Update RBAC Roles Tue Feb 11 00:30:08 UTC 2025

maciejporebski · Feb 11, 2025 · dc50ccf · dc50ccf
1 parent 59dabe5
commit dc50ccf
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/roles/d715fb95-a0f0-4f1c-8be6-5ad2d2767f67.json b/roles/d715fb95-a0f0-4f1c-8be6-5ad2d2767f67.json
@@ -2,7 +2,7 @@
   "Name": "AVS Orchestrator Role",
   "Id": "d715fb95-a0f0-4f1c-8be6-5ad2d2767f67",
   "IsCustom": false,
-  "Description": "Do not remove this role from your resource group because it is critical to enable your AVS private cloud to operate. If the role is removed, it will cause your AVS private cloud control plane to no longer operate correctly. The role is used to enable the AVS private cloud control plane to create the supporting resources in the resource group of the private clouds attached virtual network and bind them to the attached virtual network. This role is not intended for use cases outside of assignment to the associated AVS identity in your entra-id tenant.",
+  "Description": "Custom role for AVS to manage customer resources used for AVS scenarios.",
   "Actions": [
     "Microsoft.Authorization/roleAssignments/read",
     "Microsoft.Resources/subscriptions/resourcegroups/read",
@@ -60,7 +60,6 @@
     "Microsoft.Network/routeTables/routes/read",
     "Microsoft.Network/routeTables/routes/write",
     "Microsoft.Network/routeTables/routes/delete",
-    "Microsoft.Network/virtualNetworks/join/action",
     "Microsoft.Authorization/roleAssignments/delete"
   ],
   "NotActions": [],