Turbot Guardrails Hub 
Hub
Mods
Azure
40
Mods
162
Resource Types
1,906
Policies
932
Controls
103
Quick Actions
95
IAM

IAM Role: Azure/Cosmos DB/admin

PermissionGrant
microsoft.documentdb/databaseaccounts/writeadmin
microsoft.documentdb/databaseaccounts/listkeys/actionadmin
microsoft.documentdb/databaseaccounts/readonlykeys/actionadmin
microsoft.documentdb/databaseaccounts/regeneratekey/actionadmin
microsoft.documentdb/databaseaccounts/changeresourcegroup/actionadmin
microsoft.documentdb/databaseaccounts/failoverprioritychange/actionadmin
microsoft.documentdb/databaseaccounts/offlineregion/actionadmin
microsoft.documentdb/databaseaccounts/onlineregion/actionadmin
microsoft.documentdb/databaseaccounts/deleteadmin
microsoft.documentdb/databaseaccounts/getbackuppolicy/actionadmin
microsoft.documentdb/databaseaccounts/restore/actionadmin
microsoft.documentdb/locations/deletevirtualnetworkorsubnets/actionadmin
microsoft.documentdb/databaseaccounts/providers/microsoft.insights/diagnosticsettings/writeadmin
microsoft.documentdb/databaseaccounts/apis/tables/writeadmin
microsoft.documentdb/databaseaccounts/apis/tables/deleteadmin
microsoft.documentdb/databaseaccounts/apis/databases/collections/writeadmin
microsoft.documentdb/databaseaccounts/apis/databases/collections/deleteadmin
microsoft.documentdb/databaseaccounts/apis/keyspaces/writeadmin
microsoft.documentdb/databaseaccounts/apis/keyspaces/deleteadmin
microsoft.documentdb/databaseaccounts/apis/keyspaces/tables/writeadmin
microsoft.documentdb/databaseaccounts/apis/keyspaces/tables/deleteadmin
microsoft.documentdb/databaseaccounts/apis/databases/graphs/writeadmin
microsoft.documentdb/databaseaccounts/apis/databases/graphs/deleteadmin
microsoft.documentdb/databaseaccounts/privateendpointconnectionproxies/writeadmin
microsoft.documentdb/databaseaccounts/privateendpointconnectionproxies/deleteadmin
microsoft.documentdb/databaseaccounts/privateendpointconnectionproxies/validate/actionadmin
microsoft.documentdb/databaseaccounts/apis/databases/settings/writeadmin
microsoft.documentdb/databaseaccounts/apis/databases/containers/settings/writeadmin
microsoft.documentdb/databaseaccounts/apis/tables/settings/writeadmin
microsoft.documentdb/databaseaccounts/apis/databases/collections/settings/writeadmin
microsoft.documentdb/databaseaccounts/apis/keyspaces/settings/writeadmin
microsoft.documentdb/databaseaccounts/apis/keyspaces/tables/settings/writeadmin
microsoft.documentdb/databaseaccounts/apis/databases/graphs/settings/writeadmin
microsoft.documentdb/databaseaccounts/mongodbdatabases/writeadmin
microsoft.documentdb/databaseaccounts/mongodbdatabases/deleteadmin
microsoft.documentdb/databaseaccounts/sqldatabases/writeadmin
microsoft.documentdb/databaseaccounts/sqldatabases/deleteadmin
microsoft.documentdb/databaseaccounts/apis/databases/deleteadmin
microsoft.documentdb/databaseaccounts/apis/databases/writeadmin
microsoft.documentdb/databaseaccounts/sqldatabases/containers/writeadmin
microsoft.documentdb/databaseaccounts/sqldatabases/containers/deleteadmin
microsoft.documentdb/databaseaccounts/apis/databases/containers/deleteadmin
microsoft.documentdb/databaseaccounts/apis/databases/containers/writeadmin
microsoft.documentdb/databaseaccounts/mongodbdatabases/collections/writeadmin
microsoft.documentdb/databaseaccounts/mongodbdatabases/collections/deleteadmin
microsoft.documentdb/databaseaccounts/listconnectionstrings/actionoperator
microsoft.documentdb/databaseaccounts/backup/actionoperator
microsoft.documentdb/operations/readoperator
microsoft.documentdb/locations/deletevirtualnetworkorsubnets/operationresults/readoperator
microsoft.documentdb/operationresults/readmetadata
microsoft.documentdb/databaseaccountnames/readmetadata
microsoft.documentdb/databaseaccounts/readmetadata
microsoft.documentdb/databaseaccounts/readonlykeys/readmetadata
microsoft.documentdb/databaseaccounts/operationresults/readmetadata
microsoft.documentdb/databaseaccounts/percentile/readmetadata
microsoft.documentdb/databaseaccounts/percentile/metrics/readmetadata
microsoft.documentdb/databaseaccounts/percentile/targetregion/metrics/readmetadata
microsoft.documentdb/databaseaccounts/percentile/sourceregion/targetregion/metrics/readmetadata
microsoft.documentdb/databaseaccounts/databases/collections/partitions/usages/readmetadata
microsoft.documentdb/databaseaccounts/metricdefinitions/readmetadata
microsoft.documentdb/databaseaccounts/metrics/readmetadata
microsoft.documentdb/databaseaccounts/usages/readmetadata
microsoft.documentdb/databaseaccounts/databases/metricdefinitions/readmetadata
microsoft.documentdb/databaseaccounts/databases/metrics/readmetadata
microsoft.documentdb/databaseaccounts/databases/usages/readmetadata
microsoft.documentdb/databaseaccounts/databases/collections/metricdefinitions/readmetadata
microsoft.documentdb/databaseaccounts/databases/collections/metrics/readmetadata
microsoft.documentdb/databaseaccounts/databases/collections/usages/readmetadata
microsoft.documentdb/databaseaccounts/region/metrics/readmetadata
microsoft.documentdb/databaseaccounts/region/databases/collections/metrics/readmetadata
microsoft.documentdb/databaseaccounts/region/databases/collections/partitions/readmetadata
microsoft.documentdb/databaseaccounts/databases/collections/partitions/metrics/readmetadata
microsoft.documentdb/databaseaccounts/region/databases/collections/partitions/metrics/readmetadata
microsoft.documentdb/databaseaccounts/region/databases/collections/partitionkeyrangeid/metrics/readmetadata
microsoft.documentdb/databaseaccounts/databases/collections/partitionkeyrangeid/metrics/readmetadata
microsoft.documentdb/databaseaccounts/databases/collections/partitions/readmetadata
microsoft.documentdb/databaseaccounts/providers/microsoft.insights/logdefinitions/readmetadata
microsoft.documentdb/databaseaccounts/providers/microsoft.insights/diagnosticsettings/readmetadata
microsoft.documentdb/databaseaccounts/providers/microsoft.insights/metricdefinitions/readmetadata
microsoft.documentdb/databaseaccounts/apis/databases/readmetadata
microsoft.documentdb/databaseaccounts/apis/databases/containers/readmetadata
microsoft.documentdb/databaseaccounts/apis/tables/readmetadata
microsoft.documentdb/databaseaccounts/apis/databases/collections/readmetadata
microsoft.documentdb/databaseaccounts/apis/keyspaces/readmetadata
microsoft.documentdb/databaseaccounts/apis/keyspaces/tables/readmetadata
microsoft.documentdb/databaseaccounts/apis/databases/graphs/readmetadata
microsoft.documentdb/databaseaccounts/privateendpointconnectionproxies/readmetadata
microsoft.documentdb/locations/operationsstatus/readmetadata
microsoft.documentdb/databaseaccounts/apis/databases/operationresults/readmetadata
microsoft.documentdb/databaseaccounts/apis/databases/containers/operationresults/readmetadata
microsoft.documentdb/databaseaccounts/apis/tables/operationresults/readmetadata
microsoft.documentdb/databaseaccounts/apis/keyspaces/operationresults/readmetadata
microsoft.documentdb/databaseaccounts/apis/keyspaces/tables/operationresults/readmetadata
microsoft.documentdb/databaseaccounts/apis/databases/graphs/operationresults/readmetadata
microsoft.documentdb/databaseaccounts/apis/databases/settings/readmetadata
microsoft.documentdb/databaseaccounts/apis/databases/settings/operationresults/readmetadata
microsoft.documentdb/databaseaccounts/apis/databases/containers/settings/readmetadata
microsoft.documentdb/databaseaccounts/apis/databases/containers/settings/operationresults/readmetadata
microsoft.documentdb/databaseaccounts/apis/tables/settings/readmetadata
microsoft.documentdb/databaseaccounts/apis/tables/settings/operationresults/readmetadata
microsoft.documentdb/databaseaccounts/apis/databases/collections/settings/readmetadata
microsoft.documentdb/databaseaccounts/apis/databases/collections/settings/operationresults/readmetadata
microsoft.documentdb/databaseaccounts/apis/keyspaces/settings/readmetadata
microsoft.documentdb/databaseaccounts/apis/keyspaces/settings/operationresults/readmetadata
microsoft.documentdb/databaseaccounts/apis/keyspaces/tables/settings/readmetadata
microsoft.documentdb/databaseaccounts/apis/keyspaces/tables/settings/operationresults/readmetadata
microsoft.documentdb/databaseaccounts/apis/databases/graphs/settings/readmetadata
microsoft.documentdb/databaseaccounts/apis/databases/graphs/settings/operationresults/readmetadata