| microsoft.resources/deployments/cancel/action | operator |
| microsoft.resources/deployments/delete | operator |
| microsoft.resources/deployments/validate/action | operator |
| microsoft.resources/deployments/write | operator |
| microsoft.sql/managedinstances/databases/vulnerabilityassessments/scans/export/action | operator |
| microsoft.sql/locations/syncagentoperationresults/read | readonly |
| microsoft.sql/locations/syncdatabaseids/read | readonly |
| microsoft.sql/locations/syncgroupoperationresults/read | readonly |
| microsoft.sql/locations/syncmemberoperationresults/read | readonly |
| microsoft.sql/locations/virtualnetworkrulesazureasyncoperation/read | readonly |
| microsoft.sql/locations/virtualnetworkrulesoperationresults/read | readonly |
| microsoft.sql/managedinstances/read | readonly |
| microsoft.sql/servers/administrators/read | readonly |
| microsoft.sql/servers/auditingpolicies/read | readonly |
| microsoft.sql/servers/connectionpolicies/read | readonly |
| microsoft.sql/servers/databases/topqueries/querytext/action | readonly |
| microsoft.sql/servers/firewallrules/read | readonly |
| microsoft.sql/servers/importexportoperationresults/read | readonly |
| microsoft.sql/servers/keys/read | readonly |
| microsoft.sql/servers/operationresults/read | readonly |
| microsoft.sql/servers/securityalertpolicies/operationresults/read | readonly |
| microsoft.sql/servers/securityalertpolicies/read | readonly |
| microsoft.sql/virtualclusters/read | readonly |
| microsoft.resources/deployments/operations/read | metadata |
| microsoft.resources/deployments/read | metadata |
| microsoft.resources/subscriptions/read | metadata |
| microsoft.resources/subscriptions/resourcegroups/read | metadata |
| microsoft.resources/subscriptions/resources/read | metadata |
| microsoft.sql/locations/auditingsettingsazureasyncoperation/read | metadata |
| microsoft.sql/locations/auditingsettingsoperationresults/read | metadata |
| microsoft.sql/locations/capabilities/read | metadata |
| microsoft.sql/locations/databaseazureasyncoperation/read | metadata |
| microsoft.sql/locations/databaseoperationresults/read | metadata |
| microsoft.sql/locations/deletedserverasyncoperation/read | metadata |
| microsoft.sql/locations/deletedserveroperationresults/read | metadata |
| microsoft.sql/locations/deletedservers/read | metadata |
| microsoft.sql/locations/elasticpoolazureasyncoperation/read | metadata |
| microsoft.sql/locations/elasticpooloperationresults/read | metadata |
| microsoft.sql/locations/extendedauditingsettingsazureasyncoperation/read | metadata |
| microsoft.sql/locations/extendedauditingsettingsoperationresults/read | metadata |
| microsoft.sql/locations/instancefailovergroups/read | metadata |
| microsoft.sql/locations/interfaceendpointprofileazureasyncoperation/read | metadata |
| microsoft.sql/locations/interfaceendpointprofileoperationresults/read | metadata |
| microsoft.sql/locations/longtermretentionbackups/read | metadata |
| microsoft.sql/locations/longtermretentionservers/longtermretentionbackups/read | metadata |
| microsoft.sql/locations/longtermretentionservers/longtermretentiondatabases/longtermretentionbackups/read | metadata |
| microsoft.sql/locations/managedtransparentdataencryptionazureasyncoperation/read | metadata |
| microsoft.sql/locations/managedtransparentdataencryptionoperationresults/read | metadata |
| microsoft.sql/locations/read | metadata |
| microsoft.sql/locations/usages/read | metadata |
| microsoft.sql/managedinstances/administrators/read | metadata |
| microsoft.sql/managedinstances/databases/providers/microsoft.insights/diagnosticsettings/read | metadata |
| microsoft.sql/managedinstances/databases/providers/microsoft.insights/logdefinitions/read | metadata |
| microsoft.sql/managedinstances/databases/read | metadata |
| microsoft.sql/managedinstances/databases/securityalertpolicies/read | metadata |
| microsoft.sql/managedinstances/databases/securityevents/read | metadata |
| microsoft.sql/managedinstances/databases/transparentdataencryption/read | metadata |
| microsoft.sql/managedinstances/databases/vulnerabilityassessments/read | metadata |
| microsoft.sql/managedinstances/databases/vulnerabilityassessments/rules/baselines/read | metadata |
| microsoft.sql/managedinstances/databases/vulnerabilityassessments/scans/initiatescan/action | metadata |
| microsoft.sql/managedinstances/databases/vulnerabilityassessments/scans/read | metadata |
| microsoft.sql/managedinstances/encryptionprotector/read | metadata |
| microsoft.sql/managedinstances/keys/read | metadata |
| microsoft.sql/managedinstances/metricdefinitions/read | metadata |
| microsoft.sql/managedinstances/metrics/read | metadata |
| microsoft.sql/managedinstances/providers/microsoft.insights/diagnosticsettings/read | metadata |
| microsoft.sql/managedinstances/providers/microsoft.insights/logdefinitions/read | metadata |
| microsoft.sql/managedinstances/providers/microsoft.insights/metricdefinitions/read | metadata |
| microsoft.sql/managedinstances/securityalertpolicies/read | metadata |
| microsoft.sql/managedinstances/vulnerabilityassessments/read | metadata |
| microsoft.sql/operations/read | metadata |
| microsoft.sql/servers/advisors/read | metadata |
| microsoft.sql/servers/advisors/recommendedactions/read | metadata |
| microsoft.sql/servers/auditingsettings/operationresults/read | metadata |
| microsoft.sql/servers/auditingsettings/read | metadata |
| microsoft.sql/servers/automatictuning/read | metadata |
| microsoft.sql/servers/communicationlinks/read | metadata |
| microsoft.sql/servers/databases/advisors/read | metadata |
| microsoft.sql/servers/databases/advisors/recommendedactions/read | metadata |
| microsoft.sql/servers/databases/auditrecords/read | metadata |
| microsoft.sql/servers/databases/auditingpolicies/read | metadata |
| microsoft.sql/servers/databases/auditingsettings/read | metadata |
| microsoft.sql/servers/databases/automatictuning/read | metadata |
| microsoft.sql/servers/databases/azureasyncoperation/read | metadata |
| microsoft.sql/servers/databases/backuplongtermretentionpolicies/read | metadata |
| microsoft.sql/servers/databases/connectionpolicies/read | metadata |
| microsoft.sql/servers/databases/datamaskingpolicies/read | metadata |
| microsoft.sql/servers/databases/datamaskingpolicies/rules/read | metadata |
| microsoft.sql/servers/databases/datawarehousequeries/datawarehousequerysteps/read | metadata |
| microsoft.sql/servers/databases/datawarehousequeries/read | metadata |
| microsoft.sql/servers/databases/datawarehouseuseractivities/read | metadata |
| microsoft.sql/servers/databases/extendedauditingsettings/read | metadata |
| microsoft.sql/servers/databases/extensions/read | metadata |
| microsoft.sql/servers/databases/geobackuppolicies/read | metadata |
| microsoft.sql/servers/databases/importexportoperationresults/read | metadata |
| microsoft.sql/servers/databases/maintenancewindowoptions/read | metadata |
| microsoft.sql/servers/databases/maintenancewindows/read | metadata |
| microsoft.sql/servers/databases/metricdefinitions/read | metadata |
| microsoft.sql/servers/databases/metrics/read | metadata |
| microsoft.sql/servers/databases/operationresults/read | metadata |
| microsoft.sql/servers/databases/operations/read | metadata |
| microsoft.sql/servers/databases/providers/microsoft.insights/diagnosticsettings/read | metadata |
| microsoft.sql/servers/databases/providers/microsoft.insights/logdefinitions/read | metadata |
| microsoft.sql/servers/databases/providers/microsoft.insights/metricdefinitions/read | metadata |
| microsoft.sql/servers/databases/querystore/querytexts/read | metadata |
| microsoft.sql/servers/databases/querystore/read | metadata |
| microsoft.sql/servers/databases/read | metadata |
| microsoft.sql/servers/databases/replicationlinks/read | metadata |
| microsoft.sql/servers/databases/restorepoints/read | metadata |
| microsoft.sql/servers/databases/schemas/read | metadata |
| microsoft.sql/servers/databases/schemas/tables/columns/read | metadata |
| microsoft.sql/servers/databases/schemas/tables/columns/sensitivitylabels/read | metadata |
| microsoft.sql/servers/databases/schemas/tables/read | metadata |
| microsoft.sql/servers/databases/schemas/tables/recommendedindexes/read | metadata |
| microsoft.sql/servers/databases/securityalertpolicies/read | metadata |
| microsoft.sql/servers/databases/securitymetrics/read | metadata |
| microsoft.sql/servers/databases/sensitivitylabels/read | metadata |
| microsoft.sql/servers/databases/servicetieradvisors/read | metadata |
| microsoft.sql/servers/databases/skus/read | metadata |
| microsoft.sql/servers/databases/syncgroups/hubschemas/read | metadata |
| microsoft.sql/servers/databases/syncgroups/logs/read | metadata |
| microsoft.sql/servers/databases/syncgroups/read | metadata |
| microsoft.sql/servers/databases/syncgroups/refreshhubschemaoperationresults/read | metadata |
| microsoft.sql/servers/databases/syncgroups/syncmembers/read | metadata |
| microsoft.sql/servers/databases/syncgroups/syncmembers/refreshschemaoperationresults/read | metadata |
| microsoft.sql/servers/databases/syncgroups/syncmembers/schemas/read | metadata |
| microsoft.sql/servers/databases/topqueries/read | metadata |
| microsoft.sql/servers/databases/topqueries/statistics/read | metadata |
| microsoft.sql/servers/databases/transparentdataencryption/operationresults/read | metadata |
| microsoft.sql/servers/databases/transparentdataencryption/read | metadata |
| microsoft.sql/servers/databases/usages/read | metadata |
| microsoft.sql/servers/databases/vulnerabilityassessmentscans/operationresults/read | metadata |
| microsoft.sql/servers/databases/vulnerabilityassessmentsettings/read | metadata |
| microsoft.sql/servers/databases/vulnerabilityassessments/read | metadata |
| microsoft.sql/servers/databases/vulnerabilityassessments/rules/baselines/read | metadata |
| microsoft.sql/servers/databases/vulnerabilityassessments/scans/initiatescan/action | metadata |
| microsoft.sql/servers/databases/vulnerabilityassessments/scans/read | metadata |
| microsoft.sql/servers/disasterrecoveryconfiguration/read | metadata |
| microsoft.sql/servers/elasticpoolestimates/read | metadata |
| microsoft.sql/servers/elasticpools/advisors/read | metadata |
| microsoft.sql/servers/elasticpools/advisors/recommendedactions/read | metadata |
| microsoft.sql/servers/elasticpools/databases/read | metadata |
| microsoft.sql/servers/elasticpools/elasticpoolactivity/read | metadata |
| microsoft.sql/servers/elasticpools/elasticpooldatabaseactivity/read | metadata |
| microsoft.sql/servers/elasticpools/metricdefinitions/read | metadata |
| microsoft.sql/servers/elasticpools/metrics/read | metadata |
| microsoft.sql/servers/elasticpools/operations/read | metadata |
| microsoft.sql/servers/elasticpools/providers/microsoft.insights/diagnosticsettings/read | metadata |
| microsoft.sql/servers/elasticpools/providers/microsoft.insights/metricdefinitions/read | metadata |
| microsoft.sql/servers/elasticpools/read | metadata |
| microsoft.sql/servers/elasticpools/skus/read | metadata |
| microsoft.sql/servers/encryptionprotector/read | metadata |
| microsoft.sql/servers/extendedauditingsettings/read | metadata |
| microsoft.sql/servers/failovergroups/read | metadata |
| microsoft.sql/servers/interfaceendpointprofiles/read | metadata |
| microsoft.sql/servers/providers/microsoft.insights/metricdefinitions/read | metadata |
| microsoft.sql/servers/read | metadata |
| microsoft.sql/servers/recommendedelasticpools/databases/read | metadata |
| microsoft.sql/servers/recommendedelasticpools/read | metadata |
| microsoft.sql/servers/recoverabledatabases/read | metadata |
| microsoft.sql/servers/replicationlinks/read | metadata |
| microsoft.sql/servers/restorabledroppeddatabases/read | metadata |
| microsoft.sql/servers/serviceobjectives/read | metadata |
| microsoft.sql/servers/syncagents/linkeddatabases/read | metadata |
| microsoft.sql/servers/syncagents/read | metadata |
| microsoft.sql/servers/usages/read | metadata |
| microsoft.sql/servers/virtualnetworkrules/read | metadata |
| microsoft.sql/servers/vulnerabilityassessments/read | metadata |
| microsoft.storage/storageaccounts/read | metadata |
