Shorthand for create, read, update and delete, the four basic things you do with data. Data-plane roles in Azure Cosmos DB, for instance, authorise those operations on items.
Also called create, read, update, delete.
In the Ultra Transcenders books
Each book explains CRUD in context, with comparison tables and the common traps.
Terms in this definition
- Basic
Low-cost Log Analytics table plan where ingestion is cheap but each query is charged per GB and runs at workspace scope. Full KQL and simple log search alerts are supported; standard log search alerts are not.
- Cosmos DB
NoSQL database distributed globally, offering writes in multiple regions, automatic indexing and latency below 10 ms.
Related terms
- --attach-acr
Option on
az aks createoraz aks updatethat links a container registry to an AKS cluster by assigning AcrPull to the kubelet identity, so nodes can pull its images. - ABAC policy
Governed tags drive this kind of Unity Catalog rule: when a table or column has tags that satisfy its
WHENandMATCH COLUMNSconditions, a row filter or column mask UDF is put on it automatically. Policies are written withCREATE POLICYand can sit on a metastore, catalog, schema or table. - ABFS
Short for Azure Blob File System driver. Hadoop, Spark and HDInsight rely on this HDFS-compatible connector to read and write ADLS Gen2 data.
- Access-based enumeration
When turned on for an SMB share or a DFS namespace, users only see the files, folders and links they're allowed to read; everything else is hidden from them.
- Access control mode
Whether people can read Log Analytics data through their rights on individual resources depends on this workspace setting. Since March 2019 new workspaces default to the option that honours resource-context Azure RBAC as well as workspace rights; the stricter choice demands explicit access to the workspace or its tables.
- Access package assignment manager
An entitlement management role, scoped to a catalog, whose holders can add users to or remove them from access packages that already exist. They cannot create or change the packages themselves or the policies attached to them.
- Account Operators
A built-in group allowed to create and manage most user, group and computer accounts, except those of administrators. Microsoft advises leaving it without members.
- AcrQuarantineWriter
Azure Container Registry built-in role belonging to the quarantine feature: it lets an identity push quarantined images and update their quarantine status. It has nothing to do with signing.