Built-in role that manages networking resources through Microsoft.Network/*. Flow logs and Traffic Analytics also need storage, Log Analytics workspace and DCR actions, which this role does not include.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Network Contributor in context, with comparison tables and the common traps.
Terms in this definition
- Role
How an actor normally or expectedly behaves, or the part a person takes in a process. A single actor may hold more than one role.
- Flow
The unit of work inside a Lakeflow pipeline that takes data from a source, transforms it and lands it in a destination like a streaming table. Streaming flows either append or update, and
CREATE FLOWlets you declare a flow apart from the table it feeds. - Traffic Analytics
Using NSG or VNet flow logs, this Network Watcher feature reveals traffic patterns and top talkers. Rule evaluation is outside its scope.
- General-purpose v1
The older storage account kind (
Storage), which lacks access tiers, Archive and premium file shares and retires on 13 October 2026. Converting to ZRS requires first upgrading to GPv2, a one-way change. - Log Analytics workspace
Where Azure Monitor keeps log data for querying with KQL. Microsoft Sentinel, VM insights and workspace-based Application Insights all depend on one.
- Data collection rule
Rule in Azure Monitor specifying what the Azure Monitor Agent or Logs Ingestion API gathers (XPath event filters, for example), any transformation applied, and the destination.
Related terms
- join/action permission
Network Contributor has this Azure RBAC action but Reader does not. It allows an identity to attach one resource to another, such as associating a firewall with a subnet, public IP or firewall policy.
- Microsoft.Network
Namespace of the Azure resource provider for networking, covering VNets, NSGs, Network Watcher and more. Network Contributor is granted its actions.