Like other Azure resources, the Azure Event Grid also supports granular role-based access control (RBAC). This is beneficial for organizations to set the right access and permissions rules to manage Event Grid within the enterprise's boundaries. An example of RBAC would be having a service principal application registered in the enterprise's Azure Active Directory, or using a Logic Apps workflow to read events from an Azure Event Grid topic.
The following table describes various operation types supported through RBAC in an Azure Event Grid topic:
|
Operation types |
Action |
|
Write rights to Event Grid topic |
Microsoft.EventGrid/*/write |
|
Read rights to Event Grid topic |
Microsoft.EventGrid/*/read |
|
Delete operation on Event Grid topic |
Microsoft.EventGrid/*/delete |
|
Get subscription details |
Microsoft.EventGrid... |
