I am using the below commands to get the role definition details

az role definition list --name "Storage Blob Data Owner"
Or
az role definition list --name "b7e6dc6d-f1e8-4753-8033-0f276bb0955b"

And it is working fine however for other roles like readerRoleId 00000000-0000-0000-0000-000000000001 it does not work and returns empty.

What command should I use instead?

I am using the below commands to get the role definition details

az role definition list --name "Storage Blob Data Owner"
Or
az role definition list --name "b7e6dc6d-f1e8-4753-8033-0f276bb0955b"

And it is working fine however for other roles like readerRoleId 00000000-0000-0000-0000-000000000001 it does not work and returns empty.

What command should I use instead?

• azure
• azure-devops
• azure-cli

• Could you confirm whether your requirement is to fetch role with id 00000000-0000-0000-0000-000000000001 via CLI? – Sridevi Commented Mar 15 at 3:34
• Yes, we store the all the roles as GUID in one column and I have a requirement to document their definitions. So how would I know if it is a standard Azure RBAC role or built in SQL or built in Cosmos and so on. So that I would use the proper command? – Jimmy Commented Mar 16 at 14:50
• There is no direct command to identify if a GUID belongs to Azure RBAC, Cosmos DB, or SQL. You can create a script to first check Azure RBAC using az role definition list, then Cosmos DB roles with az cosmosdb sql role definition show. – Sridevi Commented Mar 17 at 3:03

1 Answer 1

Note that 00000000-0000-0000-0000-000000000001 is role ID for Cosmos DB Built-in Data Reader Role. It is not a standard Azure RBAC role, so it cannot be retrieved using the az role definition list command.

Initially, I too got blank results when I run below Azure CLI command:

az role definition list --name "00000000-0000-0000-0000-000000000001"

Response:

To retrieve the role definition for a Cosmos DB SQL role, use this Azure CLI command:

az cosmosdb sql role definition show --account-name cosmosdbname --resource-group rgname --id "00000000-0000-0000-0000-000000000001"

Response:

Reference:

Use data plane role-based access control - Azure Cosmos DB for NoSQL | Microsoft