IAM Role: Azure/Container Registry/admin

Permission	Grant
microsoft.containerregistry/locations/deletevirtualnetworkorsubnets/action	admin
microsoft.containerregistry/register/action	admin
microsoft.containerregistry/registries/agentpools/delete	admin
microsoft.containerregistry/registries/agentpools/listqueuestatus/action	admin
microsoft.containerregistry/registries/agentpools/write	admin
microsoft.containerregistry/registries/artifacts/delete	admin
microsoft.containerregistry/registries/builds/cancel/action	admin
microsoft.containerregistry/registries/builds/getloglink/action	admin
microsoft.containerregistry/registries/builds/write	admin
microsoft.containerregistry/registries/buildtasks/delete	admin
microsoft.containerregistry/registries/buildtasks/listsourcerepositoryproperties/action	admin
microsoft.containerregistry/registries/buildtasks/steps/delete	admin
microsoft.containerregistry/registries/buildtasks/steps/listbuildarguments/action	admin
microsoft.containerregistry/registries/buildtasks/steps/write	admin
microsoft.containerregistry/registries/buildtasks/write	admin
microsoft.containerregistry/registries/cacherules/delete	admin
microsoft.containerregistry/registries/cacherules/write	admin
microsoft.containerregistry/registries/connectedregistries/deactivate/action	admin
microsoft.containerregistry/registries/connectedregistries/delete	admin
microsoft.containerregistry/registries/connectedregistries/write	admin
microsoft.containerregistry/registries/credentialsets/delete	admin
microsoft.containerregistry/registries/credentialsets/write	admin
microsoft.containerregistry/registries/delete	admin
microsoft.containerregistry/registries/deleted/restore/action	admin
microsoft.containerregistry/registries/eventgridfilters/delete	admin
microsoft.containerregistry/registries/eventgridfilters/write	admin
microsoft.containerregistry/registries/exportpipelines/delete	admin
microsoft.containerregistry/registries/exportpipelines/write	admin
microsoft.containerregistry/registries/generatecredentials/action	admin
microsoft.containerregistry/registries/getbuildsourceuploadurl/action	admin
microsoft.containerregistry/registries/importimage/action	admin
microsoft.containerregistry/registries/importpipelines/delete	admin
microsoft.containerregistry/registries/importpipelines/write	admin
microsoft.containerregistry/registries/listbuildsourceuploadurl/action	admin
microsoft.containerregistry/registries/listcredentials/action	admin
microsoft.containerregistry/registries/metadata/write	admin
microsoft.containerregistry/registries/packages/archives/delete	admin
microsoft.containerregistry/registries/packages/archives/versions/delete	admin
microsoft.containerregistry/registries/packages/archives/versions/write	admin
microsoft.containerregistry/registries/packages/archives/write	admin
microsoft.containerregistry/registries/pipelineruns/delete	admin
microsoft.containerregistry/registries/pipelineruns/write	admin
microsoft.containerregistry/registries/privateendpointconnectionproxies/delete	admin
microsoft.containerregistry/registries/privateendpointconnectionproxies/validate/action	admin
microsoft.containerregistry/registries/privateendpointconnectionproxies/write	admin
microsoft.containerregistry/registries/privateendpointconnections/delete	admin
microsoft.containerregistry/registries/privateendpointconnections/write	admin
microsoft.containerregistry/registries/privateendpointconnectionsapproval/action	admin
microsoft.containerregistry/registries/providers/microsoft.insights/diagnosticsettings/write	admin
microsoft.containerregistry/registries/push/write	admin
microsoft.containerregistry/registries/quarantine/write	admin
microsoft.containerregistry/registries/quarantinedartifacts/write	admin
microsoft.containerregistry/registries/queuebuild/action	admin
microsoft.containerregistry/registries/regeneratecredential/action	admin
microsoft.containerregistry/registries/replications/delete	admin
microsoft.containerregistry/registries/replications/write	admin
microsoft.containerregistry/registries/repositories/content/delete	admin
microsoft.containerregistry/registries/repositories/content/write	admin
microsoft.containerregistry/registries/repositories/metadata/delete	admin
microsoft.containerregistry/registries/repositories/metadata/write	admin
microsoft.containerregistry/registries/runs/cancel/action	admin
microsoft.containerregistry/registries/runs/listlogsasurl/action	admin
microsoft.containerregistry/registries/runs/write	admin
microsoft.containerregistry/registries/schedulerun/action	admin
microsoft.containerregistry/registries/scopemaps/delete	admin
microsoft.containerregistry/registries/scopemaps/write	admin
microsoft.containerregistry/registries/sign/write	admin
microsoft.containerregistry/registries/taskruns/delete	admin
microsoft.containerregistry/registries/taskruns/listdetails/action	admin
microsoft.containerregistry/registries/taskruns/write	admin
microsoft.containerregistry/registries/tasks/delete	admin
microsoft.containerregistry/registries/tasks/listdetails/action	admin
microsoft.containerregistry/registries/tasks/write	admin
microsoft.containerregistry/registries/tokens/delete	admin
microsoft.containerregistry/registries/tokens/write	admin
microsoft.containerregistry/registries/trustedcollections/write	admin
microsoft.containerregistry/registries/updatepolicies/write	admin
microsoft.containerregistry/registries/webhooks/delete	admin
microsoft.containerregistry/registries/webhooks/getcallbackconfig/action	admin
microsoft.containerregistry/registries/webhooks/listevents/action	admin
microsoft.containerregistry/registries/webhooks/ping/action	admin
microsoft.containerregistry/registries/webhooks/write	admin
microsoft.containerregistry/registries/write	admin
microsoft.containerregistry/unregister/action	admin
microsoft.containerregistry/checknameavailability/read	metadata
microsoft.containerregistry/locations/operationresults/read	metadata
microsoft.containerregistry/operations/read	metadata
microsoft.containerregistry/registries/agentpools/operationresults/status/read	metadata
microsoft.containerregistry/registries/agentpools/operationstatuses/read	metadata
microsoft.containerregistry/registries/agentpools/read	metadata
microsoft.containerregistry/registries/builds/read	metadata
microsoft.containerregistry/registries/buildtasks/read	metadata
microsoft.containerregistry/registries/buildtasks/steps/read	metadata
microsoft.containerregistry/registries/cacherules/operationstatuses/read	metadata
microsoft.containerregistry/registries/cacherules/read	metadata
microsoft.containerregistry/registries/catalog/read	metadata
microsoft.containerregistry/registries/connectedregistries/read	metadata
microsoft.containerregistry/registries/credentialsets/operationstatuses/read	metadata
microsoft.containerregistry/registries/credentialsets/read	metadata
microsoft.containerregistry/registries/deleted/read	metadata
microsoft.containerregistry/registries/eventgridfilters/read	metadata
microsoft.containerregistry/registries/exportpipelines/read	metadata
microsoft.containerregistry/registries/importpipelines/read	metadata
microsoft.containerregistry/registries/listpolicies/read	metadata
microsoft.containerregistry/registries/listusages/read	metadata
microsoft.containerregistry/registries/metadata/read	metadata
microsoft.containerregistry/registries/operationstatuses/read	metadata
microsoft.containerregistry/registries/packages/archives/read	metadata
microsoft.containerregistry/registries/packages/archives/versions/operationstatuses/read	metadata
microsoft.containerregistry/registries/packages/archives/versions/read	metadata
microsoft.containerregistry/registries/pipelineruns/operationstatuses/read	metadata
microsoft.containerregistry/registries/pipelineruns/read	metadata
microsoft.containerregistry/registries/privateendpointconnectionproxies/operationstatuses/read	metadata
microsoft.containerregistry/registries/privateendpointconnectionproxies/read	metadata
microsoft.containerregistry/registries/privateendpointconnections/operationstatuses/read	metadata
microsoft.containerregistry/registries/privateendpointconnections/read	metadata
microsoft.containerregistry/registries/providers/microsoft.insights/diagnosticsettings/read	metadata
microsoft.containerregistry/registries/providers/microsoft.insights/logdefinitions/read	metadata
microsoft.containerregistry/registries/providers/microsoft.insights/metricdefinitions/read	metadata
microsoft.containerregistry/registries/pull/read	metadata
microsoft.containerregistry/registries/quarantine/read	metadata
microsoft.containerregistry/registries/quarantinedartifacts/read	metadata
microsoft.containerregistry/registries/read	metadata
microsoft.containerregistry/registries/replications/operationstatuses/read	metadata
microsoft.containerregistry/registries/replications/read	metadata
microsoft.containerregistry/registries/repositories/content/read	metadata
microsoft.containerregistry/registries/repositories/metadata/read	metadata
microsoft.containerregistry/registries/runs/read	metadata
microsoft.containerregistry/registries/scopemaps/operationstatuses/read	metadata
microsoft.containerregistry/registries/scopemaps/read	metadata
microsoft.containerregistry/registries/taskruns/operationstatuses/read	metadata
microsoft.containerregistry/registries/taskruns/read	metadata
microsoft.containerregistry/registries/tasks/read	metadata
microsoft.containerregistry/registries/tokens/operationstatuses/read	metadata
microsoft.containerregistry/registries/tokens/read	metadata
microsoft.containerregistry/registries/webhooks/operationstatuses/read	metadata
microsoft.containerregistry/registries/webhooks/read	metadata