Mods
Azure

IAM Role: Azure/Container Registry/metadata

PermissionGrant
microsoft.containerregistry/checknameavailability/readmetadata
microsoft.containerregistry/locations/operationresults/readmetadata
microsoft.containerregistry/operations/readmetadata
microsoft.containerregistry/registries/agentpools/operationresults/status/readmetadata
microsoft.containerregistry/registries/agentpools/operationstatuses/readmetadata
microsoft.containerregistry/registries/agentpools/readmetadata
microsoft.containerregistry/registries/builds/readmetadata
microsoft.containerregistry/registries/buildtasks/readmetadata
microsoft.containerregistry/registries/buildtasks/steps/readmetadata
microsoft.containerregistry/registries/cacherules/operationstatuses/readmetadata
microsoft.containerregistry/registries/cacherules/readmetadata
microsoft.containerregistry/registries/catalog/readmetadata
microsoft.containerregistry/registries/connectedregistries/readmetadata
microsoft.containerregistry/registries/credentialsets/operationstatuses/readmetadata
microsoft.containerregistry/registries/credentialsets/readmetadata
microsoft.containerregistry/registries/deleted/readmetadata
microsoft.containerregistry/registries/eventgridfilters/readmetadata
microsoft.containerregistry/registries/exportpipelines/readmetadata
microsoft.containerregistry/registries/importpipelines/readmetadata
microsoft.containerregistry/registries/listpolicies/readmetadata
microsoft.containerregistry/registries/listusages/readmetadata
microsoft.containerregistry/registries/metadata/readmetadata
microsoft.containerregistry/registries/operationstatuses/readmetadata
microsoft.containerregistry/registries/packages/archives/readmetadata
microsoft.containerregistry/registries/packages/archives/versions/operationstatuses/readmetadata
microsoft.containerregistry/registries/packages/archives/versions/readmetadata
microsoft.containerregistry/registries/pipelineruns/operationstatuses/readmetadata
microsoft.containerregistry/registries/pipelineruns/readmetadata
microsoft.containerregistry/registries/privateendpointconnectionproxies/operationstatuses/readmetadata
microsoft.containerregistry/registries/privateendpointconnectionproxies/readmetadata
microsoft.containerregistry/registries/privateendpointconnections/operationstatuses/readmetadata
microsoft.containerregistry/registries/privateendpointconnections/readmetadata
microsoft.containerregistry/registries/providers/microsoft.insights/diagnosticsettings/readmetadata
microsoft.containerregistry/registries/providers/microsoft.insights/logdefinitions/readmetadata
microsoft.containerregistry/registries/providers/microsoft.insights/metricdefinitions/readmetadata
microsoft.containerregistry/registries/pull/readmetadata
microsoft.containerregistry/registries/quarantine/readmetadata
microsoft.containerregistry/registries/quarantinedartifacts/readmetadata
microsoft.containerregistry/registries/readmetadata
microsoft.containerregistry/registries/replications/operationstatuses/readmetadata
microsoft.containerregistry/registries/replications/readmetadata
microsoft.containerregistry/registries/repositories/content/readmetadata
microsoft.containerregistry/registries/repositories/metadata/readmetadata
microsoft.containerregistry/registries/runs/readmetadata
microsoft.containerregistry/registries/scopemaps/operationstatuses/readmetadata
microsoft.containerregistry/registries/scopemaps/readmetadata
microsoft.containerregistry/registries/taskruns/operationstatuses/readmetadata
microsoft.containerregistry/registries/taskruns/readmetadata
microsoft.containerregistry/registries/tasks/readmetadata
microsoft.containerregistry/registries/tokens/operationstatuses/readmetadata
microsoft.containerregistry/registries/tokens/readmetadata
microsoft.containerregistry/registries/webhooks/operationstatuses/readmetadata
microsoft.containerregistry/registries/webhooks/readmetadata