6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437.json

{
  "Name": "SQL Server Contributor",
  "Id": "6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437",
  "IsCustom": false,
  "Description": "Lets you manage SQL servers and databases, but not access to them, and not their security -related policies.",
  "Actions": [
    "Microsoft.Authorization/*/read",
    "Microsoft.Insights/alertRules/*",
    "Microsoft.ResourceHealth/availabilityStatuses/read",
    "Microsoft.Resources/deployments/*",
    "Microsoft.Resources/subscriptions/resourceGroups/read",
    "Microsoft.Sql/locations/*/read",
    "Microsoft.Sql/servers/*",
    "Microsoft.Support/*",
    "Microsoft.Insights/metrics/read",
    "Microsoft.Insights/metricDefinitions/read"
  ],
  "NotActions": [
    "Microsoft.Sql/managedInstances/databases/currentSensitivityLabels/*",
    "Microsoft.Sql/managedInstances/databases/recommendedSensitivityLabels/*",
    "Microsoft.Sql/managedInstances/databases/schemas/tables/columns/sensitivityLabels/*",
    "Microsoft.Sql/managedInstances/databases/securityAlertPolicies/*",
    "Microsoft.Sql/managedInstances/databases/sensitivityLabels/*",
    "Microsoft.Sql/managedInstances/databases/vulnerabilityAssessments/*",
    "Microsoft.Sql/managedInstances/securityAlertPolicies/*",
    "Microsoft.Sql/managedInstances/vulnerabilityAssessments/*",
    "Microsoft.Sql/servers/auditingSettings/*",
    "Microsoft.Sql/servers/databases/auditingSettings/*",
    "Microsoft.Sql/servers/databases/auditRecords/read",
    "Microsoft.Sql/servers/databases/currentSensitivityLabels/*",
    "Microsoft.Sql/servers/databases/dataMaskingPolicies/*",
    "Microsoft.Sql/servers/databases/extendedAuditingSettings/*",
    "Microsoft.Sql/servers/databases/recommendedSensitivityLabels/*",
    "Microsoft.Sql/servers/databases/schemas/tables/columns/sensitivityLabels/*",
    "Microsoft.Sql/servers/databases/securityAlertPolicies/*",
    "Microsoft.Sql/servers/databases/securityMetrics/*",
    "Microsoft.Sql/servers/databases/sensitivityLabels/*",
    "Microsoft.Sql/servers/databases/vulnerabilityAssessments/*",
    "Microsoft.Sql/servers/databases/vulnerabilityAssessmentScans/*",
    "Microsoft.Sql/servers/databases/vulnerabilityAssessmentSettings/*",
    "Microsoft.Sql/servers/devOpsAuditingSettings/*",
    "Microsoft.Sql/servers/extendedAuditingSettings/*",
    "Microsoft.Sql/servers/securityAlertPolicies/*",
    "Microsoft.Sql/servers/vulnerabilityAssessments/*",
    "Microsoft.Sql/servers/azureADOnlyAuthentications/delete",
    "Microsoft.Sql/servers/azureADOnlyAuthentications/write",
    "Microsoft.Sql/servers/externalPolicyBasedAuthorizations/delete",
    "Microsoft.Sql/servers/externalPolicyBasedAuthorizations/write"
  ],
  "DataActions": [],
  "NotDataActions": [],
  "AssignableScopes": [
    "/"
  ],
  "Condition": null,
  "ConditionVersion": null
}