96062cf7-95ca-4f89-9b9d-2a2aa47356af.json

{
  "Name": "Azure Container Registry secure supply chain operator service role",
  "Id": "96062cf7-95ca-4f89-9b9d-2a2aa47356af",
  "IsCustom": false,
  "Description": "Grants Microsoft Defender for Cloud access to Azure Container Registry for security assessment of container images",
  "Actions": [
    "Microsoft.ContainerRegistry/registries/pull/read",
    "Microsoft.ContainerRegistry/registries/push/write",
    "Microsoft.ContainerRegistry/registries/artifacts/delete"
  ],
  "NotActions": [],
  "DataActions": [
    "Microsoft.ContainerRegistry/registries/repositories/metadata/read",
    "Microsoft.ContainerRegistry/registries/repositories/content/read",
    "Microsoft.ContainerRegistry/registries/repositories/metadata/write",
    "Microsoft.ContainerRegistry/registries/repositories/content/write",
    "Microsoft.ContainerRegistry/registries/repositories/metadata/delete",
    "Microsoft.ContainerRegistry/registries/repositories/content/delete"
  ],
  "NotDataActions": [],
  "AssignableScopes": [
    "/"
  ],
  "Condition": null,
  "ConditionVersion": null
}