Role able to author and assign policy and initiative definitions, which is needed, for instance, to add a standard in Defender for Cloud. Contributor cannot do this because it lacks policyDefinitions/write.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Resource Policy Contributor in context, with comparison tables and the common traps.
Terms in this definition
- Role
How an actor normally or expectedly behaves, or the part a person takes in a process. A single actor may hold more than one role.
- Exclusions
Scopes taken out of a policy assignment; they can only narrow its coverage, never widen it.
- Initiative
Several Azure Policy definitions grouped together for assignment as a single unit.
- Architecture Definition Document
A key deliverable bringing together the main architecture artifacts across the four domains for every relevant state: baseline, transition and target. It sets out, in qualitative terms, what the architect intends.
- Standard deployment type
A Foundry deployment type billed per token that keeps processing of prompts and responses inside the Azure geography of the resource, meeting data residency needs at lower volumes.
- Contributor
Built-in Azure role with full management of resources, except that it can't give access to anyone.
Related terms
- Regulatory compliance standard
Defender for Cloud lets you add built-in frameworks, ISO 27001, CIS, NIST SP 800-53 or AWS Foundational Security Best Practices among them. Each is applied as an assignment of a policy initiative, so Owner or Resource Policy Contributor rights are needed.