detection.wiki

Azure Batch Azure-Microsoft.Batch

operationNameDescriptionSampleRule
anyCatch-all for Azure-Microsoft.Batch rules that match the resource provider but no specific operation.NN
Microsoft.Batch/batchAccounts/applications/deleteDeletes an applicationNN
Microsoft.Batch/batchAccounts/applications/versions/activate/actionActivates an application packageNN
Microsoft.Batch/batchAccounts/applications/versions/deleteDeletes an application packageNN
Microsoft.Batch/batchAccounts/applications/versions/writeCreates a new application package or updates an existing application packageNN
Microsoft.Batch/batchAccounts/applications/writeCreates a new application or updates an existing applicationNN
Microsoft.Batch/batchAccounts/computePools/computeNodes/deallocate/actionDeallocate a Compute NodeNN
Microsoft.Batch/batchAccounts/computePools/computeNodes/reboot/actionReboot a Compute NodeNN
Microsoft.Batch/batchAccounts/computePools/computeNodes/reimage/actionReimage a Compute NodeNN
Microsoft.Batch/batchAccounts/computePools/computeNodes/remove/actionRemove a Compute Node from a Compute PoolNN
Microsoft.Batch/batchAccounts/computePools/computeNodes/start/actionStart a Compute NodeNN
Microsoft.Batch/batchAccounts/computePools/computeNodes/writeUpdates an existing Compute NodeNN
Microsoft.Batch/batchAccounts/computePools/deleteDeletes a Compute Pool from a Batch AccountNN
Microsoft.Batch/batchAccounts/computePools/writeCreates a new Compute Pool on a Batch Account or updates an existing Compute PoolNN
Microsoft.Batch/batchAccounts/deleteDeletes a Batch accountYN
Microsoft.Batch/batchAccounts/joinPerimeter/actionDetermines if the user is allowed to associate a Batch account with a Network Security PerimeterNN
Microsoft.Batch/batchAccounts/listkeys/actionLists access keys for a Batch accountNN
Microsoft.Batch/batchAccounts/networkSecurityPerimeterAssociationProxies/deleteDeletes the NSP association proxy on a Batch accountNN
Microsoft.Batch/batchAccounts/networkSecurityPerimeterAssociationProxies/writeCreates or updates the NSP association proxy on a Batch accountNN
Microsoft.Batch/batchAccounts/networkSecurityPerimeterConfigurations/reconcile/actionReconciles the NSP association on a Batch account to sync up with the latest configuration from the NSP control planeNN
Microsoft.Batch/batchAccounts/pools/deleteDeletes a pool from a Batch accountNN
Microsoft.Batch/batchAccounts/pools/disableAutoscale/actionDisables automatic scaling for a Batch account poolNN
Microsoft.Batch/batchAccounts/pools/stopResize/actionStops an ongoing resize operation on a Batch account poolNN
Microsoft.Batch/batchAccounts/pools/writeCreates a new pool on a Batch account or updates an existing poolNN
Microsoft.Batch/batchAccounts/privateEndpointConnectionProxies/deleteDelete a Private endpoint connection proxy on a Batch accountNN
Microsoft.Batch/batchAccounts/privateEndpointConnectionProxies/validate/actionValidates a Private endpoint connection proxy on a Batch accountNN
Microsoft.Batch/batchAccounts/privateEndpointConnectionProxies/writeCreate a new Private endpoint connection proxy on a Batch accountNN
Microsoft.Batch/batchAccounts/privateEndpointConnections/deleteDelete a Private endpoint connection on a Batch accountNN
Microsoft.Batch/batchAccounts/privateEndpointConnections/writeUpdate an existing Private endpoint connection on a Batch accountNN
Microsoft.Batch/batchAccounts/providers/Microsoft.Insights/diagnosticSettings/writeCreates or updates the diagnostic setting for the resourceNN
Microsoft.Batch/batchAccounts/regeneratekeys/actionRegenerates access keys for a Batch accountNN
Microsoft.Batch/batchAccounts/syncAutoStorageKeys/actionSynchronizes access keys for the auto storage account configured for a Batch accountNN
Microsoft.Batch/batchAccounts/writeCreates a new Batch account or updates an existing Batch accountYN
Microsoft.Batch/locations/checkNameAvailability/actionChecks that the account name is valid and not in use.NN
Microsoft.Batch/locations/notifyNetworkSecurityPerimeterUpdatesAvailable/actionNotifies the NSP updates available at the given locationNN
Microsoft.Batch/register/actionRegisters the subscription for the Batch Resource Provider and enables the creation of Batch accountsYN
Microsoft.Batch/unregister/actionUnregisters the subscription for the Batch Resource Provider preventing the creation of Batch accountsNN

any: Azure Batch (catch-all)

#
Namespace
Microsoft.Batch

Description

Catch-all for Azure-Microsoft.Batch rules that match the resource provider but no specific operation.

Microsoft.Batch/batchAccounts/applications/delete

#
Namespace
Microsoft.Batch

Description

Deletes an application

Microsoft.Batch/batchAccounts/applications/versions/activate/action

#
Namespace
Microsoft.Batch

Description

Activates an application package

Microsoft.Batch/batchAccounts/applications/versions/delete

#
Namespace
Microsoft.Batch

Description

Deletes an application package

Microsoft.Batch/batchAccounts/applications/versions/write

#
Namespace
Microsoft.Batch

Description

Creates a new application package or updates an existing application package

Microsoft.Batch/batchAccounts/applications/write

#
Namespace
Microsoft.Batch

Description

Creates a new application or updates an existing application

Microsoft.Batch/batchAccounts/computePools/computeNodes/deallocate/action

#
Namespace
Microsoft.Batch

Description

Deallocate a Compute Node

Microsoft.Batch/batchAccounts/computePools/computeNodes/reboot/action

#
Namespace
Microsoft.Batch

Description

Reboot a Compute Node

Microsoft.Batch/batchAccounts/computePools/computeNodes/reimage/action

#
Namespace
Microsoft.Batch

Description

Reimage a Compute Node

Microsoft.Batch/batchAccounts/computePools/computeNodes/remove/action

#
Namespace
Microsoft.Batch

Description

Remove a Compute Node from a Compute Pool

Microsoft.Batch/batchAccounts/computePools/computeNodes/start/action

#
Namespace
Microsoft.Batch

Description

Start a Compute Node

Microsoft.Batch/batchAccounts/computePools/computeNodes/write

#
Namespace
Microsoft.Batch

Description

Updates an existing Compute Node

Microsoft.Batch/batchAccounts/computePools/delete

#
Namespace
Microsoft.Batch

Description

Deletes a Compute Pool from a Batch Account

Microsoft.Batch/batchAccounts/computePools/write

#
Namespace
Microsoft.Batch

Description

Creates a new Compute Pool on a Batch Account or updates an existing Compute Pool

Microsoft.Batch/batchAccounts/delete

#
Namespace
Microsoft.Batch

Description

Deletes a Batch account

Example Resource Log Record #

{
  "ActivityStatusValue": "Success",
  "Authorization": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.Batch/batchAccounts/dwhpb9531ad",
    "action": "Microsoft.Batch/batchAccounts/delete",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Authorization_d": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.Batch/batchAccounts/dwhpb9531ad",
    "action": "Microsoft.Batch/batchAccounts/delete",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Caller": "adminuser@example.onmicrosoft.com",
  "CallerIpAddress": "203.0.113.10",
  "CategoryValue": "Administrative",
  "Claims": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783041418",
    "nbf": "1783041418",
    "exp": "1783045937",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "aio": "AXQAi/8cAAAAFIBIEdHXWN3pylNjmPLeQhWfcQ14ANLMkCfF9E8NqZtiUHdHNiO4QKChB+m3872z7F73QjwZK8qIldMrqscbefkaL+FBLWCt9JK9djz/ONZSfAxBzNSQV2uzP3xMJVD4RnM7NXOM1v57WDtsGbmO1g==",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "idtyp": "user",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "puid": "1111111111111111",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com",
    "uti": "tUdFU6nO4UmtUjpbHDqEAA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "3 5",
    "xms_ftd": "Jy-cEgg_SioO6K76SbtPp6tIHeVnjtpmAf1GT_VpKMsBdXNzb3V0aC1kc21z",
    "xms_idrel": "1 6",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282"
  },
  "Claims_d": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783041418",
    "nbf": "1783041418",
    "exp": "1783045937",
    "aio": "AXQAi/8cAAAAFIBIEdHXWN3pylNjmPLeQhWfcQ14ANLMkCfF9E8NqZtiUHdHNiO4QKChB+m3872z7F73QjwZK8qIldMrqscbefkaL+FBLWCt9JK9djz/ONZSfAxBzNSQV2uzP3xMJVD4RnM7NXOM1v57WDtsGbmO1g==",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "idtyp": "user",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "uti": "tUdFU6nO4UmtUjpbHDqEAA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "3 5",
    "xms_ftd": "Jy-cEgg_SioO6K76SbtPp6tIHeVnjtpmAf1GT_VpKMsBdXNzb3V0aC1kc21z",
    "xms_idrel": "1 6",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "puid": "1111111111111111",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com"
  },
  "CorrelationId": "00bd4dad-0fb1-4771-a6f4-2bff3f4e3684",
  "EventDataId": "3af9a6c1-d918-055c-fcd6-d68270a7eaf0",
  "EventSubmissionTimestamp": "2026-07-03T01:41:51.6667955Z",
  "HTTPRequest": {
    "clientIpAddress": "203.0.113.10"
  },
  "Hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
  "Level": "Information",
  "OperationNameValue": "MICROSOFT.BATCH/BATCHACCOUNTS/DELETE",
  "Properties": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/resourcegroups/rg-logcapture-gen/providers/Microsoft.Batch/batchAccounts/dwhpb9531ad",
    "message": "Microsoft.Batch/batchAccounts/delete",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "3af9a6c1-d918-055c-fcd6-d68270a7eaf0",
    "eventSubmissionTimestamp": "2026-07-03T01:41:51.6667955Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resource": "dwhpb9531ad",
    "resourceGroup": "rg-logcapture-gen",
    "resourceProviderValue": "MICROSOFT.BATCH",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success"
  },
  "Properties_d": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/resourcegroups/rg-logcapture-gen/providers/Microsoft.Batch/batchAccounts/dwhpb9531ad",
    "message": "Microsoft.Batch/batchAccounts/delete",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "3af9a6c1-d918-055c-fcd6-d68270a7eaf0",
    "eventSubmissionTimestamp": "2026-07-03T01:41:51.6667955Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resource": "dwhpb9531ad",
    "resourceGroup": "rg-logcapture-gen",
    "resourceProviderValue": "MICROSOFT.BATCH",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success"
  },
  "ResourceGroup": "rg-logcapture-gen",
  "ResourceProviderValue": "MICROSOFT.BATCH",
  "SubscriptionId": "22222222-2222-2222-2222-222222222222"
}

Microsoft.Batch/batchAccounts/joinPerimeter/action

#
Namespace
Microsoft.Batch

Description

Determines if the user is allowed to associate a Batch account with a Network Security Perimeter

Microsoft.Batch/batchAccounts/listkeys/action

#
Namespace
Microsoft.Batch

Description

Lists access keys for a Batch account

Microsoft.Batch/batchAccounts/networkSecurityPerimeterAssociationProxies/delete

#
Namespace
Microsoft.Batch

Description

Deletes the NSP association proxy on a Batch account

Microsoft.Batch/batchAccounts/networkSecurityPerimeterAssociationProxies/write

#
Namespace
Microsoft.Batch

Description

Creates or updates the NSP association proxy on a Batch account

Microsoft.Batch/batchAccounts/networkSecurityPerimeterConfigurations/reconcile/action

#
Namespace
Microsoft.Batch

Description

Reconciles the NSP association on a Batch account to sync up with the latest configuration from the NSP control plane

Microsoft.Batch/batchAccounts/pools/delete

#
Namespace
Microsoft.Batch

Description

Deletes a pool from a Batch account

Microsoft.Batch/batchAccounts/pools/disableAutoscale/action

#
Namespace
Microsoft.Batch

Description

Disables automatic scaling for a Batch account pool

Microsoft.Batch/batchAccounts/pools/stopResize/action

#
Namespace
Microsoft.Batch

Description

Stops an ongoing resize operation on a Batch account pool

Microsoft.Batch/batchAccounts/pools/write

#
Namespace
Microsoft.Batch

Description

Creates a new pool on a Batch account or updates an existing pool

Microsoft.Batch/batchAccounts/privateEndpointConnectionProxies/delete

#
Namespace
Microsoft.Batch

Description

Delete a Private endpoint connection proxy on a Batch account

Microsoft.Batch/batchAccounts/privateEndpointConnectionProxies/validate/action

#
Namespace
Microsoft.Batch

Description

Validates a Private endpoint connection proxy on a Batch account

Microsoft.Batch/batchAccounts/privateEndpointConnectionProxies/write

#
Namespace
Microsoft.Batch

Description

Create a new Private endpoint connection proxy on a Batch account

Microsoft.Batch/batchAccounts/privateEndpointConnections/delete

#
Namespace
Microsoft.Batch

Description

Delete a Private endpoint connection on a Batch account

Microsoft.Batch/batchAccounts/privateEndpointConnections/write

#
Namespace
Microsoft.Batch

Description

Update an existing Private endpoint connection on a Batch account

Microsoft.Batch/batchAccounts/providers/Microsoft.Insights/diagnosticSettings/write

#
Namespace
Microsoft.Batch

Description

Creates or updates the diagnostic setting for the resource

Microsoft.Batch/batchAccounts/regeneratekeys/action

#
Namespace
Microsoft.Batch

Description

Regenerates access keys for a Batch account

Microsoft.Batch/batchAccounts/syncAutoStorageKeys/action

#
Namespace
Microsoft.Batch

Description

Synchronizes access keys for the auto storage account configured for a Batch account

Microsoft.Batch/batchAccounts/write

#
Namespace
Microsoft.Batch

Description

Creates a new Batch account or updates an existing Batch account

Example Resource Log Record #

{
  "ActivityStatusValue": "Success",
  "Authorization": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.Batch/batchAccounts/dwhpb9531ad",
    "action": "Microsoft.Batch/batchAccounts/write",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Authorization_d": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.Batch/batchAccounts/dwhpb9531ad",
    "action": "Microsoft.Batch/batchAccounts/write",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Caller": "adminuser@example.onmicrosoft.com",
  "CallerIpAddress": "203.0.113.10",
  "CategoryValue": "Administrative",
  "Claims": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783041418",
    "nbf": "1783041418",
    "exp": "1783057277",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "aio": "AXQAi/8cAAAAFIBIEdHXWN3pylNjmPLeQhWfcQ14ANLMkCfF9E8NqZtiUHdHNiO4QKChB+m3872z7F73QjwZK8qIldMrqscbefkaL+FBLWCt9JK9djz/ONZSfAxBzNSQV2uzP3xMJVD4RnM7NXOM1v57WDtsGbmO1g==",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "idtyp": "user",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "puid": "1111111111111111",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com",
    "uti": "tUdFU6nO4UmtUjpbHDqEAA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "3 5",
    "xms_ftd": "Jy-cEgg_SioO6K76SbtPp6tIHeVnjtpmAf1GT_VpKMsBdXNzb3V0aC1kc21z",
    "xms_idrel": "1 6",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282",
    "correlationid": "1ef59136-3992-4ddd-b7de-c5431729fc34"
  },
  "Claims_d": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783041418",
    "nbf": "1783041418",
    "exp": "1783057277",
    "aio": "AXQAi/8cAAAAFIBIEdHXWN3pylNjmPLeQhWfcQ14ANLMkCfF9E8NqZtiUHdHNiO4QKChB+m3872z7F73QjwZK8qIldMrqscbefkaL+FBLWCt9JK9djz/ONZSfAxBzNSQV2uzP3xMJVD4RnM7NXOM1v57WDtsGbmO1g==",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "idtyp": "user",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "uti": "tUdFU6nO4UmtUjpbHDqEAA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "3 5",
    "xms_ftd": "Jy-cEgg_SioO6K76SbtPp6tIHeVnjtpmAf1GT_VpKMsBdXNzb3V0aC1kc21z",
    "xms_idrel": "1 6",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "correlationid": "1ef59136-3992-4ddd-b7de-c5431729fc34",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "puid": "1111111111111111",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com"
  },
  "CorrelationId": "1ef59136-3992-4ddd-b7de-c5431729fc34",
  "EventDataId": "da052109-03b2-a1f9-38b7-2a2e29106590",
  "EventSubmissionTimestamp": "2026-07-03T01:41:34.117627Z",
  "HTTPRequest": {
    "clientIpAddress": "203.0.113.10"
  },
  "Hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
  "Level": "Information",
  "OperationNameValue": "MICROSOFT.BATCH/BATCHACCOUNTS/WRITE",
  "Properties": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/resourcegroups/rg-logcapture-gen/providers/Microsoft.Batch/batchAccounts/dwhpb9531ad",
    "message": "Microsoft.Batch/batchAccounts/write",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "da052109-03b2-a1f9-38b7-2a2e29106590",
    "eventSubmissionTimestamp": "2026-07-03T01:41:34.117627Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resource": "dwhpb9531ad",
    "resourceGroup": "rg-logcapture-gen",
    "resourceProviderValue": "MICROSOFT.BATCH",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success"
  },
  "Properties_d": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/resourcegroups/rg-logcapture-gen/providers/Microsoft.Batch/batchAccounts/dwhpb9531ad",
    "message": "Microsoft.Batch/batchAccounts/write",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "da052109-03b2-a1f9-38b7-2a2e29106590",
    "eventSubmissionTimestamp": "2026-07-03T01:41:34.1176270Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resource": "dwhpb9531ad",
    "resourceGroup": "rg-logcapture-gen",
    "resourceProviderValue": "MICROSOFT.BATCH",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success"
  },
  "ResourceGroup": "rg-logcapture-gen",
  "ResourceProviderValue": "MICROSOFT.BATCH",
  "SubscriptionId": "22222222-2222-2222-2222-222222222222"
}

Microsoft.Batch/locations/checkNameAvailability/action

#
Namespace
Microsoft.Batch

Description

Checks that the account name is valid and not in use.

Microsoft.Batch/locations/notifyNetworkSecurityPerimeterUpdatesAvailable/action

#
Namespace
Microsoft.Batch

Description

Notifies the NSP updates available at the given location

Microsoft.Batch/register/action

#
Namespace
Microsoft.Batch

Description

Registers the subscription for the Batch Resource Provider and enables the creation of Batch accounts

Example Resource Log Record #

{
  "ActivityStatusValue": "Success",
  "ActivitySubstatusValue": "OK",
  "Authorization": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222",
    "action": "Microsoft.Batch/register/action",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Authorization_d": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222",
    "action": "Microsoft.Batch/register/action",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Caller": "adminuser@example.onmicrosoft.com",
  "CallerIpAddress": "203.0.113.10",
  "CategoryValue": "Administrative",
  "Claims": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783041418",
    "nbf": "1783041418",
    "exp": "1783045937",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "aio": "AXQAi/8cAAAAFIBIEdHXWN3pylNjmPLeQhWfcQ14ANLMkCfF9E8NqZtiUHdHNiO4QKChB+m3872z7F73QjwZK8qIldMrqscbefkaL+FBLWCt9JK9djz/ONZSfAxBzNSQV2uzP3xMJVD4RnM7NXOM1v57WDtsGbmO1g==",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "idtyp": "user",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "puid": "1111111111111111",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com",
    "uti": "tUdFU6nO4UmtUjpbHDqEAA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "3 5",
    "xms_ftd": "Jy-cEgg_SioO6K76SbtPp6tIHeVnjtpmAf1GT_VpKMsBdXNzb3V0aC1kc21z",
    "xms_idrel": "1 6",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282"
  },
  "Claims_d": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783041418",
    "nbf": "1783041418",
    "exp": "1783045937",
    "aio": "AXQAi/8cAAAAFIBIEdHXWN3pylNjmPLeQhWfcQ14ANLMkCfF9E8NqZtiUHdHNiO4QKChB+m3872z7F73QjwZK8qIldMrqscbefkaL+FBLWCt9JK9djz/ONZSfAxBzNSQV2uzP3xMJVD4RnM7NXOM1v57WDtsGbmO1g==",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "idtyp": "user",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "uti": "tUdFU6nO4UmtUjpbHDqEAA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "3 5",
    "xms_ftd": "Jy-cEgg_SioO6K76SbtPp6tIHeVnjtpmAf1GT_VpKMsBdXNzb3V0aC1kc21z",
    "xms_idrel": "1 6",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "puid": "1111111111111111",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com"
  },
  "CorrelationId": "f706b1ad-e8ae-467d-b1c3-e5f796449e6d",
  "EventDataId": "1be651e5-45c8-16f5-3616-9b9b06d5fde0",
  "EventSubmissionTimestamp": "2026-07-03T01:40:05.7640708Z",
  "HTTPRequest": {
    "clientIpAddress": "203.0.113.10"
  },
  "Hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
  "Level": "Information",
  "OperationNameValue": "MICROSOFT.BATCH/REGISTER/ACTION",
  "Properties": {
    "statusCode": "OK",
    "serviceRequestId": "",
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/providers/Microsoft.Batch",
    "message": "Microsoft.Batch/register/action",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "1be651e5-45c8-16f5-3616-9b9b06d5fde0",
    "eventSubmissionTimestamp": "2026-07-03T01:40:05.7640708Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resourceProviderValue": "MICROSOFT.BATCH",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success",
    "activitySubstatusValue": "OK"
  },
  "Properties_d": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/providers/Microsoft.Batch",
    "message": "Microsoft.Batch/register/action",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "1be651e5-45c8-16f5-3616-9b9b06d5fde0",
    "eventSubmissionTimestamp": "2026-07-03T01:40:05.7640708Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resourceProviderValue": "MICROSOFT.BATCH",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success",
    "statusCode": "OK",
    "serviceRequestId": "",
    "activitySubstatusValue": "OK"
  },
  "ResourceProviderValue": "MICROSOFT.BATCH",
  "SubscriptionId": "22222222-2222-2222-2222-222222222222"
}

Microsoft.Batch/unregister/action

#
Namespace
Microsoft.Batch

Description

Unregisters the subscription for the Batch Resource Provider preventing the creation of Batch accounts

References #