackages/read 读取可用的内容包。
Microsoft.SecurityInsights/ContentPackages/write 安装或卸载内容包。
Microsoft.SecurityInsights/ContentTemplates/read 读取已安装的内容模板。
Microsoft.SecurityInsights/ContentTemplates/delete 删除已安装的内容模板。
Microsoft.SecurityInsights/dataConnectors/read 获取数据连接器
Microsoft.SecurityInsights/dataConnectors/write 更新数据连接器
Microsoft.SecurityInsights/dataConnectors/delete 删除数据连接器
Microsoft.SecurityInsights/enrichment/domain/whois/read 获取域的 whois 扩充
Microsoft.SecurityInsights/enrichment/ip/geodata/read 获取 IP 的 geodata 扩充
Microsoft.SecurityInsights/entities/read 获取 Sentinel 实体关系图
Microsoft.SecurityInsights/entities/gettimeline/action 获取特定范围的实体时间线
Microsoft.SecurityInsights/entities/getInsights/action 获取特定范围的实体见解
Microsoft.SecurityInsights/entities/runPlaybook/action 在实体上运行剧本
Microsoft.SecurityInsights/entities/relations/read 获取实体与相关资源之间的关系
Microsoft.SecurityInsights/entities/relations/write 更新实体与相关资源之间的关系
Microsoft.SecurityInsights/entities/relations/delete 删除实体与相关资源之间的关系
Microsoft.SecurityInsights/entityQueries/read 获取实体的调查扩展
Microsoft.SecurityInsights/ExportConnections/read 读取 ExportConnections
Microsoft.SecurityInsights/ExportConnections/write 写入 ExportConnections
Microsoft.SecurityInsights/ExportConnections/delete 删除 ExportConnections
Microsoft.SecurityInsights/ExportConnections/ExportJobs/read 读取 ExportJobs
Microsoft.SecurityInsights/ExportConnections/ExportJobs/write 写入 ExportJobs
Microsoft.SecurityInsights/ExportConnections/ExportJobs/delete 删除 ExportJobs
Microsoft.SecurityInsights/fileimports/read 读取文件导入对象
Microsoft.SecurityInsights/fileimports/write 创建或更新文件导入
Microsoft.SecurityInsights/fileimports/delete 删除文件导入
Microsoft.SecurityInsights/hunts/read 获取搜寻
Microsoft.SecurityInsights/hunts/write 创建搜寻
Microsoft.SecurityInsights/hunts/delete 删除搜寻
Microsoft.SecurityInsights/hunts/comments/read 获取搜寻注释
Microsoft.SecurityInsights/hunts/comments/write 创建搜寻注释
Microsoft.SecurityInsights/hunts/comments/delete 删除搜寻注释
Microsoft.SecurityInsights/hunts/relations/read 获取搜寻关系
Microsoft.SecurityInsights/hunts/relations/write 创建搜寻关系
Microsoft.SecurityInsights/hunts/relations/delete 删除搜寻关系
Microsoft.SecurityInsights/incidents/read 获取事件
Microsoft.SecurityInsights/incidents/write 更新事件
Microsoft.SecurityInsights/incidents/delete 删除事件
Microsoft.SecurityInsights/incidents/createTeam/action 创建一个 Microsoft 团队,通过在参与者之间共享信息和见解来调查事件
Microsoft.SecurityInsights/incidents/runPlaybook/action 运行事件 playbook
Microsoft.SecurityInsights/incidents/comments/read 获取事件注释
Microsoft.SecurityInsights/incidents/comments/write 创建有关事件的注释
Microsoft.SecurityInsights/incidents/comments/delete 删除有关事件的注释
Microsoft.SecurityInsights/incidents/relations/read 获取事件与相关资源之间的关系
Microsoft.SecurityInsights/incidents/relations/write 更新事件与相关资源之间的关系
Microsoft.SecurityInsights/incidents/relations/delete 删除事件与相关资源之间的关系
Microsoft.SecurityInsights/incidents/tasks/read 获取事件的任务
Microsoft.SecurityInsights/incidents/tasks/write 更新事件的任务
Microsoft.SecurityInsights/incidents/tasks/delete 删除事件的任务
Microsoft.SecurityInsights/Metadata/read 读取 Sentinel 内容的元数据。
Microsoft.SecurityInsights/Metadata/write 写入 Sentinel 内容的元数据。
Microsoft.SecurityInsights/Metadata/delete 删除 Sentinel 内容的元数据。
Microsoft.SecurityInsights/officeConsents/read 获取 Microsoft Office 的同意
Microsoft.SecurityInsights/officeConsents/delete 删除 Microsoft Office 的同意
Microsoft.SecurityInsights/onboardingStates/read 获取加入状态
Microsoft.SecurityInsights/onboardingStates/write 更新加入状态
Microsoft.SecurityInsights/onboardingStates/delete 删除加入状态
Microsoft.SecurityInsights/operations/read Get 操作
Microsoft.SecurityInsights/securityMLAnalyticsSettings/read 获取分析设置
Microsoft.SecurityInsights/securityMLAnalyticsSettings/write 更新分析设置
Microsoft.SecurityInsights/securityMLAnalyticsSettings/delete 删除分析设置
Microsoft.SecurityInsights/settings/read 获取设置
Microsoft.SecurityInsights/settings/write 更新设置
Microsoft.SecurityInsights/settings/delete 删除设置
Microsoft.SecurityInsights/SourceControls/read 读取 SourceControls
Microsoft.SecurityInsights/SourceControls/write 写入 SourceControls
Microsoft.SecurityInsights/SourceControls/delete 删除 SourceControls
Microsoft.SecurityInsights/threatintelligence/read 获取威胁情报
Microsoft.SecurityInsights/threatintelligence/write 更新威胁情报
Microsoft.SecurityInsights/threatintelligence/delete 删除威胁情报
Microsoft.SecurityInsights/threatintelligence/query/action 查询威胁情报
Microsoft.SecurityInsights/threatintelligence/metrics/action 收集威胁情报指标
Microsoft.SecurityInsights/threatintelligence/bulkDelete/action 批量删除威胁情报
Microsoft.SecurityInsights/threatintelligence/bulkTag/action 批量标记威胁情报
Microsoft.SecurityInsights/threatintelligence/createIndicator/action 创建威胁情报指示器
Microsoft.SecurityInsights/threatintelligence/queryIndicators/action 查询威胁情报指示器
Microsoft.SecurityInsights/threatintelligence/bulkactions/read 读取 TI 批量操作对象
Microsoft.SecurityInsights/threatintelligence/bulkactions/write 创建或更新 TI 批量操作
Microsoft.SecurityInsights/threatintelligence/bulkactions/delete 删除 TI 批量操作
Microsoft.SecurityInsights/threatintelligence/bulkactions/query/action 查询威胁情报 STIX 对象
Microsoft.SecurityInsights/threatintelligence/bulkactions/count/action 查询威胁情报 STIX 对象计数
Microsoft.SecurityInsights/threatintelligence/indicators/write 更新威胁情报指示器
Microsoft.SecurityInsights/threatintelligence/indicators/delete 删除威胁情报指示器
Microsoft.SecurityInsights/threatintelligence/indicators/query/action 查询威胁情报指示器
Microsoft.SecurityInsights/threatintelligence/indicators/metrics/action 获取威胁情报指示器指标
Microsoft.SecurityInsights/threatintelligence/indicators/bulkDelete/action 批量删除威胁情报指示器
Microsoft.SecurityInsights/threatintelligence/indicators/bulkTag/action 批量标记威胁情报指示器
Microsoft.SecurityInsights/threatintelligence/indicators/read 获取威胁情报指示器
Microsoft.SecurityInsights/threatintelligence/indicators/appendTags/action 将标记追加到威胁情报指示器
Microsoft.SecurityInsights/threatintelligence/indicators/replaceTags/action 替换威胁情报指示器的标记
Microsoft.SecurityInsights/threatintelligence/ingestionrulelist/read 读取 TI 引入规则对象集
Microsoft.SecurityInsights/threatintelligence/ingestionrulelist/write 创建或更新 TI 引入规则集
Microsoft.SecurityInsights/threatintelligence/metrics/read 收集威胁情报指标
Microsoft.SecurityInsights/threatintelligence/threatactors/read 读取 TI 威胁行动者对象
Microsoft.SecurityInsights/threatintelligence/threatactors/write 创建或更新 TI 威胁行动者
Microsoft.SecurityInsights/threatintelligence/threatactors/delete 删除 TI 威胁行动者
Microsoft.SecurityInsights/triggeredAnalyticsRuleRuns/read 获取触发的分析规则运行
Microsoft.SecurityInsights/Watchlists/read 获取播放列表
Microsoft.SecurityInsights/Watchlists/write 创建播放列表
Microsoft.SecurityInsights/Watchlists/delete 删除播放列表
Microsoft.SecurityInsights/WorkspaceManagerAssignments/read 获取 WorkspaceManager 分配
Microsoft.SecurityInsights/WorkspaceManagerAssignments/write 创建 WorkspaceManager 分配
Microsoft.SecurityInsights/WorkspaceManagerAssignments/delete 删除 WorkspaceManager 分配
Microsoft.SecurityInsights/workspaceManagerAssignments/jobs/read 获取 WorkspaceManagerAssignments 作业
Microsoft.SecurityInsights/workspaceManagerAssignments/jobs/write 创建 WorkspaceManagerAssignments 作业
Microsoft.SecurityInsights/workspaceManagerAssignments/jobs/delete 删除 WorkspaceManagerAssignments 作业
Microsoft.SecurityInsights/WorkspaceManagerConfigurations/read 获取 WorkspaceManager 配置
Microsoft.SecurityInsights/WorkspaceManagerConfigurations/write 创建 WorkspaceManager 配置
Microsoft.SecurityInsights/WorkspaceManagerConfigurations/delete 删除 WorkspaceManager 配置
Microsoft.SecurityInsights/WorkspaceManagerGroups/read 获取 WorkspaceManager 组
Microsoft.SecurityInsights/WorkspaceManagerGroups/write 创建 WorkspaceManager 组
Microsoft.SecurityInsights/WorkspaceManagerGroups/delete 删除 WorkspaceManager 组
Microsoft.SecurityInsights/WorkspaceManagerMembers/read 获取 WorkspaceManager 成员
Microsoft.SecurityInsights/WorkspaceManagerMembers/write 创建 WorkspaceManager 成员
Microsoft.SecurityInsights/WorkspaceManagerMembers/delete 删除 WorkspaceManager 成员

后续步骤