361898ef-9ed1-48c2-849c-a832951106bb.json

{
  "Name": "Domain Services Reader",
  "Id": "361898ef-9ed1-48c2-849c-a832951106bb",
  "IsCustom": false,
  "Description": "Can view Azure AD Domain Services and related network configurations",
  "Actions": [
    "Microsoft.Authorization/*/read",
    "Microsoft.Resources/deployments/read",
    "Microsoft.Resources/deployments/operations/read",
    "Microsoft.Resources/deployments/operationstatuses/read",
    "Microsoft.Resources/subscriptions/resourceGroups/read",
    "Microsoft.Insights/AlertRules/Read",
    "Microsoft.Insights/AlertRules/Incidents/Read",
    "Microsoft.Insights/Logs/Read",
    "Microsoft.Insights/Metrics/read",
    "Microsoft.Insights/DiagnosticSettings/read",
    "Microsoft.Insights/DiagnosticSettingsCategories/Read",
    "Microsoft.AAD/domainServices/*/read",
    "Microsoft.Network/virtualNetworks/read",
    "Microsoft.Network/virtualNetworks/subnets/read",
    "Microsoft.Network/virtualNetworks/virtualNetworkPeerings/read",
    "Microsoft.Network/virtualNetworks/providers/Microsoft.Insights/diagnosticSettings/read",
    "Microsoft.Network/virtualNetworks/providers/Microsoft.Insights/metricDefinitions/read",
    "Microsoft.Network/azureFirewalls/read",
    "Microsoft.Network/ddosProtectionPlans/read",
    "Microsoft.Network/loadBalancers/read",
    "Microsoft.Network/loadBalancers/*/read",
    "Microsoft.Network/natGateways/read",
    "Microsoft.Network/networkInterfaces/read",
    "Microsoft.Network/networkSecurityGroups/defaultSecurityRules/read",
    "Microsoft.Network/networkSecurityGroups/read",
    "Microsoft.Network/networkSecurityGroups/securityRules/read",
    "Microsoft.Network/routeTables/read",
    "Microsoft.Network/routeTables/routes/read"
  ],
  "NotActions": [],
  "DataActions": [],
  "NotDataActions": [],
  "AssignableScopes": [
    "/"
  ],
  "Condition": null,
  "ConditionVersion": null
}