Inbyggda Azure-roller för AI + maskininlärning

Artikel
04/25/2024

I den här artikeln visas de inbyggda Azure-rollerna i kategorin AI + maskininlärning.

AzureML-beräkningsoperator

Kan komma åt och utföra CRUD-åtgärder på hanterade beräkningsresurser för Machine Learning Services (inklusive virtuella notebook-datorer).

Läs mer

Åtgärder	beskrivning
Microsoft.MachineLearningServices/workspaces/computes/*
Microsoft.MachineLearningServices/workspaces/notebooks/vm/*
NotActions
ingen
DataActions
ingen
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Can access and perform CRUD operations on Machine Learning Services managed compute resources (including Notebook VMs).",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/e503ece1-11d0-4e8e-8e2c-7a6c3bf38815",
  "name": "e503ece1-11d0-4e8e-8e2c-7a6c3bf38815",
  "permissions": [
    {
      "actions": [
        "Microsoft.MachineLearningServices/workspaces/computes/*",
        "Microsoft.MachineLearningServices/workspaces/notebooks/vm/*"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "AzureML Compute Operator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

AzureML-dataforskare

Kan utföra alla åtgärder på en Azure Machine Learning-arbetsyta, förutom att skapa eller ta bort beräkningsresurser och ändra själva arbetsytan.

Läs mer

Åtgärder	beskrivning
Microsoft.MachineLearningServices/workspaces/*/read
Microsoft.MachineLearningServices/workspaces/*/action
Microsoft.MachineLearningServices/workspaces/*/delete
Microsoft.MachineLearningServices/workspaces/*/write
NotActions
Microsoft.MachineLearningServices/workspaces/delete	Tar bort Machine Learning Services-arbetsytor
Microsoft.MachineLearningServices/workspaces/write	Skapar eller uppdaterar en Machine Learning Services-arbetsyta
Microsoft.MachineLearningServices/workspaces/computes/*/write
Microsoft.MachineLearningServices/workspaces/computes/*/delete
Microsoft.MachineLearningServices/workspaces/computes/listKeys/action	Lista hemligheter för beräkningsresurser i Machine Learning Services-arbetsytan
Microsoft.MachineLearningServices/workspaces/listKeys/action	Lista hemligheter för en Machine Learning Services-arbetsyta
Microsoft.MachineLearningServices/workspaces/hubs/write	Skapar eller uppdaterar en Machine Learning Services Hub-arbetsyta
Microsoft.MachineLearningServices/workspaces/hubs/delete	Tar bort Machine Learning Services Hub-arbetsytor
Microsoft.MachineLearningServices/workspaces/featurestores/write	Skapar eller Uppdateringar Machine Learning Services FeatureStore(er)
Microsoft.MachineLearningServices/workspaces/featurestores/delete	Tar bort Machine Learning Services FeatureStore(er)
DataActions
ingen
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Can perform all actions within an Azure Machine Learning workspace, except for creating or deleting compute resources and modifying the workspace itself.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/f6c7c914-8db3-469d-8ca1-694a8f32e121",
  "name": "f6c7c914-8db3-469d-8ca1-694a8f32e121",
  "permissions": [
    {
      "actions": [
        "Microsoft.MachineLearningServices/workspaces/*/read",
        "Microsoft.MachineLearningServices/workspaces/*/action",
        "Microsoft.MachineLearningServices/workspaces/*/delete",
        "Microsoft.MachineLearningServices/workspaces/*/write"
      ],
      "notActions": [
        "Microsoft.MachineLearningServices/workspaces/delete",
        "Microsoft.MachineLearningServices/workspaces/write",
        "Microsoft.MachineLearningServices/workspaces/computes/*/write",
        "Microsoft.MachineLearningServices/workspaces/computes/*/delete",
        "Microsoft.MachineLearningServices/workspaces/computes/listKeys/action",
        "Microsoft.MachineLearningServices/workspaces/listKeys/action",
        "Microsoft.MachineLearningServices/workspaces/hubs/write",
        "Microsoft.MachineLearningServices/workspaces/hubs/delete",
        "Microsoft.MachineLearningServices/workspaces/featurestores/write",
        "Microsoft.MachineLearningServices/workspaces/featurestores/delete"
      ],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "AzureML Data Scientist",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services-deltagare

Gör att du kan skapa, läsa, uppdatera, ta bort och hantera nycklar för Cognitive Services.

Läs mer

Åtgärder	beskrivning
Microsoft.Authorization/*/read	Läsa roller och rolltilldelningar
Microsoft.CognitiveServices/*
Microsoft.Features/features/read	Hämtar funktionerna i en prenumeration.
Microsoft.Features/providers/features/read	Hämtar funktionen för en prenumeration i en viss resursprovider.
Microsoft.Features/providers/features/register/action	Registrerar funktionen för en prenumeration i en viss resursprovider.
Microsoft.Insights/alertRules/*	Skapa och hantera en klassisk måttavisering
Microsoft.Insights/diagnostic Inställningar/*	Skapar, uppdaterar eller läser diagnostikinställningen för Analysis Server
Microsoft.Insights/logDefinitions/read	Läsa loggdefinitioner
Microsoft.Insights/metricdefinitions/read	Läsa måttdefinitioner
Microsoft.Insights/metrics/read	Läsa mått
Microsoft.ResourceHealth/availabilityStatuses/read	Hämtar tillgänglighetsstatusar för alla resurser i det angivna omfånget
Microsoft.Resources/deployments/*	Skapa och hantera en distribution
Microsoft.Resources/deployments/operations/read	Hämtar eller listar distributionsåtgärder.
Microsoft.Resources/subscriptions/operationresults/read	Hämta resultatet av prenumerationsåtgärden.
Microsoft.Resources/subscriptions/read	Hämtar listan över prenumerationer.
Microsoft.Resources/subscriptions/resourcegroups/deployments/*
Microsoft.Resources/subscriptions/resourceGroups/read	Hämtar eller listar resursgrupper.
Microsoft.Support/*	Skapa och uppdatera ett supportärende
NotActions
ingen
DataActions
ingen
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you create, read, update, delete and manage keys of Cognitive Services.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68",
  "name": "25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.CognitiveServices/*",
        "Microsoft.Features/features/read",
        "Microsoft.Features/providers/features/read",
        "Microsoft.Features/providers/features/register/action",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.Insights/diagnosticSettings/*",
        "Microsoft.Insights/logDefinitions/read",
        "Microsoft.Insights/metricdefinitions/read",
        "Microsoft.Insights/metrics/read",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/deployments/operations/read",
        "Microsoft.Resources/subscriptions/operationresults/read",
        "Microsoft.Resources/subscriptions/read",
        "Microsoft.Resources/subscriptions/resourcegroups/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Support/*"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services Custom Vision-deltagare

Fullständig åtkomst till projektet, inklusive möjligheten att visa, skapa, redigera eller ta bort projekt.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/CustomVision/*
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Full access to the project, including the ability to view, create, edit, or delete projects.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/c1ff6cc2-c111-46fe-8896-e0ef812ad9f3",
  "name": "c1ff6cc2-c111-46fe-8896-e0ef812ad9f3",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/CustomVision/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services Custom Vision Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Distribution av Custom Vision för Cognitive Services

Publicera, avpublicera eller exportera modeller. Distributionen kan visa projektet men kan inte uppdateras.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/CustomVision/*/read
Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/*
Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/publish/*
Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/export/*
Microsoft.CognitiveServices/accounts/CustomVision/projects/quicktest/*
Microsoft.CognitiveServices/accounts/CustomVision/classify/*
Microsoft.CognitiveServices/accounts/CustomVision/detect/*
NotDataActions
Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read	Exporterar ett projekt.

{
  "assignableScopes": [
    "/"
  ],
  "description": "Publish, unpublish or export models. Deployment can view the project but can't update.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/5c4089e1-6d96-4d2f-b296-c1bc7137275f",
  "name": "5c4089e1-6d96-4d2f-b296-c1bc7137275f",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/CustomVision/*/read",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/*",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/publish/*",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/export/*",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/quicktest/*",
        "Microsoft.CognitiveServices/accounts/CustomVision/classify/*",
        "Microsoft.CognitiveServices/accounts/CustomVision/detect/*"
      ],
      "notDataActions": [
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read"
      ]
    }
  ],
  "roleName": "Cognitive Services Custom Vision Deployment",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services Custom Vision Labeler

Visa, redigera träningsbilder och skapa, lägga till, ta bort eller ta bort bildtaggar. Etiketter kan visa projektet men kan inte uppdatera något annat än träningsbilder och taggar.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/CustomVision/*/read
Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action	Hämta bilder som skickades till förutsägelseslutpunkten.
Microsoft.CognitiveServices/accounts/CustomVision/projects/images/*
Microsoft.CognitiveServices/accounts/CustomVision/projects/tags/*
Microsoft.CognitiveServices/accounts/CustomVision/projects/images/suggested/*
Microsoft.CognitiveServices/accounts/CustomVision/projects/tagsandregions/suggestions/action	Det här API:et hämtar föreslagna taggar och regioner för en matris/batch med otaggade bilder tillsammans med förtroenden för taggarna. Den returnerar en tom matris om inga taggar hittas.
NotDataActions
Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read	Exporterar ett projekt.

{
  "assignableScopes": [
    "/"
  ],
  "description": "View, edit training images and create, add, remove, or delete the image tags. Labelers can view the project but can't update anything other than training images and tags.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/88424f51-ebe7-446f-bc41-7fa16989e96c",
  "name": "88424f51-ebe7-446f-bc41-7fa16989e96c",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/CustomVision/*/read",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/images/*",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/tags/*",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/images/suggested/*",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/tagsandregions/suggestions/action"
      ],
      "notDataActions": [
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read"
      ]
    }
  ],
  "roleName": "Cognitive Services Custom Vision Labeler",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services Custom Vision Reader

Skrivskyddade åtgärder i projektet. Läsare kan inte skapa eller uppdatera projektet.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/CustomVision/*/read
Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action	Hämta bilder som skickades till förutsägelseslutpunkten.
NotDataActions
Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read	Exporterar ett projekt.

{
  "assignableScopes": [
    "/"
  ],
  "description": "Read-only actions in the project. Readers can't create or update the project.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/93586559-c37d-4a6b-ba08-b9f0940c2d73",
  "name": "93586559-c37d-4a6b-ba08-b9f0940c2d73",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/CustomVision/*/read",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action"
      ],
      "notDataActions": [
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read"
      ]
    }
  ],
  "roleName": "Cognitive Services Custom Vision Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services Custom Vision Trainer

Visa, redigera projekt och träna modellerna, inklusive möjligheten att publicera, avpublicera, exportera modellerna. Utbildare kan inte skapa eller ta bort projektet.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/CustomVision/*
NotDataActions
Microsoft.CognitiveServices/accounts/CustomVision/projects/action	Skapa ett projekt.
Microsoft.CognitiveServices/accounts/CustomVision/projects/delete	Ta bort ett visst projekt.
Microsoft.CognitiveServices/accounts/CustomVision/projects/import/action	Importerar ett projekt.
Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read	Exporterar ett projekt.

{
  "assignableScopes": [
    "/"
  ],
  "description": "View, edit projects and train the models, including the ability to publish, unpublish, export the models. Trainers can't create or delete the project.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/0a5ae4ab-0d65-4eeb-be61-29fc9b54394b",
  "name": "0a5ae4ab-0d65-4eeb-be61-29fc9b54394b",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/CustomVision/*"
      ],
      "notDataActions": [
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/action",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/delete",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/import/action",
        "Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read"
      ]
    }
  ],
  "roleName": "Cognitive Services Custom Vision Trainer",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services-dataläsare (förhandsversion)

Låter dig läsa Cognitive Services-data.

Åtgärder	Description
ingen
NotActions
ingen
DataActions
Microsoft.CognitiveServices/*/read
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you read Cognitive Services data.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/b59867f0-fa02-499b-be73-45a86b5b3e1c",
  "name": "b59867f0-fa02-499b-be73-45a86b5b3e1c",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/*/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services Data Reader (Preview)",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Ansiktsigenkänning för Cognitive Services

Gör att du kan identifiera, verifiera, identifiera, gruppera och hitta liknande åtgärder i Ansikts-API. Den här rollen tillåter inte åtgärder för att skapa eller ta bort, vilket gör den lämplig för slutpunkter som bara behöver slutsatsdragningsfunktioner, enligt bästa praxis för "lägsta behörighet".

Åtgärder	Description
ingen
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/Face/detect/action	Identifiera mänskliga ansikten i en bild, returnera ansiktsrektanglar och eventuellt med faceId, landmärken och attribut.
Microsoft.CognitiveServices/accounts/Face/verify/action	Kontrollera om två ansikten tillhör samma person eller om ett ansikte tillhör en person.
Microsoft.CognitiveServices/accounts/Face/identify/action	1-till-många-identifiering för att hitta de närmaste matchningarna för den specifika frågepersonens ansikte från en persongrupp eller stor persongrupp.
Microsoft.CognitiveServices/accounts/Face/group/action	Dela upp kandidatansikten i grupper baserat på ansiktslikhet.
Microsoft.CognitiveServices/accounts/Face/findsimilars/action	Med tanke på frågeansiktets faceId kan du söka i liknande ansikten från en faceId-matris, en ansiktslista eller en stor ansiktslista. faceId
Microsoft.CognitiveServices/accounts/Face/detectliveness/multimodal/action	Utför livenessidentifiering på ett mål ansikte i en sekvens av infraröda, färg och /eller djup bilder, och returnerar liveness klassificering av mål ansikte som antingen "riktiga ansikte", "förfalskning ansikte" eller "osäker" om en klassificering inte kan göras med de angivna indata.
Microsoft.CognitiveServices/accounts/Face/detectliveness/singlemodal/action	Utför livenessidentifiering på ett mål ansikte i en sekvens av bilder av samma modalitet (t.ex. färg eller infraröd), och returnerar liveness klassificeringen av mål ansikte som antingen "riktiga ansikte", "förfalskning ansikte" eller "osäker" om en klassificering inte kan göras med de angivna indata.
Microsoft.CognitiveServices/accounts/Face/detectlivenesswithverify/singlemodal/action	Identifierar liveness för ett målansikte i en sekvens med bilder av samma strömtyp (t.ex. färg) och jämför sedan med VerifyImage för att returnera konfidenspoäng för identitetsscenarier.
Microsoft.CognitiveServices/accounts/Face/*/sessions/action
Microsoft.CognitiveServices/accounts/Face/*/sessions/delete
Microsoft.CognitiveServices/accounts/Face/*/sessions/read
Microsoft.CognitiveServices/accounts/Face/*/sessions/audit/read
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you perform detect, verify, identify, group, and find similar operations on Face API. This role does not allow create or delete operations, which makes it well suited for endpoints that only need inferencing capabilities, following 'least privilege' best practices.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/9894cab4-e18a-44aa-828b-cb588cd6f2d7",
  "name": "9894cab4-e18a-44aa-828b-cb588cd6f2d7",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/Face/detect/action",
        "Microsoft.CognitiveServices/accounts/Face/verify/action",
        "Microsoft.CognitiveServices/accounts/Face/identify/action",
        "Microsoft.CognitiveServices/accounts/Face/group/action",
        "Microsoft.CognitiveServices/accounts/Face/findsimilars/action",
        "Microsoft.CognitiveServices/accounts/Face/detectliveness/multimodal/action",
        "Microsoft.CognitiveServices/accounts/Face/detectliveness/singlemodal/action",
        "Microsoft.CognitiveServices/accounts/Face/detectlivenesswithverify/singlemodal/action",
        "Microsoft.CognitiveServices/accounts/Face/*/sessions/action",
        "Microsoft.CognitiveServices/accounts/Face/*/sessions/delete",
        "Microsoft.CognitiveServices/accounts/Face/*/sessions/read",
        "Microsoft.CognitiveServices/accounts/Face/*/sessions/audit/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services Face Recognizer",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Administratör för Cognitive Services Metrics Advisor

Fullständig åtkomst till projektet, inklusive konfiguration på systemnivå.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/MetricsAdvisor/*
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Full access to the project, including the system level configuration.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/cb43c632-a144-4ec5-977c-e80c4affc34a",
  "name": "cb43c632-a144-4ec5-977c-e80c4affc34a",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/MetricsAdvisor/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services Metrics Advisor Administrator",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services OpenAI-deltagare

Fullständig åtkomst, inklusive möjligheten att finjustera, distribuera och generera text

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
Microsoft.CognitiveServices/accounts/deployments/write	Skriver distributioner.
Microsoft.CognitiveServices/accounts/deployments/delete	Tar bort distributioner.
Microsoft.CognitiveServices/accounts/raiPolicies/read	Hämtar alla tillämpliga principer under kontot, inklusive standardprinciper.
Microsoft.CognitiveServices/accounts/raiPolicies/write	Skapa eller uppdatera en anpassad ansvarsfull AI-princip.
Microsoft.CognitiveServices/accounts/raiPolicies/delete	Tar bort en anpassad ansvarsfull AI-princip som inte refereras till av en befintlig distribution.
Microsoft.CognitiveServices/accounts/commitmentplans/read	Läser åtagandeplaner.
Microsoft.CognitiveServices/accounts/commitmentplans/write	Skriver åtagandeplaner.
Microsoft.CognitiveServices/accounts/commitmentplans/delete	Tar bort åtagandeplaner.
Microsoft.Authorization/roleAssignments/read	Hämta information om en rolltilldelning.
Microsoft.Authorization/roleDefinitions/read	Hämta information om en rolldefinition.
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/OpenAI/*
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Full access including the ability to fine-tune, deploy and generate text",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/a001fd3d-188f-4b5d-821b-7da978bf7442",
  "name": "a001fd3d-188f-4b5d-821b-7da978bf7442",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read",
        "Microsoft.CognitiveServices/accounts/deployments/write",
        "Microsoft.CognitiveServices/accounts/deployments/delete",
        "Microsoft.CognitiveServices/accounts/raiPolicies/read",
        "Microsoft.CognitiveServices/accounts/raiPolicies/write",
        "Microsoft.CognitiveServices/accounts/raiPolicies/delete",
        "Microsoft.CognitiveServices/accounts/commitmentplans/read",
        "Microsoft.CognitiveServices/accounts/commitmentplans/write",
        "Microsoft.CognitiveServices/accounts/commitmentplans/delete",
        "Microsoft.Authorization/roleAssignments/read",
        "Microsoft.Authorization/roleDefinitions/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/OpenAI/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services OpenAI Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services OpenAI-användare

Läsbehörighet för att visa filer, modeller, distributioner. Möjligheten att skapa slutförande- och inbäddningsanrop.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
Microsoft.Authorization/roleAssignments/read	Hämta information om en rolltilldelning.
Microsoft.Authorization/roleDefinitions/read	Hämta information om en rolldefinition.
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/OpenAI/*/read
Microsoft.CognitiveServices/accounts/OpenAI/engines/completions/action	Skapa ett slutförande från en vald modell
Microsoft.CognitiveServices/accounts/OpenAI/engines/search/action	Sök efter de mest relevanta dokumenten med hjälp av den aktuella motorn.
Microsoft.CognitiveServices/accounts/OpenAI/engines/generate/action	(Endast avsett för webbläsare.) Strömma genererad text från modellen via GET-begäran. Den här metoden tillhandahålls eftersom den webbläsarbaserade EventSource-metoden endast kan skicka GET-begäranden. Den stöder en mer begränsad uppsättning konfigurationsalternativ än POST-varianten.
Microsoft.CognitiveServices/accounts/OpenAI/deployments/audio/action	Returnera avskriften eller översättningen för en viss ljudfil.
Microsoft.CognitiveServices/accounts/OpenAI/deployments/search/action	Sök efter de mest relevanta dokumenten med hjälp av den aktuella motorn.
Microsoft.CognitiveServices/accounts/OpenAI/deployments/completions/action	Skapa ett slutförande från en vald modell.
Microsoft.CognitiveServices/accounts/OpenAI/deployments/chat/completions/action	Skapar ett slutförande för chattmeddelandet
Microsoft.CognitiveServices/accounts/OpenAI/deployments/extensions/chat/completions/action	Skapar ett slutförande för chattmeddelandet med tillägg
Microsoft.CognitiveServices/accounts/OpenAI/deployments/embeddings/action	Returnera inbäddningarna för en viss fråga.
Microsoft.CognitiveServices/accounts/OpenAI/images/generations/action	Skapa avbildningsgenerationer.
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Ability to view files, models, deployments. Readers can't make any changes They can inference and create images",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/5e0bd9bd-7b93-4f28-af87-19fc36ad61bd",
  "name": "5e0bd9bd-7b93-4f28-af87-19fc36ad61bd",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read",
        "Microsoft.Authorization/roleAssignments/read",
        "Microsoft.Authorization/roleDefinitions/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/OpenAI/*/read",
        "Microsoft.CognitiveServices/accounts/OpenAI/engines/completions/action",
        "Microsoft.CognitiveServices/accounts/OpenAI/engines/search/action",
        "Microsoft.CognitiveServices/accounts/OpenAI/engines/generate/action",
        "Microsoft.CognitiveServices/accounts/OpenAI/deployments/audio/action",
        "Microsoft.CognitiveServices/accounts/OpenAI/deployments/search/action",
        "Microsoft.CognitiveServices/accounts/OpenAI/deployments/completions/action",
        "Microsoft.CognitiveServices/accounts/OpenAI/deployments/chat/completions/action",
        "Microsoft.CognitiveServices/accounts/OpenAI/deployments/extensions/chat/completions/action",
        "Microsoft.CognitiveServices/accounts/OpenAI/deployments/embeddings/action",
        "Microsoft.CognitiveServices/accounts/OpenAI/images/generations/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services OpenAI User",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

QnA Maker-redigeraren för Cognitive Services

Nu ska vi skapa, redigera, importera och exportera en KB. Du kan inte publicera eller ta bort en KB.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
Microsoft.Authorization/roleAssignments/read	Hämta information om en rolltilldelning.
Microsoft.Authorization/roleDefinitions/read	Hämta information om en rolldefinition.
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read	Hämtar en lista över kunskapsbaser eller information om en specifik kunskapsbas.
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read	Ladda ned kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/create/write	Asynkron åtgärd för att skapa en ny kunskapsbas.
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/write	Asynkron åtgärd för att ändra en kunskapsbas eller Ersätt innehåll i kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action	GenerateAnswer-anrop för att fråga kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/train/action	Träna anrop för att lägga till förslag i kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read	Ladda ned ändringar från körning.
Microsoft.CognitiveServices/accounts/QnAMaker/alterations/write	Ersätt ändringsdata.
Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read	Hämtar slutpunktsnycklar för en slutpunkt
Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/refreshkeys/action	Återskapar en slutpunktsnyckel.
Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read	Hämtar slutpunktsinställningar för en slutpunkt
Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/write	Uppdatera slutpunktens seettings för en slutpunkt.
Microsoft.CognitiveServices/accounts/QnAMaker/operations/read	Hämtar information om en specifik tidskrävande åtgärd.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read	Hämtar en lista över kunskapsbaser eller information om en specifik kunskapsbas.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read	Ladda ned kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/create/write	Asynkron åtgärd för att skapa en ny kunskapsbas.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/write	Asynkron åtgärd för att ändra en kunskapsbas eller Ersätt innehåll i kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action	GenerateAnswer-anrop för att fråga kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/train/action	Träna anrop för att lägga till förslag i kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read	Ladda ned ändringar från körning.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/write	Ersätt ändringsdata.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read	Hämtar slutpunktsnycklar för en slutpunkt
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/refreshkeys/action	Återskapar en slutpunktsnyckel.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read	Hämtar slutpunktsinställningar för en slutpunkt
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/write	Uppdatera slutpunktens seettings för en slutpunkt.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/operations/read	Hämtar information om en specifik tidskrävande åtgärd.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/read	Hämtar en lista över kunskapsbaser eller information om en specifik kunskapsbas.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/download/read	Ladda ned kunskapsbasen.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/create/write	Asynkron åtgärd för att skapa en ny kunskapsbas.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/write	Asynkron åtgärd för att ändra en kunskapsbas eller Ersätt innehåll i kunskapsbasen.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/generateanswer/action	GenerateAnswer-anrop för att fråga kunskapsbasen.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/train/action	Träna anrop för att lägga till förslag i kunskapsbasen.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/read	Ladda ned ändringar från körning.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/write	Ersätt ändringsdata.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/read	Hämtar slutpunktsnycklar för en slutpunkt
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/refreshkeys/action	Återskapar en slutpunktsnyckel.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/read	Hämtar slutpunktsinställningar för en slutpunkt
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/write	Uppdatera slutpunktens seettings för en slutpunkt.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/operations/read	Hämtar information om en specifik tidskrävande åtgärd.
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Let's you create, edit, import and export a KB. You cannot publish or delete a KB.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/f4cc2bf9-21be-47a1-bdf1-5c5804381025",
  "name": "f4cc2bf9-21be-47a1-bdf1-5c5804381025",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read",
        "Microsoft.Authorization/roleAssignments/read",
        "Microsoft.Authorization/roleDefinitions/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/create/write",
        "Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/write",
        "Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action",
        "Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/train/action",
        "Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker/alterations/write",
        "Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/refreshkeys/action",
        "Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/write",
        "Microsoft.CognitiveServices/accounts/QnAMaker/operations/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/create/write",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/write",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/train/action",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/write",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/refreshkeys/action",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/write",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/operations/read",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/read",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/download/read",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/create/write",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/write",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/generateanswer/action",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/train/action",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/read",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/write",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/read",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/refreshkeys/action",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/read",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/write",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/operations/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services QnA Maker Editor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

QnA Maker-läsare för Cognitive Services

Nu ska du bara läsa och testa en KB.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
Microsoft.Authorization/roleAssignments/read	Hämta information om en rolltilldelning.
Microsoft.Authorization/roleDefinitions/read	Hämta information om en rolldefinition.
NotActions
ingen
DataActions
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read	Hämtar en lista över kunskapsbaser eller information om en specifik kunskapsbas.
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read	Ladda ned kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action	GenerateAnswer-anrop för att fråga kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read	Ladda ned ändringar från körning.
Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read	Hämtar slutpunktsnycklar för en slutpunkt
Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read	Hämtar slutpunktsinställningar för en slutpunkt
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read	Hämtar en lista över kunskapsbaser eller information om en specifik kunskapsbas.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read	Ladda ned kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action	GenerateAnswer-anrop för att fråga kunskapsbasen.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read	Ladda ned ändringar från körning.
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read	Hämtar slutpunktsnycklar för en slutpunkt
Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read	Hämtar slutpunktsinställningar för en slutpunkt
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/read	Hämtar en lista över kunskapsbaser eller information om en specifik kunskapsbas.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/download/read	Ladda ned kunskapsbasen.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/generateanswer/action	GenerateAnswer-anrop för att fråga kunskapsbasen.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/read	Ladda ned ändringar från körning.
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/read	Hämtar slutpunktsnycklar för en slutpunkt
Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/read	Hämtar slutpunktsinställningar för en slutpunkt
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Let's you read and test a KB only.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/466ccd10-b268-4a11-b098-b4849f024126",
  "name": "466ccd10-b268-4a11-b098-b4849f024126",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read",
        "Microsoft.Authorization/roleAssignments/read",
        "Microsoft.Authorization/roleDefinitions/read"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action",
        "Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read",
        "Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/read",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/download/read",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/generateanswer/action",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/read",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/read",
        "Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services QnA Maker Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services Usages Reader

Minimal behörighet att visa Cognitive Services-användning.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/locations/usages/read	Läsa alla användningsdata
NotActions
ingen
DataActions
ingen
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Minimal permission to view Cognitive Services usages.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/bba48692-92b0-4667-a9ad-c31c7b334ac2",
  "name": "bba48692-92b0-4667-a9ad-c31c7b334ac2",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/locations/usages/read"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services Usages Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Cognitive Services-användare

Gör att du kan läsa och lista nycklar för Cognitive Services.

Läs mer

Åtgärder	beskrivning
Microsoft.CognitiveServices/*/read
Microsoft.CognitiveServices/accounts/listkeys/action	Visa en lista med nycklar
Microsoft.Insights/alertRules/read	Läsa en klassisk måttavisering
Microsoft.Insights/diagnostic Inställningar/read	Läsa en resursdiagnostikinställning
Microsoft.Insights/logDefinitions/read	Läsa loggdefinitioner
Microsoft.Insights/metricdefinitions/read	Läsa måttdefinitioner
Microsoft.Insights/metrics/read	Läsa mått
Microsoft.ResourceHealth/availabilityStatuses/read	Hämtar tillgänglighetsstatusar för alla resurser i det angivna omfånget
Microsoft.Resources/deployments/operations/read	Hämtar eller listar distributionsåtgärder.
Microsoft.Resources/subscriptions/operationresults/read	Hämta resultatet av prenumerationsåtgärden.
Microsoft.Resources/subscriptions/read	Hämtar listan över prenumerationer.
Microsoft.Resources/subscriptions/resourceGroups/read	Hämtar eller listar resursgrupper.
Microsoft.Support/*	Skapa och uppdatera ett supportärende
NotActions
ingen
DataActions
Microsoft.CognitiveServices/*
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you read and list keys of Cognitive Services.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/a97b65f3-24c7-4388-baec-2e87135dc908",
  "name": "a97b65f3-24c7-4388-baec-2e87135dc908",
  "permissions": [
    {
      "actions": [
        "Microsoft.CognitiveServices/*/read",
        "Microsoft.CognitiveServices/accounts/listkeys/action",
        "Microsoft.Insights/alertRules/read",
        "Microsoft.Insights/diagnosticSettings/read",
        "Microsoft.Insights/logDefinitions/read",
        "Microsoft.Insights/metricdefinitions/read",
        "Microsoft.Insights/metrics/read",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Resources/deployments/operations/read",
        "Microsoft.Resources/subscriptions/operationresults/read",
        "Microsoft.Resources/subscriptions/read",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Support/*"
      ],
      "notActions": [],
      "dataActions": [
        "Microsoft.CognitiveServices/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Cognitive Services User",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Search Index Data Contributor

Ger fullständig åtkomst till Azure Cognitive Search-indexdata.

Åtgärder	Description
ingen
NotActions
ingen
DataActions
Microsoft.Search/searchServices/index/documents/*
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Grants full access to Azure Cognitive Search index data.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/8ebe5a00-799e-43f5-93ac-243d3dce84a7",
  "name": "8ebe5a00-799e-43f5-93ac-243d3dce84a7",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.Search/searchServices/indexes/documents/*"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Search Index Data Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Dataläsare för sökindex

Ger läsbehörighet till Azure Cognitive Search-indexdata.

Åtgärder	Description
ingen
NotActions
ingen
DataActions
Microsoft.Search/searchServices/index/documents/read	Läs dokument eller föreslagna frågevillkor från ett index.
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Grants read access to Azure Cognitive Search index data.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/1407120a-92aa-4202-b7e9-c0e197c71c8f",
  "name": "1407120a-92aa-4202-b7e9-c0e197c71c8f",
  "permissions": [
    {
      "actions": [],
      "notActions": [],
      "dataActions": [
        "Microsoft.Search/searchServices/indexes/documents/read"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Search Index Data Reader",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Söktjänstdeltagare

Gör att du kan hantera tjänsten Search, men inte åtkomst till dem.

Läs mer

Åtgärder	beskrivning
Microsoft.Authorization/*/read	Läsa roller och rolltilldelningar
Microsoft.Insights/alertRules/*	Skapa och hantera en klassisk måttavisering
Microsoft.ResourceHealth/availabilityStatuses/read	Hämtar tillgänglighetsstatusar för alla resurser i det angivna omfånget
Microsoft.Resources/deployments/*	Skapa och hantera en distribution
Microsoft.Resources/subscriptions/resourceGroups/read	Hämtar eller listar resursgrupper.
Microsoft.Search/searchServices/*	Skapa och hantera söktjänster
Microsoft.Support/*	Skapa och uppdatera ett supportärende
NotActions
ingen
DataActions
ingen
NotDataActions
ingen

{
  "assignableScopes": [
    "/"
  ],
  "description": "Lets you manage Search services, but not access to them.",
  "id": "/providers/Microsoft.Authorization/roleDefinitions/7ca78c08-252a-4471-8644-bb5ff32d4ba0",
  "name": "7ca78c08-252a-4471-8644-bb5ff32d4ba0",
  "permissions": [
    {
      "actions": [
        "Microsoft.Authorization/*/read",
        "Microsoft.Insights/alertRules/*",
        "Microsoft.ResourceHealth/availabilityStatuses/read",
        "Microsoft.Resources/deployments/*",
        "Microsoft.Resources/subscriptions/resourceGroups/read",
        "Microsoft.Search/searchServices/*",
        "Microsoft.Support/*"
      ],
      "notActions": [],
      "dataActions": [],
      "notDataActions": []
    }
  ],
  "roleName": "Search Service Contributor",
  "roleType": "BuiltInRole",
  "type": "Microsoft.Authorization/roleDefinitions"
}

Nästa steg

Tilldela Azure-roller med hjälp av Azure-portalen

Inbyggda Azure-roller för AI + maskininlärning

AzureML-beräkningsoperator

AzureML-dataforskare

Cognitive Services-deltagare

Cognitive Services Custom Vision-deltagare

Distribution av Custom Vision för Cognitive Services

Cognitive Services Custom Vision Labeler

Cognitive Services Custom Vision Reader

Cognitive Services Custom Vision Trainer

Cognitive Services-dataläsare (förhandsversion)

Ansiktsigenkänning för Cognitive Services

Administratör för Cognitive Services Metrics Advisor

Cognitive Services OpenAI-deltagare

Cognitive Services OpenAI-användare

QnA Maker-redigeraren för Cognitive Services

QnA Maker-läsare för Cognitive Services

Cognitive Services Usages Reader

Cognitive Services-användare

Search Index Data Contributor

Dataläsare för sökindex

Söktjänstdeltagare

Nästa steg

Ytterligare resurser