Edit

Share via

Supported resource types and role assignments for Chaos Studio

  • Article

The following table lists the supported resource types for faults, the target types, and suggested roles to use when you give an experiment permission to a resource of that type.

More information about role assignments can be found on the Azure built-in roles page.

Resource type Target name/type Suggested role assignment
Microsoft.Cache/Redis (service-direct) Microsoft-AzureCacheForRedis Redis Cache Contributor
Microsoft.ClassicCompute/domainNames (service-direct) Microsoft-DomainNames Classic Virtual Machine Contributor
Microsoft.Compute/virtualMachines (agent-based) Microsoft-Agent Reader
Microsoft.Compute/virtualMachineScaleSets (agent-based) Microsoft-Agent Reader
Microsoft.Compute/virtualMachines (service-direct) Microsoft-VirtualMachine Virtual Machine Contributor
Microsoft.Compute/virtualMachineScaleSets (service-direct) Microsoft-VirtualMachineScaleSet Virtual Machine Contributor
Microsoft.ContainerService/managedClusters (service-direct) Microsoft-AzureKubernetesServiceChaosMesh Azure Kubernetes Service Cluster Admin Role
Microsoft.DocumentDb/databaseAccounts (Cosmos DB, service-direct) Microsoft-Cosmos DB Azure Cosmos DB Operator
Microsoft.Insights/autoscalesettings (service-direct) Microsoft-AutoScaleSettings Web Plan Contributor
Microsoft.KeyVault/vaults (service-direct) Microsoft-KeyVault Azure Key Vault Contributor
Microsoft.Network/networkSecurityGroups (service-direct) Microsoft-NetworkSecurityGroup Network Contributor
Microsoft.Web/sites (service-direct) Microsoft-AppService Website Contributor
Microsoft.ServiceBus/namespaces (service-direct) Microsoft-ServiceBus Azure Service Bus Data Owner
Microsoft.EventHub/namespaces (service-direct) Microsoft-EventHub Azure Event Hubs Data Owner
Microsoft.LoadTestService/loadtests (service-direct) Microsoft-AzureLoadTest Load Test Contributor