The azure.permissions.cloud website uses a variety of information gathered within the IAM Dataset and exposes that information in a clean, easy-to-read format.
azure.permissions.cloud was built in order to provide an alternate, community-driven source of truth for Azure identity. If you would like to contribute to or suggest a feature for this website, please raise it in the azure.permissions.cloud repo. If you have found a data issue with the IAM permissions or API methods, please raise it in the IAM Dataset repo.
The website can be navigated using the left sidebar or by quickly looking up a specific managed policy, permission or API method in the top search bar.
Using the Dashboard
The dashboard has a small selection of statistics about the global state of permissions and API methods.
Using Built-in Roles
The built-in roles section lists all known Azure built-in roles with the ability to view individual roles in-depth. Additional analysis is presented about the effective permissions the policy provides.
The following table represents the attributes available on either a built-in role or an effective permissions within it:
||A built-in role tag indicating that the built-in role contains actions that are external to the code Azure ecosystem, typically for third parties.
||A built-in role tag indicating that the built-in role contains an action that is not documented in the official provider operations reference.
||A built-in role tag that indicates the presence of undocumented actions within the policy.
||A built-in role tag that indicates the presence of a malformed statement within the policy.
||A built-in role tag that indicates the policy is deprecated.
Using IAM Permissions
IAM Permissions are available on all service pages. Each IAM permission details its own identifier, short and long descriptions, access level, as well as permitted origins where available.
Using API Methods
API Methods are available on all service pages. Each API Method details its own identifier, short and long descriptions, as well as permitted origins where available.