2142ea27-02ad-4094-bfea-2dbac6d24934.json

{
  "Name": "Enclave Approver Role",
  "Id": "2142ea27-02ad-4094-bfea-2dbac6d24934",
  "IsCustom": false,
  "Description": "Read all resources in Azure Virtual Enclaves and Approve approval requests within the Enclave",
  "Actions": [
    "Microsoft.Mission/Operations/read",
    "Microsoft.Mission/communities/read",
    "Microsoft.Mission/internalConnections/read",
    "Microsoft.Mission/virtualEnclaves/read",
    "Microsoft.Mission/virtualEnclaves/endpoints/read",
    "Microsoft.Mission/virtualEnclaves/workloads/read",
    "Microsoft.Authorization/*/read",
    "Microsoft.Insights/alertRules/*",
    "Microsoft.Resources/deployments/*",
    "Microsoft.Resources/subscriptions/read",
    "Microsoft.Resources/subscriptions/resourceGroups/read",
    "Microsoft.Resources/subscriptions/resourcegroups/deployments/read",
    "Microsoft.Resources/subscriptions/operationresults/read",
    "Microsoft.ResourceHealth/availabilityStatuses/read",
    "Microsoft.Features/providers/features/read",
    "Microsoft.Features/features/read",
    "Microsoft.Mission/communities/communityEndpoints/read",
    "Microsoft.Mission/communities/transitHubs/read",
    "Microsoft.Mission/enclaveConnections/read",
    "Microsoft.Mission/virtualEnclaves/enclaveEndpoints/read",
    "Microsoft.Mission/approvals/read",
    "Microsoft.Mission/approvals/write",
    "Microsoft.Mission/enclaveConnections/approvalCallback/action"
  ],
  "NotActions": [],
  "DataActions": [],
  "NotDataActions": [],
  "AssignableScopes": [
    "/"
  ],
  "Condition": null,
  "ConditionVersion": null
}