Azure Add App Role Assignment To Service Principal
Grants a resource application role to a client service principal.
Tag: Azure
Azure
All events with tag Azure.
Azure Add Application
Creates an application registration in Microsoft Entra ID.
Azure Add Eligible Member To Role In Pim Completed
Records completed creation of PIM role eligibility.
Azure Add Federated Identity Credential
Adds an external workload trust to a Microsoft Entra application registration.
Azure Add Member To Role
Adds a principal to a Microsoft Entra directory role.
Azure Add Owner To Application
Adds an owner to a Microsoft Entra application registration.
Azure Add Owner To Group
Adds an owner to a Microsoft Entra group.
Azure Add Role Definition (Azure RBAC)
Creates a custom Azure resource RBAC role definition.
Azure Add Service Principal
Creates a tenant-local service principal in Microsoft Entra ID.
Azure Add User
Creates a user object in Microsoft Entra ID.
Azure Add Verified Domain
Records a domain becoming verified in a Microsoft Entra tenant.
Azure Admin Registered Security Info
Records an administrator registering user authentication information.
Azure Consent To Application
Records consent to an application’s requested permissions.
Azure CopyBlob
Requests a server-side copy of an Azure blob.
Azure Disable Strong Authentication
Records removal of a user’s per-user MFA requirement.
Azure Invite External User
Invites an external identity to collaborate in a Microsoft Entra tenant.
Azure Microsoft.AppConfiguration/configurationStores/listKeys/action
Retrieves access keys for an Azure App Configuration store.
Azure Microsoft.Authorization/elevateAccess/action
Grants an Entra Global Administrator Azure User Access Administrator at root scope.
Azure Microsoft.Authorization/locks/delete
Deletes an Azure management lock.
Azure Microsoft.Authorization/roleAssignments/delete
Deletes an Azure RBAC role assignment.
Azure Microsoft.Authorization/roleAssignments/write
Creates or updates an Azure RBAC role assignment, granting a principal specific permissions on a resource or scope.
Azure Microsoft.Automation/automationAccounts/credentials/read
Reads Azure Automation credential-asset metadata.
Azure Microsoft.Automation/automationAccounts/jobs/write
Creates an Azure Automation runbook job.
Azure Microsoft.Automation/automationAccounts/runbooks/write
Creates or updates an Azure Automation runbook resource.
Azure Microsoft.Automation/automationAccounts/webhooks/action
Generates a URI for an Azure Automation webhook.
Azure Microsoft.Automation/automationAccounts/webhooks/write
Creates or updates an Azure Automation runbook webhook.
Azure Microsoft.Batch/batchAccounts/listKeys/action
Retrieves shared keys for an Azure Batch account.
Azure Microsoft.Compute/disks/beginGetAccess/action
Requests temporary access to an Azure managed disk.
Azure Microsoft.Compute/snapshots/beginGetAccess/action
Requests temporary access to an Azure managed-disk snapshot.
Azure Microsoft.Compute/sshPublicKeys/write
Creates or updates an Azure SSH public-key resource.
Azure Microsoft.Compute/virtualMachines/delete
Requests deletion of an Azure virtual machine.
Azure Microsoft.Compute/virtualMachines/extensions/write
Creates or updates an extension on an Azure virtual machine.
Azure Microsoft.Compute/virtualMachines/runCommand/action
Requests script execution through Azure VM Action Run Command.
Azure Microsoft.Compute/virtualMachines/write
Creates or updates an Azure virtual machine resource.
Azure Microsoft.ContainerRegistry/registries/listCredentials/action
Retrieves the shared admin credentials of an Azure Container Registry.
Azure Microsoft.ContainerService/managedClusters/listClusterAdminCredential/action
Requests local cluster-admin kubeconfig credentials for an AKS cluster.
Azure Microsoft.ContainerService/managedClusters/listClusterUserCredential/action
Retrieves the clusterUser kubeconfig for an AKS cluster.
Azure Microsoft.ContainerService/managedClusters/runCommand/action
Requests execution of a command through AKS Run Command.
Azure Microsoft.Directory/groups/members/update
Updates membership of an Entra group that is not role-assignable.
Azure Microsoft.Directory/servicePrincipals/credentials/update
Adds or updates credentials on an Entra service principal.
Azure Microsoft.EventHub/namespaces/eventhubs/delete
Deletes an Event Hub entity within an Azure Event Hubs namespace.
Azure Microsoft.HybridCompute/machines/extensions/delete
Requests removal of an extension from an Azure Arc-enabled server.
Azure Microsoft.Insights/activityLogAlerts/delete
Deletes an Azure Monitor activity log alert rule.
Azure Microsoft.Insights/diagnosticSettings/delete
Deletes an Azure Monitor diagnostic setting and its configured export routes.
Azure Microsoft.Insights/metricAlerts/delete
Deletes an Azure Monitor metric alert rule.
Azure Microsoft.KeyVault/vaults/accessPolicies/write
Changes access-policy entries for an Azure Key Vault.
Azure Microsoft.KeyVault/vaults/certificates/read
Reads a Key Vault certificate’s public certificate and metadata.
Azure Microsoft.KeyVault/vaults/delete
Deletes an Azure Key Vault resource, subject to recovery and purge controls.
Azure Microsoft.KeyVault/vaults/keys/read
Reads a Key Vault key’s public material and metadata.
Azure Microsoft.KeyVault/vaults/secrets/delete
Deletes a named Key Vault secret and all its versions.
Azure Microsoft.KeyVault/vaults/secrets/read
Reads the value of an Azure Key Vault secret.
Azure Microsoft.ManagedIdentity/userAssignedIdentities/assign/action
Authorizes attaching an existing user-assigned managed identity to a resource.
Azure Microsoft.Network/networkSecurityGroups/delete
Deletes an Azure network security group after its resource associations are removed.
Azure Microsoft.Network/networkSecurityGroups/securityRules/write
Creates or updates a rule in an Azure network security group.
Azure Microsoft.Network/networkWatchers/flowLogs/delete
Deletes an Azure Network Watcher flow-log configuration.
Azure Microsoft.Network/virtualNetworks/virtualNetworkPeerings/write
Creates or updates one side of an Azure virtual network peering.
Azure Microsoft.OperationalInsights/workspaces/delete
Deletes an Azure Log Analytics workspace, with optional permanent deletion.
Azure Microsoft.OperationalInsights/workspaces/sharedKeys/action
Retrieves primary and secondary shared keys for a Log Analytics workspace.
Azure Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems/delete
Requests removal of protection and backup data for an Azure Backup protected item.
Azure Microsoft.Security/alertsSuppressionRules/write
Creates or updates a Defender for Cloud alert suppression rule.
Azure Microsoft.Security/autoProvisioningSettings/write
Updates the legacy Defender for Cloud agent auto-provisioning setting.
Azure Microsoft.Security/pricings/write
Changes a Microsoft Defender for Cloud plan configuration at a supported scope.
Azure Microsoft.Security/securitySolutions/delete
Deletes a Microsoft.Security security solution resource.
Azure Microsoft.SerialConsole/serialPorts/connect/action
Requests a connection to an Azure VM serial console.
Azure Microsoft.ServiceBus/namespaces/authorizationRules/listKeys/action
Retrieves shared keys and connection strings for a Service Bus namespace authorization rule.
Azure Microsoft.Sql/servers/databases/delete
Deletes an Azure SQL Database while recovery depends on retained backups.
Azure Microsoft.Sql/servers/databases/export/action
Requests export of Azure SQL Database schema and data to a BACPAC in Blob Storage.
Azure Microsoft.Storage/storageAccounts/blobServices/containers/delete
Deletes an Azure Blob Storage container through the management plane.
Azure Microsoft.Storage/storageAccounts/delete
Deletes an Azure Storage account and makes its services unavailable.
Azure Microsoft.Storage/storageAccounts/listKeys/action
Retrieves an Azure Storage account’s shared access keys.
Azure Microsoft.Storage/storageAccounts/regenerateKey/action
Regenerates a selected Azure Storage account access key.
Azure Microsoft.Web/sites/host/listKeys/action
Retrieves Azure Functions host, master, and system keys.
Azure Reset User Password
Records an administrative password reset for a Microsoft Entra user.
Azure Storage Analytics logging disabled
Disables selected legacy Azure Storage Analytics logging categories.
Azure Update Conditional Access Policy
Updates an existing Microsoft Entra Conditional Access policy.
Azure Update named location
Updates an Entra Conditional Access named network/location definition.
Azure Update Role Definition (Azure RBAC)
Updates a custom Azure resource RBAC role definition.
Azure Update User Authentication Methods
Records changes to a user’s registered Entra authentication methods.
Azure VaultPatch
Updates Azure Key Vault properties through a management-plane write.