Azure App Service Azure-Microsoft.Web

operationName	Description	Sample	Rule
any	Catch-all for Azure-Microsoft.Web rules that match the resource provider but no specific operation.	N	N
microsoft.web/apimanagementaccounts/apis/apiacls/delete	Delete Api Management Accounts APIs Apiacls.	N	N
microsoft.web/apimanagementaccounts/apis/apiacls/write	Update Api Management Accounts APIs Apiacls.	N	N
microsoft.web/apimanagementaccounts/apis/connections/confirmconsentcode/action	Confirm Consent Code Api Management Accounts APIs Connections.	N	N
microsoft.web/apimanagementaccounts/apis/connections/connectionacls/delete	Delete Api Management Accounts APIs Connections Connectionacls.	N	N
microsoft.web/apimanagementaccounts/apis/connections/connectionacls/write	Update Api Management Accounts APIs Connections Connectionacls.	N	N
microsoft.web/apimanagementaccounts/apis/connections/delete	Delete Api Management Accounts APIs Connections.	N	N
microsoft.web/apimanagementaccounts/apis/connections/getconsentlinks/action	Get Consent Links for Api Management Accounts APIs Connections.	N	N
microsoft.web/apimanagementaccounts/apis/connections/listconnectionkeys/action	List Connection Keys Api Management Accounts APIs Connections.	N	N
microsoft.web/apimanagementaccounts/apis/connections/listsecrets/action	List Secrets Api Management Accounts APIs Connections.	N	N
microsoft.web/apimanagementaccounts/apis/connections/write	Update Api Management Accounts APIs Connections.	N	N
microsoft.web/apimanagementaccounts/apis/delete	Delete Api Management Accounts APIs.	N	N
microsoft.web/apimanagementaccounts/apis/localizeddefinitions/delete	Delete Api Management Accounts APIs Localized Definitions.	N	N
microsoft.web/apimanagementaccounts/apis/localizeddefinitions/write	Update Api Management Accounts APIs Localized Definitions.	N	N
microsoft.web/apimanagementaccounts/apis/write	Update Api Management Accounts APIs.	N	N
Microsoft.Web/certificates/Delete	Delete an existing certificate.	N	N
Microsoft.Web/certificates/Write	Add a new certificate or update an existing one.	N	N
Microsoft.Web/connectionGateways/Associate/Action	Associates with a Connection Gateway.	N	N
Microsoft.Web/connectionGateways/Delete	Deletes a Connection Gateway.	N	N
Microsoft.Web/connectionGateways/Join/Action	Joins a Connection Gateway.	N	N
Microsoft.Web/connectionGateways/ListStatus/Action	Lists status of a Connection Gateway.	N	N
Microsoft.Web/connectionGateways/Move/Action	Moves a Connection Gateway.	N	N
Microsoft.Web/connectionGateways/Write	Creates or updates a Connection Gateway.	N	N
Microsoft.Web/connections/accessPolicies/Delete	Deletes Connection Access Policies.	N	N
Microsoft.Web/connections/accessPolicies/Write	Add or Update Connection Access Policies.	N	N
microsoft.web/connections/confirmconsentcode/action	Confirm Connections Consent Code.	N	N
Microsoft.Web/connections/Delete	Deletes a Connection.	Y	N
microsoft.web/connections/dynamicInvoke/action	Dynamic Invoke a Connection.	N	N
Microsoft.Web/connections/Join/Action	Joins a Connection.	N	N
microsoft.web/connections/listConnectionKeys/action	Lists API Connections Keys.	N	N
microsoft.web/connections/listconsentlinks/action	List Consent Links for Connections.	N	N
Microsoft.Web/connections/Move/Action	Moves a Connection.	N	N
microsoft.web/connections/revokeConnectionKeys/action	Revokes API Connections Keys.	N	N
Microsoft.Web/connections/Write	Creates or updates a Connection.	N	N
Microsoft.Web/connectorGateways/action	Performs an action on an Connector Gateway	N	N
Microsoft.Web/connectorGateways/connections/accessPolicies/action	Performs an action on a Connector Gateway Connection Access Policy	N	N
Microsoft.Web/connectorGateways/connections/accessPolicies/delete	Deletes an existing Connector Gateway Connection Access Policy	N	N
Microsoft.Web/connectorGateways/connections/accessPolicies/write	Creates a new Connector Gateway Connection Access Policy or updates an existing one	N	N
Microsoft.Web/connectorGateways/connections/action	Perform an action on an Connector Gateway Connection	N	N
Microsoft.Web/connectorGateways/connections/delete	Delete an existing Connector Gateway Connection	N	N
Microsoft.Web/connectorGateways/connections/write	Creates a new Connector Gateway Connection or updates an existing one	N	N
Microsoft.Web/connectorGateways/customConnectors/action	Performs an action on a Connector Gateway Custom Connector	N	N
Microsoft.Web/connectorGateways/customConnectors/delete	Deletes an existing Connector Gateway Custom Connector	N	N
Microsoft.Web/connectorGateways/customConnectors/write	Creates a new Connector Gateway Custom Connector or updates an existing one	N	N
Microsoft.Web/connectorGateways/delete	Deletes an existing Connector Gateway	N	N
Microsoft.Web/connectorGateways/mcpserverconfigs/action	Perform an action on an Connector Gateway MCP Server Config	N	N
Microsoft.Web/connectorGateways/mcpserverconfigs/delete	Delete an existing Connector Gateway MCP Server Config	N	N
Microsoft.Web/connectorGateways/mcpserverconfigs/write	Create a new Connector Gateway MCP Server Config or update an existing one	N	N
Microsoft.Web/connectorGateways/triggerconfigs/action	Perform an action on an Connector Gateway Trigger Config	N	N
Microsoft.Web/connectorGateways/triggerconfigs/delete	Delete an existing Connector Gateway Trigger Config	N	N
Microsoft.Web/connectorGateways/triggerconfigs/write	Create a new Connector Gateway Trigger Config or update an existing one	N	N
Microsoft.Web/connectorGateways/write	Creates a new Connector Gateway or updates an existing one	N	N
Microsoft.Web/containerApps/delete	Delete a Container App	N	N
Microsoft.Web/containerApps/listsecrets/action	List a Container App Secrets	N	N
Microsoft.Web/containerApps/revisions/activate/action	Activate a Container App Revision	N	N
Microsoft.Web/containerApps/revisions/deactivate/action	Deactivate a Container App Revision	N	N
Microsoft.Web/containerApps/revisions/deactivate/restart/action	Restart a Container App Revision	N	N
Microsoft.Web/containerApps/sourcecontrols/delete	Delete a Container App Source Control	N	N
Microsoft.Web/containerApps/sourcecontrols/write	Create or Update a Container App Source Control	N	N
Microsoft.Web/containerApps/write	Create a Container App or update an existing one	N	N
Microsoft.Web/customApis/Delete	Deletes a Custom API.	Y	N
Microsoft.Web/customApis/extractApiDefinitionFromWsdl/Action	Extracts API definition from a WSDL.	N	N
Microsoft.Web/customApis/Join/Action	Joins a Custom API.	N	N
Microsoft.Web/customApis/listWsdlInterfaces/Action	Lists WSDL interfaces for a Custom API.	N	N
Microsoft.Web/customApis/Move/Action	Moves a Custom API.	N	N
Microsoft.Web/customApis/Write	Creates or updates a Custom API.	N	N
Microsoft.Web/freeTrialStaticWebApps/delete	Deletes a free trial static web app.	N	N
Microsoft.Web/freeTrialStaticWebApps/upgrade/action	Upgrades a free trial static web app.	N	N
Microsoft.Web/freeTrialStaticWebApps/write	Creates or updates a free trial static web app.	N	N
Microsoft.Web/hostingEnvironments/configurations/networking/Write	Update networking configuration of an App Service Environment.	N	N
microsoft.web/hostingenvironments/configurations/write	Update Hosting Environment Configurations.	N	N
Microsoft.Web/hostingEnvironments/Delete	Delete an App Service Environment	N	N
Microsoft.Web/hostingEnvironments/eventGridFilters/delete	Delete Event Grid Filter on hosting environment.	N	N
Microsoft.Web/hostingEnvironments/eventGridFilters/write	Put Event Grid Filter on hosting environment.	N	N
Microsoft.Web/hostingEnvironments/Join/Action	Joins an App Service Environment	N	N
Microsoft.Web/hostingEnvironments/multiRolePools/Write	Create a new FrontEnd Pool in an App Service Environment or update an existing one	N	N
Microsoft.Web/hostingEnvironments/privateEndpointConnectionProxies/Delete	Delete Private Endpoint Connection Proxies	N	N
Microsoft.Web/hostingEnvironments/privateEndpointConnectionProxies/validate/action	Validate Private Endpoint Connection Proxies	N	N
Microsoft.Web/hostingEnvironments/privateEndpointConnectionProxies/Write	Create or Update Private Endpoint Connection Proxies	N	N
Microsoft.Web/hostingEnvironments/privateEndpointConnections/Delete	Delete a private endpoint connection.	N	N
Microsoft.Web/hostingEnvironments/privateEndpointConnections/Write	Approve or Reject a private endpoint connection.	N	N
Microsoft.Web/hostingEnvironments/PrivateEndpointConnectionsApproval/action	Approve Private Endpoint Connections	N	N
microsoft.web/hostingenvironments/providers/Microsoft.Insights/diagnosticSettings/write	Creates or updates the diagnostic setting for the resource	N	N
Microsoft.Web/hostingEnvironments/reboot/Action	Reboot all machines in an App Service Environment	N	N
microsoft.web/hostingenvironments/resume/action	Resume Hosting Environments.	N	N
microsoft.web/hostingenvironments/suspend/action	Suspend Hosting Environments.	N	N
Microsoft.Web/hostingEnvironments/testUpgradeAvailableNotification/Action	Send test upgrade notification for an App Service Environment	N	N
Microsoft.Web/hostingEnvironments/upgrade/Action	Upgrades an App Service Environment	N	N
Microsoft.Web/hostingEnvironments/workerPools/Write	Create a new Worker Pool in an App Service Environment or update an existing one	N	N
Microsoft.Web/hostingEnvironments/Write	Create a new App Service Environment or update existing one	N	N
Microsoft.Web/kubeEnvironments/delete	Delete a Kubernetes Environment	N	N
Microsoft.Web/kubeEnvironments/join/action	Joins a Kubernetes Environment	N	N
Microsoft.Web/kubeEnvironments/write	Create a Kubernetes Environment or update an existing one	N	N
microsoft.web/locations/deleteVirtualNetworkOrSubnets/action	Vnet or subnet deletion notification for Locations.	N	N
microsoft.web/locations/extractapidefinitionfromwsdl/action	Extract Api Definition from WSDL for Locations.	N	N
Microsoft.Web/locations/GetNetworkPolicies/action	Read Network Intent Policies	N	N
microsoft.web/locations/listwsdlinterfaces/action	List WSDL Interfaces for Locations.	N	N
Microsoft.Web/locations/managedapis/Join/Action	Joins a Managed API.	N	N
Microsoft.Web/locations/notifyNetworkSecurityPerimeterUpdatesAvailable/action	Notify Network Security Perimeter Updates.	N	N
Microsoft.Web/locations/previewstaticsiteworkflowfile/action	Preview Static Site Workflow File	N	N
microsoft.web/locations/validateDeleteVirtualNetworkOrSubnets/action	Validates deleting Vnet or subnet for Locations	N	N
microsoft.web/publishingusers/write	Update Publishing Users.	N	N
microsoft.web/register/action	Register Microsoft.Web resource provider for the subscription.	Y	N
Microsoft.Web/serverfarms/Delete	Delete an existing App Service Plan	Y	N
Microsoft.Web/serverfarms/eventGridFilters/delete	Delete Event Grid Filter on server farm.	N	N
Microsoft.Web/serverfarms/eventGridFilters/write	Put Event Grid Filter on server farm.	N	N
microsoft.web/serverfarms/firstpartyapps/keyvaultsettings/write	Create or Update App Service Plan Key Vault first party settings	N	N
microsoft.web/serverfarms/firstpartyapps/settings/delete	Delete App Service Plans First Party Apps Settings	N	N
microsoft.web/serverfarms/firstpartyapps/settings/write	Update App Service Plans First Party Apps Settings	N	N
microsoft.web/serverfarms/hybridconnectionnamespaces/relays/delete	Delete App Service Plans Hybrid Connection Namespaces Relays.	N	N
Microsoft.Web/serverfarms/Join/Action	Joins an App Service Plan	N	N
microsoft.web/serverfarms/providers/Microsoft.Insights/diagnosticSettings/write	Creates or updates the diagnostic setting for the resource	N	N
Microsoft.Web/serverfarms/restartSites/Action	Restart all Web Apps in an App Service Plan	N	N
Microsoft.Web/serverfarms/startSites/Action	Start all Apps in an App Service Plan	N	N
Microsoft.Web/serverfarms/stopSites/Action	Stop all Apps in an App Service Plan	N	N
microsoft.web/serverfarms/virtualnetworkconnections/gateways/write	Update App Service Plans Virtual Network Connections Gateways.	N	N
microsoft.web/serverfarms/virtualnetworkconnections/routes/delete	Delete App Service Plans Virtual Network Connections Routes.	N	N
microsoft.web/serverfarms/virtualnetworkconnections/routes/write	Update App Service Plans Virtual Network Connections Routes.	N	N
microsoft.web/serverfarms/workers/reboot/action	Reboot App Service Plans Workers.	N	N
Microsoft.Web/serverfarms/Write	Create a new App Service Plan or update an existing one	Y	N
Microsoft.Web/sites/applySlotConfig/Action	Apply web app slot configuration from target slot to the current web app	N	N
Microsoft.Web/sites/backup/Action	Create a new web app backup	N	N
microsoft.web/sites/backup/write	Update Web Apps Backup.	N	N
microsoft.web/sites/backups/action	Discovers an existing app backup that can be restored from a blob in Azure storage.	N	N
microsoft.web/sites/backups/delete	Delete Web Apps Backups.	N	N
microsoft.web/sites/backups/list/action	List Web Apps Backups.	N	N
microsoft.web/sites/backups/restore/action	Restore Web Apps Backups.	N	N
microsoft.web/sites/backups/write	Update Web Apps Backups.	N	N
Microsoft.Web/sites/basicPublishingCredentialsPolicies/Write	List which publishing methods are allowed for a Web App	N	N
microsoft.web/sites/config/delete	Delete Web Apps Config.	N	N
Microsoft.Web/sites/config/list/Action	List Web App's security sensitive settings, such as publishing credentials, app settings and connection strings	N	N
microsoft.web/sites/config/snapshots/listsecrets/action	Web Apps List Secrets From Snapshot.	N	N
microsoft.web/sites/config/web/appsettings/delete	Delete Web Apps App Setting	N	N
microsoft.web/sites/config/web/appsettings/write	Create or Update Web App Single App setting	N	N
microsoft.web/sites/config/web/connectionstrings/delete	Delete Web App single connection string	N	N
microsoft.web/sites/config/web/connectionstrings/write	Get Web App single App setting.	N	N
Microsoft.Web/sites/config/Write	Update Web App's configuration settings	N	N
microsoft.web/sites/containerlogs/action	Get Zipped Container Logs for Web App.	N	N
microsoft.web/sites/containerlogs/download/action	Download Web Apps Container Logs.	N	N
microsoft.web/sites/continuouswebjobs/delete	Delete Web Apps Continuous Web Jobs.	N	N
microsoft.web/sites/continuouswebjobs/start/action	Start Web Apps Continuous Web Jobs.	N	N
microsoft.web/sites/continuouswebjobs/stop/action	Stop Web Apps Continuous Web Jobs.	N	N
Microsoft.Web/sites/Delete	Delete an existing Web App	Y	N
microsoft.web/sites/deployments/delete	Delete Web Apps Deployments.	N	N
microsoft.web/sites/deployments/write	Update Web Apps Deployments.	N	N
microsoft.web/sites/deployWorkflowArtifacts/action	Create the artifacts in a Logic App.	N	N
microsoft.web/sites/diagnostics/analyses/execute/Action	Run Web Apps Diagnostics Analysis.	N	N
microsoft.web/sites/diagnostics/detectors/execute/Action	Run Web Apps Diagnostics Detector.	N	N
microsoft.web/sites/domainownershipidentifiers/delete	Delete Web Apps Domain Ownership Identifiers.	N	N
microsoft.web/sites/domainownershipidentifiers/write	Update Web Apps Domain Ownership Identifiers.	N	N
Microsoft.Web/sites/eventGridFilters/delete	Delete Event Grid Filter on web app.	N	N
Microsoft.Web/sites/eventGridFilters/write	Put Event Grid Filter on web app.	N	N
microsoft.web/sites/extensions/api/action	Invoke App Service Extensions APIs.	N	N
microsoft.web/sites/extensions/delete	Delete Web Apps Site Extensions.	N	N
microsoft.web/sites/extensions/write	Update Web Apps Site Extensions.	N	N
microsoft.web/sites/functions/action	Functions Web Apps.	N	N
microsoft.web/sites/functions/delete	Delete Web Apps Functions.	N	N
microsoft.web/sites/functions/keys/delete	Delete Function keys.	N	N
microsoft.web/sites/functions/keys/write	Update Function keys.	N	N
microsoft.web/sites/functions/listkeys/action	List Function keys.	N	N
microsoft.web/sites/functions/listsecrets/action	List Function secrets.	N	N
microsoft.web/sites/functions/write	Update Web Apps Functions.	N	N
microsoft.web/sites/host/functionkeys/delete	Delete Functions Host Function keys.	N	N
microsoft.web/sites/host/functionkeys/write	Update Functions Host Function keys.	N	N
microsoft.web/sites/host/listkeys/action	List Functions Host keys.	N	N
microsoft.web/sites/host/listsyncstatus/action	List Sync Function Triggers Status.	N	N
microsoft.web/sites/host/sync/action	Sync Function Triggers.	N	N
microsoft.web/sites/host/systemkeys/delete	Delete Functions Host System keys.	N	N
microsoft.web/sites/host/systemkeys/write	Update Functions Host System keys.	N	N
microsoft.web/sites/hostnamebindings/delete	Delete Web Apps Hostname Bindings.	N	N
microsoft.web/sites/hostnamebindings/write	Update Web Apps Hostname Bindings.	N	N
Microsoft.Web/sites/hostruntime/host/action	Perform Function App runtime action like sync triggers, add functions, invoke functions, delete functions etc.	N	Y
microsoft.web/sites/hostruntime/webhooks/api/workflows/triggers/listCallbackUrl/action	Get Web Apps Hostruntime Workflow Trigger Uri.	N	N
microsoft.web/sites/hostruntime/webhooks/api/workflows/triggers/run/action	Run Web Apps Hostruntime Workflow Trigger.	N	N
microsoft.web/sites/hybridconnection/delete	Delete Web Apps Hybrid Connection.	N	N
microsoft.web/sites/hybridconnection/write	Update Web Apps Hybrid Connection.	N	N
microsoft.web/sites/hybridconnectionnamespaces/relays/delete	Delete Web Apps Hybrid Connection Namespaces Relays.	N	N
microsoft.web/sites/hybridconnectionnamespaces/relays/listkeys/action	List Keys Web Apps Hybrid Connection Namespaces Relays.	N	N
microsoft.web/sites/hybridconnectionnamespaces/relays/write	Update Web Apps Hybrid Connection Namespaces Relays.	N	N
microsoft.web/sites/instances/deployments/delete	Delete Web Apps Instances Deployments.	N	N
microsoft.web/sites/instances/processes/delete	Delete Web Apps Instances Processes.	N	N
microsoft.web/sites/instances/processes/stop/action	Stop Web Apps Instances Processes.	N	N
Microsoft.Web/Sites/joinPerimeter/action	Determines if a user is allowed to associate an Azure Web App with a Network Security Perimeter.	N	N
microsoft.web/sites/listbackups/action	List Web App backups.	N	N
microsoft.web/sites/listsyncfunctiontriggerstatus/action	List Sync Function Trigger Status.	N	N
microsoft.web/sites/listworkflowsconnections/action	List logic app's connections by its ID in a Logic App.	N	N
microsoft.web/sites/migratemysql/action	Migrate MySQL Web Apps.	N	N
microsoft.web/sites/networkConfig/delete	Delete App Service Network Configuration.	N	N
microsoft.web/sites/networkConfig/write	Update App Service Network Configuration.	N	N
Microsoft.Web/Sites/networkSecurityPerimeterAssociationProxies/delete	Delete Web App Network Security Perimeter Association Proxies.	N	N
Microsoft.Web/Sites/networkSecurityPerimeterAssociationProxies/write	Create or Update Web App Network Security Perimeter Association Proxies.	N	N
Microsoft.Web/Sites/networkSecurityPerimeterConfigurations/action	Reconcile Web App Network Security Perimeter Configurations.	N	N
microsoft.web/sites/networktrace/action	Network Trace Web Apps.	N	N
microsoft.web/sites/newpassword/action	Newpassword Web Apps.	N	N
microsoft.web/sites/premieraddons/delete	Delete Web Apps Premier Addons.	N	N
microsoft.web/sites/premieraddons/write	Update Web Apps Premier Addons.	N	N
Microsoft.Web/sites/privateEndpointConnectionProxies/Delete	Delete Private Endpoint Connection Proxies	N	N
Microsoft.Web/sites/privateEndpointConnectionProxies/validate/action	Validate Private Endpoint Connection Proxies	N	N
Microsoft.Web/sites/privateEndpointConnectionProxies/Write	Create or Update Private Endpoint Connection Proxies	N	N
Microsoft.Web/sites/privateEndpointConnections/Delete	Delete a Private Endpoint Connection.	N	N
Microsoft.Web/sites/privateEndpointConnections/Write	Approve or Reject a private endpoint connection.	N	N
Microsoft.Web/sites/PrivateEndpointConnectionsApproval/action	Approve Private Endpoint Connections	N	N
microsoft.web/sites/providers/Microsoft.Insights/diagnosticSettings/write	Creates or updates the diagnostic setting for the resource	N	N
microsoft.web/sites/publiccertificates/delete	Delete Web Apps Public Certificates.	N	N
microsoft.web/sites/publiccertificates/write	Update Web Apps Public Certificates.	N	N
Microsoft.Web/sites/publish/Action	Publish a Web App	N	N
Microsoft.Web/sites/publishxml/Action	Get publishing profile xml for a Web App	N	N
microsoft.web/sites/recommendations/disable/action	Disable Web Apps Recommendations.	N	N
microsoft.web/sites/recover/action	Recover Web Apps.	N	N
Microsoft.Web/sites/resetSlotConfig/Action	Reset web app configuration	N	N
Microsoft.Web/sites/restart/Action	Restart a Web App	N	N
microsoft.web/sites/restore/write	Restore Web Apps.	N	N
microsoft.web/sites/restorefrombackupblob/action	Restore Web App From Backup Blob.	N	N
microsoft.web/sites/restorefromdeletedapp/action	Restore Web Apps From Deleted App.	N	N
microsoft.web/sites/restoresnapshot/action	Restore Web Apps Snapshots.	N	N
Microsoft.Web/sites/sitecontainers/Delete	Delete Sitecontainers of an existing Web App	N	N
Microsoft.Web/sites/sitecontainers/Write	Create new Sitecontainers or update existing ones for a Web App	N	N
microsoft.web/sites/siteextensions/delete	Delete Web Apps Site Extensions.	N	N
microsoft.web/sites/siteextensions/write	Update Web Apps Site Extensions.	N	N
microsoft.web/sites/slotcopy/action	Copy content from deployment slot.	N	N
Microsoft.Web/sites/slots/applySlotConfig/Action	Apply web app slot configuration from target slot to the current slot.	N	N
Microsoft.Web/sites/slots/backup/Action	Create new Web App Slot backup.	N	N
microsoft.web/sites/slots/backup/write	Update Web Apps Slots Backup.	N	N
microsoft.web/sites/slots/backups/action	Discover Web Apps Slots Backups.	N	N
microsoft.web/sites/slots/backups/delete	Delete Web Apps Slots Backups.	N	N
microsoft.web/sites/slots/backups/list/action	List Web Apps Slots Backups.	N	N
microsoft.web/sites/slots/backups/restore/action	Restore Web Apps Slots Backups.	N	N
Microsoft.Web/sites/slots/basicPublishingCredentialsPolicies/Write	List which publishing credentials are allowed for a Web App Slot	N	N
microsoft.web/sites/slots/config/appsettings/write	Create or Update Web App Slot's Single App setting	N	N
microsoft.web/sites/slots/config/delete	Delete Web Apps Slots Config.	N	N
Microsoft.Web/sites/slots/config/list/Action	List Web App Slot's security sensitive settings, such as publishing credentials, app settings and connection strings	N	N
microsoft.web/sites/slots/config/snapshots/listsecrets/action	Web Apps List Slot Secrets From Snapshot.	N	N
microsoft.web/sites/slots/config/validateupgradepath/action	Validate upgrade path for Web App.	N	N
microsoft.web/sites/slots/config/web/appsettings/delete	Delete Web App Slot's App Setting	N	N
microsoft.web/sites/slots/config/web/connectionstrings/delete	Delete Web App slot's single connection string	N	N
microsoft.web/sites/slots/config/web/connectionstrings/write	Create or Update Web App Slot's single sonnection string	N	N
Microsoft.Web/sites/slots/config/Write	Update Web App Slot's configuration settings	N	N
microsoft.web/sites/slots/containerlogs/action	Get Zipped Container Logs for Web App Slot.	N	N
microsoft.web/sites/slots/containerlogs/download/action	Download Web Apps Slots Container Logs.	N	N
microsoft.web/sites/slots/continuouswebjobs/delete	Delete Web Apps Slots Continuous Web Jobs.	N	N
microsoft.web/sites/slots/continuouswebjobs/start/action	Start Web Apps Slots Continuous Web Jobs.	N	N
microsoft.web/sites/slots/continuouswebjobs/stop/action	Stop Web Apps Slots Continuous Web Jobs.	N	N
Microsoft.Web/sites/slots/Delete	Delete an existing Web App Slot	N	N
microsoft.web/sites/slots/deployments/delete	Delete Web Apps Slots Deployments.	N	N
microsoft.web/sites/slots/deployments/write	Update Web Apps Slots Deployments.	N	N
microsoft.web/sites/slots/deployWorkflowArtifacts/action	Create the artifacts in a deployment slot in a Logic App.	N	N
microsoft.web/sites/slots/diagnostics/analyses/execute/Action	Run Web Apps Slots Diagnostics Analysis.	N	N
microsoft.web/sites/slots/diagnostics/detectors/execute/Action	Run Web Apps Slots Diagnostics Detector.	N	N
microsoft.web/sites/slots/domainownershipidentifiers/delete	Delete Web App Slots Domain Ownership Identifiers.	N	N
microsoft.web/sites/slots/domainownershipidentifiers/write	Update Web App Slots Domain Ownership Identifiers.	N	N
microsoft.web/sites/slots/extensions/api/action	Invoke App Service Slots Extensions APIs.	N	N
microsoft.web/sites/slots/extensions/write	Update Web Apps Slots Extensions.	N	N
microsoft.web/sites/slots/functions/keys/delete	Delete Function keys.	N	N
microsoft.web/sites/slots/functions/keys/write	Update Function keys.	N	N
microsoft.web/sites/slots/functions/listkeys/action	List Function keys.	N	N
microsoft.web/sites/slots/functions/listsecrets/action	List Secrets Web Apps Slots Functions.	N	N
microsoft.web/sites/slots/host/functionkeys/delete	Delete Functions Host Function keys.	N	N
microsoft.web/sites/slots/host/functionkeys/write	Update Functions Host Function keys.	N	N
microsoft.web/sites/slots/host/listkeys/action	List Functions Host keys.	N	N
microsoft.web/sites/slots/host/sync/action	Sync Function Triggers.	N	N
microsoft.web/sites/slots/host/systemkeys/delete	Delete Functions Host System keys.	N	N
microsoft.web/sites/slots/host/systemkeys/write	Update Functions Host System keys.	N	N
microsoft.web/sites/slots/hostnamebindings/delete	Delete Web Apps Slots Hostname Bindings.	N	N
microsoft.web/sites/slots/hostnamebindings/write	Update Web Apps Slots Hostname Bindings.	N	N
microsoft.web/sites/slots/hybridconnection/delete	Delete Web Apps Slots Hybrid Connection.	N	N
microsoft.web/sites/slots/hybridconnection/write	Update Web Apps Slots Hybrid Connection.	N	N
microsoft.web/sites/slots/hybridconnectionnamespaces/relays/delete	Delete Web Apps Slots Hybrid Connection Namespaces Relays.	N	N
microsoft.web/sites/slots/hybridconnectionnamespaces/relays/write	Update Web Apps Slots Hybrid Connection Namespaces Relays.	N	N
microsoft.web/sites/slots/instances/processes/delete	Delete Web Apps Slots Instances Processes.	N	N
microsoft.web/sites/slots/instances/processes/stop/action	Stop Web Apps Slots Instances Processes.	N	N
microsoft.web/sites/slots/listbackups/action	List Web App Slot backups.	N	N
microsoft.web/sites/slots/listsyncfunctiontriggerstatus/action	List Sync Function Trigger Status for deployment slot.	N	N
microsoft.web/sites/slots/listworkflowsconnections/action	List logic app's connections by its ID in a deployment slot in a Logic App.	N	N
microsoft.web/sites/slots/networkConfig/delete	Delete App Service Slots Network Configuration.	N	N
microsoft.web/sites/slots/networkConfig/write	Update App Service Slots Network Configuration.	N	N
microsoft.web/sites/slots/networktrace/action	Network Trace Web Apps Slots.	N	N
microsoft.web/sites/slots/newpassword/action	Newpassword Web Apps Slots.	N	N
microsoft.web/sites/slots/premieraddons/delete	Delete Web Apps Slots Premier Addons.	N	N
microsoft.web/sites/slots/premieraddons/write	Update Web Apps Slots Premier Addons.	N	N
microsoft.web/sites/slots/providers/Microsoft.Insights/diagnosticSettings/write	Creates or updates the diagnostic setting for the resource	N	N
microsoft.web/sites/slots/publiccertificates/delete	Delete Web Apps Slots Public Certificates.	N	N
microsoft.web/sites/slots/publiccertificates/write	Create or Update Web Apps Slots Public Certificates.	N	N
Microsoft.Web/sites/slots/publish/Action	Publish a Web App Slot	N	N
Microsoft.Web/sites/slots/publishxml/Action	Get publishing profile xml for Web App Slot	N	N
microsoft.web/sites/slots/recover/action	Recover Web Apps Slots.	N	N
Microsoft.Web/sites/slots/resetSlotConfig/Action	Reset web app slot configuration	N	N
Microsoft.Web/sites/slots/restart/Action	Restart a Web App Slot	N	N
microsoft.web/sites/slots/restore/write	Restore Web Apps Slots.	N	N
microsoft.web/sites/slots/restorefrombackupblob/action	Restore Web Apps Slot From Backup Blob.	N	N
microsoft.web/sites/slots/restorefromdeletedapp/action	Restore Web App Slots From Deleted App.	N	N
microsoft.web/sites/slots/restoresnapshot/action	Restore Web Apps Slots Snapshots.	N	N
Microsoft.Web/sites/slots/sitecontainers/Delete	Delete Sitecontainers of an existing Web App's Slot	N	N
Microsoft.Web/sites/slots/sitecontainers/Write	Create new or update existing Sitecontainers of a Web App's Slot	N	N
microsoft.web/sites/slots/siteextensions/delete	Delete Web Apps Slots Site Extensions.	N	N
microsoft.web/sites/slots/siteextensions/write	Update Web Apps Slots Site Extensions.	N	N
microsoft.web/sites/slots/slotcopy/action	Copy content from one deployment slot to another.	N	N
Microsoft.Web/sites/slots/slotsdiffs/Action	Get differences in configuration between web app and slots	N	N
Microsoft.Web/sites/slots/slotsswap/Action	Swap Web App deployment slots	N	N
Microsoft.Web/sites/slots/sourcecontrols/Delete	Delete Web App Slot's source control configuration settings	N	N
Microsoft.Web/sites/slots/sourcecontrols/Write	Update Web App Slot's source control configuration settings	N	N
Microsoft.Web/sites/slots/start/Action	Start a Web App Slot	N	N
Microsoft.Web/sites/slots/startDevSession/Action	Start Dev Session for Web App Slot	N	N
Microsoft.Web/sites/slots/stop/Action	Stop a Web App Slot	N	N
microsoft.web/sites/slots/sync/action	Sync Web Apps Slots.	N	N
microsoft.web/sites/slots/syncfunctiontriggers/action	Sync Function Triggers for deployment slot.	N	N
microsoft.web/sites/slots/triggeredwebjobs/delete	Delete Web Apps Slots Triggered WebJobs.	N	N
microsoft.web/sites/slots/triggeredwebjobs/run/action	Run Web Apps Slots Triggered WebJobs.	N	N
microsoft.web/sites/slots/virtualnetworkconnections/delete	Delete Web Apps Slots Virtual Network Connections.	N	N
microsoft.web/sites/slots/virtualnetworkconnections/gateways/write	Update Web Apps Slots Virtual Network Connections Gateways.	N	N
microsoft.web/sites/slots/virtualnetworkconnections/write	Update Web Apps Slots Virtual Network Connections.	N	N
Microsoft.Web/sites/slots/Write	Create a new Web App Slot or update an existing one	N	N
Microsoft.Web/sites/slotsdiffs/Action	Get differences in configuration between web app and slots	N	N
Microsoft.Web/sites/slotsswap/Action	Swap Web App deployment slots	N	N
Microsoft.Web/sites/sourcecontrols/Delete	Delete Web App's source control configuration settings	N	N
Microsoft.Web/sites/sourcecontrols/Write	Update Web App's source control configuration settings	N	N
Microsoft.Web/sites/start/Action	Start a Web App	N	N
Microsoft.Web/sites/startDevSession/Action	Start Dev Session for a Web App	N	N
Microsoft.Web/sites/stop/Action	Stop a Web App	N	N
microsoft.web/sites/sync/action	Sync Web Apps.	N	N
microsoft.web/sites/syncfunctiontriggers/action	Sync Function Triggers.	N	N
microsoft.web/sites/triggeredwebjobs/delete	Delete Web Apps Triggered WebJobs.	N	N
microsoft.web/sites/triggeredwebjobs/run/action	Run Web Apps Triggered WebJobs.	N	N
microsoft.web/sites/virtualnetworkconnections/delete	Delete Web Apps Virtual Network Connections.	N	N
microsoft.web/sites/virtualnetworkconnections/gateways/write	Update Web Apps Virtual Network Connections Gateways.	N	N
microsoft.web/sites/virtualnetworkconnections/write	Update Web Apps Virtual Network Connections.	N	N
Microsoft.Web/sites/Write	Create a new Web App or update an existing one	N	N
microsoft.web/sourcecontrols/write	Update Source Controls.	N	N
Microsoft.Web/staticSites/authproviders/listusers/Action	List the users for a Static Site	N	N
Microsoft.Web/staticSites/authproviders/users/Delete	Delete a user for a Static Site	N	N
Microsoft.Web/staticSites/authproviders/users/Write	Update a user for a Static Site	N	N
Microsoft.Web/staticSites/builds/config/Write	Create or update app settings for a Static Site Build	N	N
Microsoft.Web/staticSites/builds/databaseConnections/Delete	Delete a Database Connection from a Static Site Build	N	N
Microsoft.Web/staticSites/builds/databaseConnections/show/action	Show details for a Database Connection for a Static Site Build	N	N
Microsoft.Web/staticSites/builds/databaseConnections/Write	Create or Update a Database Connection with a Static Site Build	N	N
Microsoft.Web/staticSites/builds/Delete	Delete a build for a Static Site	N	N
Microsoft.Web/staticSites/builds/linkedBackends/Delete	Unlink a Backend from a Static Site Build	N	N
Microsoft.Web/staticSites/builds/linkedBackends/validate/action	Validate a Linked Backend for a Static Site Build	N	N
Microsoft.Web/staticSites/builds/linkedBackends/Write	Register a Linked Backend with a Static Site Build	N	N
Microsoft.Web/staticSites/builds/listappsettings/Action	List app settings for a Static Site Build	N	N
Microsoft.Web/staticSites/builds/listfunctionappsettings/Action	List function app settings for a Static Site Build	N	N
Microsoft.Web/staticSites/builds/showDatabaseConnections/action	Show details for Database Connections for a Static Site Build	N	N
Microsoft.Web/staticSites/builds/userProvidedFunctionApps/Delete	Detach a User Provided Function App from a Static Site Build	N	N
Microsoft.Web/staticSites/builds/userProvidedFunctionApps/Write	Register a User Provided Function App with a Static Site Build	N	N
Microsoft.Web/staticSites/builds/zipdeploy/action	Deploy a Static Site Build from zipped content	N	N
Microsoft.Web/staticSites/config/Write	Create or update app settings for a Static Site	N	N
Microsoft.Web/staticSites/createinvitation/action	Creates invitiation link for static site user for a set of roles	N	N
Microsoft.Web/staticSites/customdomains/Delete	Delete a custom domain for a Static Site	N	N
Microsoft.Web/staticSites/customdomains/validate/Action	Validate a custom domain can be added to a Static Site	N	N
Microsoft.Web/staticSites/customdomains/Write	Create a custom domain for a Static Site	N	N
Microsoft.Web/staticSites/databaseConnections/Delete	Delete a Database Connection from a Static Site	N	N
Microsoft.Web/staticSites/databaseConnections/show/action	Show details for a Database Connection for a Static Site	N	N
Microsoft.Web/staticSites/databaseConnections/Write	Create or Update a Database Connection with a Static Site	N	N
Microsoft.Web/staticSites/Delete	Delete an existing Static Site	Y	N
Microsoft.Web/staticSites/detach/Action	Detach a Static Site from the currently linked repository	N	N
Microsoft.Web/staticSites/getuser/Action	Get a user's information for a Static Site	N	N
Microsoft.Web/staticSites/linkedBackends/Delete	Unlink a Backend from a Static Site	N	N
Microsoft.Web/staticSites/linkedBackends/validate/action	Validate a Linked Backend for a Static Site	N	N
Microsoft.Web/staticSites/linkedBackends/Write	Register a Linked Backend with a Static Site	N	N
Microsoft.Web/staticSites/listappsettings/Action	List app settings for a Static Site	N	N
Microsoft.Web/staticSites/listConfiguredRoles/action	Lists the roles configured for the static site.	N	N
Microsoft.Web/staticSites/listfunctionappsettings/Action	List function app settings for a Static Site	N	N
Microsoft.Web/staticSites/listsecrets/action	List the secrets for a Static Site	N	N
Microsoft.Web/staticSites/networkConfigs/Delete	Disconnects a network configuration from a Static Site	N	N
Microsoft.Web/staticSites/networkConfigs/Write	Updates network configuration for a Static Site	N	N
Microsoft.Web/staticSites/privateEndpointConnectionProxies/Delete	Delete Private Endpoint Connection Proxies for a Static Site	N	N
Microsoft.Web/staticSites/privateEndpointConnectionProxies/validate/action	Validate Private Endpoint Connection Proxies for a Static Site	N	N
Microsoft.Web/staticSites/privateEndpointConnectionProxies/Write	Create or Update Private Endpoint Connection Proxies for a Static Site	N	N
Microsoft.Web/staticSites/privateEndpointConnections/Delete	Delete a Private Endpoint Connection for a Static Site	N	N
Microsoft.Web/staticSites/privateEndpointConnections/Write	Approve or Reject Private Endpoint Connection for a Static Site	N	N
Microsoft.Web/staticSites/publish/action	Check publish access to static web app	N	N
Microsoft.Web/staticSites/resetapikey/Action	Reset the api key for a Static Site	N	N
Microsoft.Web/staticSites/showDatabaseConnections/action	Show details for Database Connections for a Static Site	N	N
Microsoft.Web/staticSites/userProvidedFunctionApps/Delete	Detach a User Provided Function App from a Static Site	N	N
Microsoft.Web/staticSites/userProvidedFunctionApps/Write	Register a User Provided Function App with a Static Site	N	N
Microsoft.Web/staticSites/validateCustomDomainOwnership/action	Validate the custom domain ownership for a static site	N	N
Microsoft.Web/staticSites/Write	Create a new Static Site or update an existing one	Y	N
Microsoft.Web/staticSites/zipdeploy/action	Deploy a Static Site from zipped content	N	N
microsoft.web/unregister/action	Unregister Microsoft.Web resource provider for the subscription.	N	N
microsoft.web/validate/action	Validate .	N	N
microsoft.web/verifyhostingenvironmentvnet/action	Verify Hosting Environment Vnet.	N	N
Microsoft.Web/workerApps/delete	Delete a Worker App	N	N
Microsoft.Web/workerApps/write	Create a Worker App or update an existing one	N	N
Microsoft.Web/deletedSites/restore/action	Restore Deleted Web App	N	N
Microsoft.Web/locations/deletedSites/restore/action	Restore Deleted Web App at location	N	N

any: Azure App Service (catch-all)

Namespace: Microsoft.Web

Description

Catch-all for Azure-Microsoft.Web rules that match the resource provider but no specific operation.

References #

microsoft.web/apimanagementaccounts/apis/apiacls/delete

Namespace: Microsoft.Web

Description

Delete Api Management Accounts APIs Apiacls.

References #

microsoft.web/apimanagementaccounts/apis/apiacls/write

Namespace: Microsoft.Web

Description

Update Api Management Accounts APIs Apiacls.

References #

microsoft.web/apimanagementaccounts/apis/connections/confirmconsentcode/action

Namespace: Microsoft.Web

Description

Confirm Consent Code Api Management Accounts APIs Connections.

References #

microsoft.web/apimanagementaccounts/apis/connections/connectionacls/delete

Namespace: Microsoft.Web

Description

Delete Api Management Accounts APIs Connections Connectionacls.

References #

microsoft.web/apimanagementaccounts/apis/connections/connectionacls/write

Namespace: Microsoft.Web

Description

Update Api Management Accounts APIs Connections Connectionacls.

References #

microsoft.web/apimanagementaccounts/apis/connections/delete

Namespace: Microsoft.Web

Description

Delete Api Management Accounts APIs Connections.

References #

microsoft.web/apimanagementaccounts/apis/connections/getconsentlinks/action

Namespace: Microsoft.Web

Description

Get Consent Links for Api Management Accounts APIs Connections.

References #

microsoft.web/apimanagementaccounts/apis/connections/listconnectionkeys/action

Namespace: Microsoft.Web

Description

List Connection Keys Api Management Accounts APIs Connections.

References #

microsoft.web/apimanagementaccounts/apis/connections/listsecrets/action

Namespace: Microsoft.Web

Description

List Secrets Api Management Accounts APIs Connections.

References #

microsoft.web/apimanagementaccounts/apis/connections/write

Namespace: Microsoft.Web

Description

Update Api Management Accounts APIs Connections.

References #

microsoft.web/apimanagementaccounts/apis/delete

Namespace: Microsoft.Web

Description

Delete Api Management Accounts APIs.

References #

microsoft.web/apimanagementaccounts/apis/localizeddefinitions/delete

Namespace: Microsoft.Web

Description

Delete Api Management Accounts APIs Localized Definitions.

References #

microsoft.web/apimanagementaccounts/apis/localizeddefinitions/write

Namespace: Microsoft.Web

Description

Update Api Management Accounts APIs Localized Definitions.

References #

microsoft.web/apimanagementaccounts/apis/write

Namespace: Microsoft.Web

Description

Update Api Management Accounts APIs.

References #

Microsoft.Web/certificates/Delete

Namespace: Microsoft.Web

Description

Delete an existing certificate.

References #

Microsoft.Web/certificates/Write

Namespace: Microsoft.Web

Description

Add a new certificate or update an existing one.

References #

Microsoft.Web/connectionGateways/Associate/Action

Namespace: Microsoft.Web

Description

Associates with a Connection Gateway.

References #

Microsoft.Web/connectionGateways/Delete

Namespace: Microsoft.Web

Description

Deletes a Connection Gateway.

References #

Microsoft.Web/connectionGateways/Join/Action

Namespace: Microsoft.Web

Description

Joins a Connection Gateway.

References #

Microsoft.Web/connectionGateways/ListStatus/Action

Namespace: Microsoft.Web

Description

Lists status of a Connection Gateway.

References #

Microsoft.Web/connectionGateways/Move/Action

Namespace: Microsoft.Web

Description

Moves a Connection Gateway.

References #

Microsoft.Web/connectionGateways/Write

Namespace: Microsoft.Web

Description

Creates or updates a Connection Gateway.

References #

Microsoft.Web/connections/accessPolicies/Delete

Namespace: Microsoft.Web

Description

Deletes Connection Access Policies.

References #

Microsoft.Web/connections/accessPolicies/Write

Namespace: Microsoft.Web

Description

Add or Update Connection Access Policies.

References #

microsoft.web/connections/confirmconsentcode/action

Namespace: Microsoft.Web

Description

Confirm Connections Consent Code.

References #

Microsoft.Web/connections/Delete

Namespace: Microsoft.Web

Description

Deletes a Connection.

Example Resource Log Record #

{
  "TenantId": "7c759f10-811c-4db8-ad6d-f07d8ae3f8ea",
  "SourceSystem": "Azure",
  "CallerIpAddress": "37.142.150.162",
  "CategoryValue": "Administrative",
  "CorrelationId": "af709074-16dd-47b6-bf04-f159bc0a0fb1",
  "Authorization": {
    "scope": "/subscriptions/8f153238-e602-427e-a7c0-3043fbe50918/resourceGroups/BTPOC",
    "action": "Microsoft.Resources/subscriptions/resourceGroups/delete",
    "evidence": {
      "role": "Contributor",
      "roleAssignmentScope": "/subscriptions/8f153238-e602-427e-a7c0-3043fbe50918",
      "roleAssignmentId": "9ddc3bf8125f4918ad9f9dd31a0ae60f",
      "roleDefinitionId": "b24988ac618042a0ab8820f7382dd24c",
      "principalId": "9b117c67170e4aed9702658b3fddc889",
      "principalType": "User"
    }
  },
  "Authorization_d": {
    "scope": "/subscriptions/8f153238-e602-427e-a7c0-3043fbe50918/resourceGroups/BTPOC",
    "action": "Microsoft.Resources/subscriptions/resourceGroups/delete",
    "evidence": {
      "role": "Contributor",
      "roleAssignmentScope": "/subscriptions/8f153238-e602-427e-a7c0-3043fbe50918",
      "roleAssignmentId": "9ddc3bf8125f4918ad9f9dd31a0ae60f",
      "roleDefinitionId": "b24988ac618042a0ab8820f7382dd24c",
      "principalId": "9b117c67170e4aed9702658b3fddc889",
      "principalType": "User"
    }
  },
  "Claims": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/2ad3fc79-1859-42fa-9011-6f8df2251b22/",
    "iat": "1619620278",
    "nbf": "1619620278",
    "exp": "1619624178",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "aio": "ATQAy/8TAAAA7zVpz1MTiN5PcZ84YU7VvUqYvGDj8M8XljPirr2ynbiIAMHm6UVn78uuUS6hpfLV",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd",
    "appid": "c44b4083-3bb0-49c1-b47d-974e53cbdf3c",
    "appidacr": "2",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "Vance",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Adele",
    "groups": "b8ebf801-537d-4ef0-9353-545d8b161a4c,4dee65d3-7474-4a57-b550-19b1435e6fdc,dc8c1d8a-5cbe-4db7-a252-ed6e77a9bac6,72d050bc-1235-43d2-be81-4029fbfbd6c7,0d569539-ca8f-4e1b-bfbd-35e57b0d4bf1,8041dfc5-efef-4035-8241-74179adf4b9f",
    "ipaddr": "37.142.150.162",
    "name": "Adele Vance",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "9b117c67-170e-4aed-9702-658b3fddc889",
    "puid": "10032000C757D25F",
    "rh": "0.AVIAefzTKlkY-kKQEW-N8iUbIoNAS8SwO8FJtH2XTlPL3zxSAJg.",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "ZkJagYHGZD8_R8qCe2VRG3nD8dGJehXAuGi58QDeOtM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "2ad3fc79-1859-42fa-9011-6f8df2251b22",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "AdeleV@M365x816222.OnMicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "AdeleV@M365x816222.OnMicrosoft.com",
    "uti": "H9u_0K6Ph0a_X_ZpaCFwAQ",
    "ver": "1.0",
    "xms_tcdt": "1591748537"
  },
  "Claims_d": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/2ad3fc79-1859-42fa-9011-6f8df2251b22/",
    "iat": "1619620278",
    "nbf": "1619620278",
    "exp": "1619624178",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "aio": "ATQAy/8TAAAA7zVpz1MTiN5PcZ84YU7VvUqYvGDj8M8XljPirr2ynbiIAMHm6UVn78uuUS6hpfLV",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd",
    "appid": "c44b4083-3bb0-49c1-b47d-974e53cbdf3c",
    "appidacr": "2",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "Vance",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Adele",
    "groups": "b8ebf801-537d-4ef0-9353-545d8b161a4c,4dee65d3-7474-4a57-b550-19b1435e6fdc,dc8c1d8a-5cbe-4db7-a252-ed6e77a9bac6,72d050bc-1235-43d2-be81-4029fbfbd6c7,0d569539-ca8f-4e1b-bfbd-35e57b0d4bf1,8041dfc5-efef-4035-8241-74179adf4b9f",
    "ipaddr": "37.142.150.162",
    "name": "Adele Vance",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "9b117c67-170e-4aed-9702-658b3fddc889",
    "puid": "10032000C757D25F",
    "rh": "0.AVIAefzTKlkY-kKQEW-N8iUbIoNAS8SwO8FJtH2XTlPL3zxSAJg.",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "ZkJagYHGZD8_R8qCe2VRG3nD8dGJehXAuGi58QDeOtM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "2ad3fc79-1859-42fa-9011-6f8df2251b22",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "AdeleV@M365x816222.OnMicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "AdeleV@M365x816222.OnMicrosoft.com",
    "uti": "H9u_0K6Ph0a_X_ZpaCFwAQ",
    "ver": "1.0",
    "xms_tcdt": "1591748537"
  },
  "OperationNameValue": "MICROSOFT.WEB/CONNECTIONS/DELETE",
  "Properties": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/8f153238-e602-427e-a7c0-3043fbe50918/resourcegroups/BTPOC/providers/Microsoft.Web/connections/azuresentinel-Create-ReslientIncident",
    "message": "Microsoft.Web/connections/delete",
    "hierarchy": "2ad3fc79-1859-42fa-9011-6f8df2251b22/CONTOSO-MG/8f153238-e602-427e-a7c0-3043fbe50918",
    "caller": "AdeleV@M365x816222.OnMicrosoft.com",
    "eventDataId": "efcc6aed-66df-4275-af35-d193fa592064",
    "eventSubmissionTimestamp": "2021-04-28T14:44:00.7229035Z",
    "httpRequest": {
      "clientIpAddress": "37.142.150.162"
    },
    "resource": "azuresentinel-create-reslientincident",
    "resourceGroup": "BTPOC",
    "resourceProviderValue": "MICROSOFT.WEB",
    "subscriptionId": "8F153238-E602-427E-A7C0-3043FBE50918",
    "activityStatusValue": "Success"
  },
  "Properties_d": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/8f153238-e602-427e-a7c0-3043fbe50918/resourcegroups/BTPOC/providers/Microsoft.Web/connections/azuresentinel-Create-ReslientIncident",
    "message": "Microsoft.Web/connections/delete",
    "hierarchy": "2ad3fc79-1859-42fa-9011-6f8df2251b22/CONTOSO-MG/8f153238-e602-427e-a7c0-3043fbe50918",
    "caller": "AdeleV@M365x816222.OnMicrosoft.com",
    "eventDataId": "efcc6aed-66df-4275-af35-d193fa592064",
    "eventSubmissionTimestamp": "2021-04-28T14:44:00.7229035Z",
    "httpRequest": {
      "clientIpAddress": "37.142.150.162"
    },
    "resource": "azuresentinel-create-reslientincident",
    "resourceGroup": "BTPOC",
    "resourceProviderValue": "MICROSOFT.WEB",
    "subscriptionId": "8f153238-e602-427e-a7c0-3043fbe50918",
    "activityStatusValue": "Success"
  },
  "Caller": "AdeleV@M365x816222.OnMicrosoft.com",
  "EventDataId": "efcc6aed-66df-4275-af35-d193fa592064",
  "EventSubmissionTimestamp": "4/28/2021, 2:44:00.722 PM",
  "HTTPRequest": {
    "clientIpAddress": "37.142.150.162"
  },
  "ResourceGroup": "BTPOC",
  "ResourceProviderValue": "MICROSOFT.WEB",
  "ActivityStatusValue": "Success",
  "Hierarchy": "2ad3fc79-1859-42fa-9011-6f8df2251b22/CONTOSO-MG/8f153238-e602-427e-a7c0-3043fbe50918",
  "TimeGenerated": "4/28/2021, 2:44:00.722 PM",
  "SubscriptionId": "8f153238-e602-427e-a7c0-3043fbe50918",
  "Type": "AzureActivity"
}

References #

microsoft.web/connections/dynamicInvoke/action

Namespace: Microsoft.Web

Description

Dynamic Invoke a Connection.

References #

Microsoft.Web/connections/Join/Action

Namespace: Microsoft.Web

Description

Joins a Connection.

References #

microsoft.web/connections/listConnectionKeys/action

Namespace: Microsoft.Web

Description

Lists API Connections Keys.

References #

microsoft.web/connections/listconsentlinks/action

Namespace: Microsoft.Web

Description

List Consent Links for Connections.

References #

Microsoft.Web/connections/Move/Action

Namespace: Microsoft.Web

Description

Moves a Connection.

References #

microsoft.web/connections/revokeConnectionKeys/action

Namespace: Microsoft.Web

Description

Revokes API Connections Keys.

References #

Microsoft.Web/connections/Write

Namespace: Microsoft.Web

Description

Creates or updates a Connection.

References #

Microsoft.Web/connectorGateways/action

Namespace: Microsoft.Web

Description

Performs an action on an Connector Gateway

References #

Microsoft.Web/connectorGateways/connections/accessPolicies/action

Namespace: Microsoft.Web

Description

Performs an action on a Connector Gateway Connection Access Policy

References #

Microsoft.Web/connectorGateways/connections/accessPolicies/delete

Namespace: Microsoft.Web

Description

Deletes an existing Connector Gateway Connection Access Policy

References #

Microsoft.Web/connectorGateways/connections/accessPolicies/write

Namespace: Microsoft.Web

Description

Creates a new Connector Gateway Connection Access Policy or updates an existing one

References #

Microsoft.Web/connectorGateways/connections/action

Namespace: Microsoft.Web

Description

Perform an action on an Connector Gateway Connection

References #

Microsoft.Web/connectorGateways/connections/delete

Namespace: Microsoft.Web

Description

Delete an existing Connector Gateway Connection

References #

Microsoft.Web/connectorGateways/connections/write

Namespace: Microsoft.Web

Description

Creates a new Connector Gateway Connection or updates an existing one

References #

Microsoft.Web/connectorGateways/customConnectors/action

Namespace: Microsoft.Web

Description

Performs an action on a Connector Gateway Custom Connector

References #

Microsoft.Web/connectorGateways/customConnectors/delete

Namespace: Microsoft.Web

Description

Deletes an existing Connector Gateway Custom Connector

References #

Microsoft.Web/connectorGateways/customConnectors/write

Namespace: Microsoft.Web

Description

Creates a new Connector Gateway Custom Connector or updates an existing one

References #

Microsoft.Web/connectorGateways/delete

Namespace: Microsoft.Web

Description

Deletes an existing Connector Gateway

References #

Microsoft.Web/connectorGateways/mcpserverconfigs/action

Namespace: Microsoft.Web

Description

Perform an action on an Connector Gateway MCP Server Config

References #

Microsoft.Web/connectorGateways/mcpserverconfigs/delete

Namespace: Microsoft.Web

Description

Delete an existing Connector Gateway MCP Server Config

References #

Microsoft.Web/connectorGateways/mcpserverconfigs/write

Namespace: Microsoft.Web

Description

Create a new Connector Gateway MCP Server Config or update an existing one

References #

Microsoft.Web/connectorGateways/triggerconfigs/action

Namespace: Microsoft.Web

Description

Perform an action on an Connector Gateway Trigger Config

References #

Microsoft.Web/connectorGateways/triggerconfigs/delete

Namespace: Microsoft.Web

Description

Delete an existing Connector Gateway Trigger Config

References #

Microsoft.Web/connectorGateways/triggerconfigs/write

Namespace: Microsoft.Web

Description

Create a new Connector Gateway Trigger Config or update an existing one

References #

Microsoft.Web/connectorGateways/write

Namespace: Microsoft.Web

Description

Creates a new Connector Gateway or updates an existing one

References #

Microsoft.Web/containerApps/delete

Namespace: Microsoft.Web

Description

Delete a Container App

References #

Microsoft.Web/containerApps/listsecrets/action

Namespace: Microsoft.Web

Description

List a Container App Secrets

References #

Microsoft.Web/containerApps/revisions/activate/action

Namespace: Microsoft.Web

Description

Activate a Container App Revision

References #

Microsoft.Web/containerApps/revisions/deactivate/action

Namespace: Microsoft.Web

Description

Deactivate a Container App Revision

References #

Microsoft.Web/containerApps/revisions/deactivate/restart/action

Namespace: Microsoft.Web

Description

Restart a Container App Revision

References #

Microsoft.Web/containerApps/sourcecontrols/delete

Namespace: Microsoft.Web

Description

Delete a Container App Source Control

References #

Microsoft.Web/containerApps/sourcecontrols/write

Namespace: Microsoft.Web

Description

Create or Update a Container App Source Control

References #

Microsoft.Web/containerApps/write

Namespace: Microsoft.Web

Description

Create a Container App or update an existing one

References #

Microsoft.Web/customApis/Delete

Namespace: Microsoft.Web

Description

Deletes a Custom API.

Example Resource Log Record #

{
  "TenantId": "7c759f10-811c-4db8-ad6d-f07d8ae3f8ea",
  "SourceSystem": "Azure",
  "CallerIpAddress": "37.142.150.162",
  "CategoryValue": "Administrative",
  "CorrelationId": "af709074-16dd-47b6-bf04-f159bc0a0fb1",
  "Authorization": {
    "scope": "/subscriptions/8f153238-e602-427e-a7c0-3043fbe50918/resourceGroups/BTPOC",
    "action": "Microsoft.Resources/subscriptions/resourceGroups/delete",
    "evidence": {
      "role": "Contributor",
      "roleAssignmentScope": "/subscriptions/8f153238-e602-427e-a7c0-3043fbe50918",
      "roleAssignmentId": "9ddc3bf8125f4918ad9f9dd31a0ae60f",
      "roleDefinitionId": "b24988ac618042a0ab8820f7382dd24c",
      "principalId": "9b117c67170e4aed9702658b3fddc889",
      "principalType": "User"
    }
  },
  "Authorization_d": {
    "scope": "/subscriptions/8f153238-e602-427e-a7c0-3043fbe50918/resourceGroups/BTPOC",
    "action": "Microsoft.Resources/subscriptions/resourceGroups/delete",
    "evidence": {
      "role": "Contributor",
      "roleAssignmentScope": "/subscriptions/8f153238-e602-427e-a7c0-3043fbe50918",
      "roleAssignmentId": "9ddc3bf8125f4918ad9f9dd31a0ae60f",
      "roleDefinitionId": "b24988ac618042a0ab8820f7382dd24c",
      "principalId": "9b117c67170e4aed9702658b3fddc889",
      "principalType": "User"
    }
  },
  "Claims": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/2ad3fc79-1859-42fa-9011-6f8df2251b22/",
    "iat": "1619620278",
    "nbf": "1619620278",
    "exp": "1619624178",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "aio": "ATQAy/8TAAAA7zVpz1MTiN5PcZ84YU7VvUqYvGDj8M8XljPirr2ynbiIAMHm6UVn78uuUS6hpfLV",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd",
    "appid": "c44b4083-3bb0-49c1-b47d-974e53cbdf3c",
    "appidacr": "2",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "Vance",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Adele",
    "groups": "b8ebf801-537d-4ef0-9353-545d8b161a4c,4dee65d3-7474-4a57-b550-19b1435e6fdc,dc8c1d8a-5cbe-4db7-a252-ed6e77a9bac6,72d050bc-1235-43d2-be81-4029fbfbd6c7,0d569539-ca8f-4e1b-bfbd-35e57b0d4bf1,8041dfc5-efef-4035-8241-74179adf4b9f",
    "ipaddr": "37.142.150.162",
    "name": "Adele Vance",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "9b117c67-170e-4aed-9702-658b3fddc889",
    "puid": "10032000C757D25F",
    "rh": "0.AVIAefzTKlkY-kKQEW-N8iUbIoNAS8SwO8FJtH2XTlPL3zxSAJg.",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "ZkJagYHGZD8_R8qCe2VRG3nD8dGJehXAuGi58QDeOtM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "2ad3fc79-1859-42fa-9011-6f8df2251b22",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "AdeleV@M365x816222.OnMicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "AdeleV@M365x816222.OnMicrosoft.com",
    "uti": "H9u_0K6Ph0a_X_ZpaCFwAQ",
    "ver": "1.0",
    "xms_tcdt": "1591748537"
  },
  "Claims_d": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/2ad3fc79-1859-42fa-9011-6f8df2251b22/",
    "iat": "1619620278",
    "nbf": "1619620278",
    "exp": "1619624178",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "aio": "ATQAy/8TAAAA7zVpz1MTiN5PcZ84YU7VvUqYvGDj8M8XljPirr2ynbiIAMHm6UVn78uuUS6hpfLV",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd",
    "appid": "c44b4083-3bb0-49c1-b47d-974e53cbdf3c",
    "appidacr": "2",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "Vance",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Adele",
    "groups": "b8ebf801-537d-4ef0-9353-545d8b161a4c,4dee65d3-7474-4a57-b550-19b1435e6fdc,dc8c1d8a-5cbe-4db7-a252-ed6e77a9bac6,72d050bc-1235-43d2-be81-4029fbfbd6c7,0d569539-ca8f-4e1b-bfbd-35e57b0d4bf1,8041dfc5-efef-4035-8241-74179adf4b9f",
    "ipaddr": "37.142.150.162",
    "name": "Adele Vance",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "9b117c67-170e-4aed-9702-658b3fddc889",
    "puid": "10032000C757D25F",
    "rh": "0.AVIAefzTKlkY-kKQEW-N8iUbIoNAS8SwO8FJtH2XTlPL3zxSAJg.",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "ZkJagYHGZD8_R8qCe2VRG3nD8dGJehXAuGi58QDeOtM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "2ad3fc79-1859-42fa-9011-6f8df2251b22",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "AdeleV@M365x816222.OnMicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "AdeleV@M365x816222.OnMicrosoft.com",
    "uti": "H9u_0K6Ph0a_X_ZpaCFwAQ",
    "ver": "1.0",
    "xms_tcdt": "1591748537"
  },
  "OperationNameValue": "MICROSOFT.WEB/CUSTOMAPIS/DELETE",
  "Properties": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/8f153238-e602-427e-a7c0-3043fbe50918/resourcegroups/BTPOC/providers/Microsoft.Web/customApis/Resilent",
    "message": "Microsoft.Web/customApis/delete",
    "hierarchy": "2ad3fc79-1859-42fa-9011-6f8df2251b22/CONTOSO-MG/8f153238-e602-427e-a7c0-3043fbe50918",
    "caller": "AdeleV@M365x816222.OnMicrosoft.com",
    "eventDataId": "a2594dff-d22d-42c1-b1e7-37184a3f0683",
    "eventSubmissionTimestamp": "2021-04-28T14:44:00.317969Z",
    "httpRequest": {
      "clientIpAddress": "37.142.150.162"
    },
    "resource": "resilent",
    "resourceGroup": "BTPOC",
    "resourceProviderValue": "MICROSOFT.WEB",
    "subscriptionId": "8F153238-E602-427E-A7C0-3043FBE50918",
    "activityStatusValue": "Success"
  },
  "Properties_d": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/8f153238-e602-427e-a7c0-3043fbe50918/resourcegroups/BTPOC/providers/Microsoft.Web/customApis/Resilent",
    "message": "Microsoft.Web/customApis/delete",
    "hierarchy": "2ad3fc79-1859-42fa-9011-6f8df2251b22/CONTOSO-MG/8f153238-e602-427e-a7c0-3043fbe50918",
    "caller": "AdeleV@M365x816222.OnMicrosoft.com",
    "eventDataId": "a2594dff-d22d-42c1-b1e7-37184a3f0683",
    "eventSubmissionTimestamp": "2021-04-28T14:44:00.3179690Z",
    "httpRequest": {
      "clientIpAddress": "37.142.150.162"
    },
    "resource": "resilent",
    "resourceGroup": "BTPOC",
    "resourceProviderValue": "MICROSOFT.WEB",
    "subscriptionId": "8f153238-e602-427e-a7c0-3043fbe50918",
    "activityStatusValue": "Success"
  },
  "Caller": "AdeleV@M365x816222.OnMicrosoft.com",
  "EventDataId": "a2594dff-d22d-42c1-b1e7-37184a3f0683",
  "EventSubmissionTimestamp": "4/28/2021, 2:44:00.317 PM",
  "HTTPRequest": {
    "clientIpAddress": "37.142.150.162"
  },
  "ResourceGroup": "BTPOC",
  "ResourceProviderValue": "MICROSOFT.WEB",
  "ActivityStatusValue": "Success",
  "Hierarchy": "2ad3fc79-1859-42fa-9011-6f8df2251b22/CONTOSO-MG/8f153238-e602-427e-a7c0-3043fbe50918",
  "TimeGenerated": "4/28/2021, 2:44:00.317 PM",
  "SubscriptionId": "8f153238-e602-427e-a7c0-3043fbe50918",
  "Type": "AzureActivity"
}

References #

Microsoft.Web/customApis/extractApiDefinitionFromWsdl/Action

Namespace: Microsoft.Web

Description

Extracts API definition from a WSDL.

References #

Microsoft.Web/customApis/Join/Action

Namespace: Microsoft.Web

Description

Joins a Custom API.

References #

Microsoft.Web/customApis/listWsdlInterfaces/Action

Namespace: Microsoft.Web

Description

Lists WSDL interfaces for a Custom API.

References #

Microsoft.Web/customApis/Move/Action

Namespace: Microsoft.Web

Description

Moves a Custom API.

References #

Microsoft.Web/customApis/Write

Namespace: Microsoft.Web

Description

Creates or updates a Custom API.

References #

Microsoft.Web/freeTrialStaticWebApps/delete

Namespace: Microsoft.Web

Description

Deletes a free trial static web app.

References #

Microsoft.Web/freeTrialStaticWebApps/upgrade/action

Namespace: Microsoft.Web

Description

Upgrades a free trial static web app.

References #

Microsoft.Web/freeTrialStaticWebApps/write

Namespace: Microsoft.Web

Description

Creates or updates a free trial static web app.

References #

Microsoft.Web/hostingEnvironments/configurations/networking/Write

Namespace: Microsoft.Web

Description

Update networking configuration of an App Service Environment.

References #

microsoft.web/hostingenvironments/configurations/write

Namespace: Microsoft.Web

Description

Update Hosting Environment Configurations.

References #

Microsoft.Web/hostingEnvironments/Delete

Namespace: Microsoft.Web

Description

Delete an App Service Environment

References #

Microsoft.Web/hostingEnvironments/eventGridFilters/delete

Namespace: Microsoft.Web

Description

Delete Event Grid Filter on hosting environment.

References #

Microsoft.Web/hostingEnvironments/eventGridFilters/write

Namespace: Microsoft.Web

Description

Put Event Grid Filter on hosting environment.

References #

Microsoft.Web/hostingEnvironments/Join/Action

Namespace: Microsoft.Web

Description

Joins an App Service Environment

References #

Microsoft.Web/hostingEnvironments/multiRolePools/Write

Namespace: Microsoft.Web

Description

Create a new FrontEnd Pool in an App Service Environment or update an existing one

References #

Microsoft.Web/hostingEnvironments/privateEndpointConnectionProxies/Delete

Namespace: Microsoft.Web

Description

Delete Private Endpoint Connection Proxies

References #

Microsoft.Web/hostingEnvironments/privateEndpointConnectionProxies/validate/action

Namespace: Microsoft.Web

Description

Validate Private Endpoint Connection Proxies

References #

Microsoft.Web/hostingEnvironments/privateEndpointConnectionProxies/Write

Namespace: Microsoft.Web

Description

Create or Update Private Endpoint Connection Proxies

References #

Microsoft.Web/hostingEnvironments/privateEndpointConnections/Delete

Namespace: Microsoft.Web

Description

Delete a private endpoint connection.

References #

Microsoft.Web/hostingEnvironments/privateEndpointConnections/Write

Namespace: Microsoft.Web

Description

Approve or Reject a private endpoint connection.

References #

Microsoft.Web/hostingEnvironments/PrivateEndpointConnectionsApproval/action

Namespace: Microsoft.Web

Description

Approve Private Endpoint Connections

References #

microsoft.web/hostingenvironments/providers/Microsoft.Insights/diagnosticSettings/write

Namespace: Microsoft.Web

Description

Creates or updates the diagnostic setting for the resource

References #

Microsoft.Web/hostingEnvironments/reboot/Action

Namespace: Microsoft.Web

Description

Reboot all machines in an App Service Environment

References #

microsoft.web/hostingenvironments/resume/action

Namespace: Microsoft.Web

Description

Resume Hosting Environments.

References #

microsoft.web/hostingenvironments/suspend/action

Namespace: Microsoft.Web

Description

Suspend Hosting Environments.

References #

Microsoft.Web/hostingEnvironments/testUpgradeAvailableNotification/Action

Namespace: Microsoft.Web

Description

Send test upgrade notification for an App Service Environment

References #

Microsoft.Web/hostingEnvironments/upgrade/Action

Namespace: Microsoft.Web

Description

Upgrades an App Service Environment

References #

Microsoft.Web/hostingEnvironments/workerPools/Write

Namespace: Microsoft.Web

Description

Create a new Worker Pool in an App Service Environment or update an existing one

References #

Microsoft.Web/hostingEnvironments/Write

Namespace: Microsoft.Web

Description

Create a new App Service Environment or update existing one

References #

Microsoft.Web/kubeEnvironments/delete

Namespace: Microsoft.Web

Description

Delete a Kubernetes Environment

References #

Microsoft.Web/kubeEnvironments/join/action

Namespace: Microsoft.Web

Description

Joins a Kubernetes Environment

References #

Microsoft.Web/kubeEnvironments/write

Namespace: Microsoft.Web

Description

Create a Kubernetes Environment or update an existing one

References #

microsoft.web/locations/deleteVirtualNetworkOrSubnets/action

Namespace: Microsoft.Web

Description

Vnet or subnet deletion notification for Locations.

References #

microsoft.web/locations/extractapidefinitionfromwsdl/action

Namespace: Microsoft.Web

Description

Extract Api Definition from WSDL for Locations.

References #

Microsoft.Web/locations/GetNetworkPolicies/action

Namespace: Microsoft.Web

Description

Read Network Intent Policies

References #

microsoft.web/locations/listwsdlinterfaces/action

Namespace: Microsoft.Web

Description

List WSDL Interfaces for Locations.

References #

Microsoft.Web/locations/managedapis/Join/Action

Namespace: Microsoft.Web

Description

Joins a Managed API.

References #

Microsoft.Web/locations/notifyNetworkSecurityPerimeterUpdatesAvailable/action

Namespace: Microsoft.Web

Description

Notify Network Security Perimeter Updates.

References #

Microsoft.Web/locations/previewstaticsiteworkflowfile/action

Namespace: Microsoft.Web

Description

Preview Static Site Workflow File

References #

microsoft.web/locations/validateDeleteVirtualNetworkOrSubnets/action

Namespace: Microsoft.Web

Description

Validates deleting Vnet or subnet for Locations

References #

microsoft.web/publishingusers/write

Namespace: Microsoft.Web

Description

Update Publishing Users.

References #

microsoft.web/register/action

Namespace: Microsoft.Web

Description

Example Resource Log Record #

{
  "ActivityStatusValue": "Success",
  "ActivitySubstatusValue": "OK",
  "Authorization": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222",
    "action": "Microsoft.Web/register/action",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Authorization_d": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222",
    "action": "Microsoft.Web/register/action",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Caller": "adminuser@example.onmicrosoft.com",
  "CallerIpAddress": "203.0.113.10",
  "CategoryValue": "Administrative",
  "Claims": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783012099",
    "nbf": "1783012099",
    "exp": "1783017701",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "aio": "AXQAi/8cAAAAICIgGVONYdaNx/1snvX3s8KrpUMqKU1iXqIadxiu82gVEJAvHYNrOvXG+NHHfGfTck3ZHLhiYCsr3drrAIpgGkm+UY127NHbcWpDIvfua4QF6MoSbbj2Q8ekvpSlCw6WzLP3HwxTyNn70TNCRgq2Mg==",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "idtyp": "user",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "puid": "1111111111111111",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com",
    "uti": "eyUvMswr6EqJhPARR0x4AA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "5 3",
    "xms_ftd": "_yYfS1Dsz6HFh8q4mYaAf6M93yk_I-vt3b84gSLpQ4UBdXNub3J0aC1kc21z",
    "xms_idrel": "24 1",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282"
  },
  "Claims_d": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783012099",
    "nbf": "1783012099",
    "exp": "1783017701",
    "aio": "AXQAi/8cAAAAICIgGVONYdaNx/1snvX3s8KrpUMqKU1iXqIadxiu82gVEJAvHYNrOvXG+NHHfGfTck3ZHLhiYCsr3drrAIpgGkm+UY127NHbcWpDIvfua4QF6MoSbbj2Q8ekvpSlCw6WzLP3HwxTyNn70TNCRgq2Mg==",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "idtyp": "user",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "uti": "eyUvMswr6EqJhPARR0x4AA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "5 3",
    "xms_ftd": "_yYfS1Dsz6HFh8q4mYaAf6M93yk_I-vt3b84gSLpQ4UBdXNub3J0aC1kc21z",
    "xms_idrel": "24 1",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "puid": "1111111111111111",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com"
  },
  "CorrelationId": "d77d1270-e142-4ecf-982c-41db1e56da41",
  "EventDataId": "217bc897-a511-f786-858b-5cb7901df517",
  "EventSubmissionTimestamp": "2026-07-02T17:17:03.7333834Z",
  "HTTPRequest": {
    "clientIpAddress": "203.0.113.10"
  },
  "Hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
  "Level": "Information",
  "OperationNameValue": "MICROSOFT.WEB/REGISTER/ACTION",
  "Properties": {
    "statusCode": "OK",
    "serviceRequestId": "",
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/providers/Microsoft.Web",
    "message": "Microsoft.Web/register/action",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "217bc897-a511-f786-858b-5cb7901df517",
    "eventSubmissionTimestamp": "2026-07-02T17:17:03.7333834Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resourceProviderValue": "MICROSOFT.WEB",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success",
    "activitySubstatusValue": "OK"
  },
  "Properties_d": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/providers/Microsoft.Web",
    "message": "Microsoft.Web/register/action",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "217bc897-a511-f786-858b-5cb7901df517",
    "eventSubmissionTimestamp": "2026-07-02T17:17:03.7333834Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resourceProviderValue": "MICROSOFT.WEB",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success",
    "statusCode": "OK",
    "serviceRequestId": "",
    "activitySubstatusValue": "OK"
  },
  "ResourceProviderValue": "MICROSOFT.WEB",
  "SubscriptionId": "22222222-2222-2222-2222-222222222222"
}

References #

Microsoft.Web/serverfarms/Delete

Namespace: Microsoft.Web

Description

Delete an existing App Service Plan

Example Resource Log Record #

{
  "ActivityStatusValue": "Success",
  "Authorization": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.Web/serverfarms/dwh92eef0appplan",
    "action": "Microsoft.Web/serverfarms/delete",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Authorization_d": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.Web/serverfarms/dwh92eef0appplan",
    "action": "Microsoft.Web/serverfarms/delete",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Caller": "adminuser@example.onmicrosoft.com",
  "CallerIpAddress": "203.0.113.10",
  "CategoryValue": "Administrative",
  "Claims": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783012099",
    "nbf": "1783012099",
    "exp": "1783017701",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "aio": "AXQAi/8cAAAAICIgGVONYdaNx/1snvX3s8KrpUMqKU1iXqIadxiu82gVEJAvHYNrOvXG+NHHfGfTck3ZHLhiYCsr3drrAIpgGkm+UY127NHbcWpDIvfua4QF6MoSbbj2Q8ekvpSlCw6WzLP3HwxTyNn70TNCRgq2Mg==",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "idtyp": "user",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "puid": "1111111111111111",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com",
    "uti": "eyUvMswr6EqJhPARR0x4AA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "5 3",
    "xms_ftd": "_yYfS1Dsz6HFh8q4mYaAf6M93yk_I-vt3b84gSLpQ4UBdXNub3J0aC1kc21z",
    "xms_idrel": "24 1",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282"
  },
  "Claims_d": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783012099",
    "nbf": "1783012099",
    "exp": "1783017701",
    "aio": "AXQAi/8cAAAAICIgGVONYdaNx/1snvX3s8KrpUMqKU1iXqIadxiu82gVEJAvHYNrOvXG+NHHfGfTck3ZHLhiYCsr3drrAIpgGkm+UY127NHbcWpDIvfua4QF6MoSbbj2Q8ekvpSlCw6WzLP3HwxTyNn70TNCRgq2Mg==",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "idtyp": "user",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "uti": "eyUvMswr6EqJhPARR0x4AA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "5 3",
    "xms_ftd": "_yYfS1Dsz6HFh8q4mYaAf6M93yk_I-vt3b84gSLpQ4UBdXNub3J0aC1kc21z",
    "xms_idrel": "24 1",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "puid": "1111111111111111",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com"
  },
  "CorrelationId": "df3bdc41-70ab-4f0f-a039-d3f45be1a25b",
  "EventDataId": "f407f2ee-37e4-eb64-5a10-d91f560a8e8d",
  "EventSubmissionTimestamp": "2026-07-02T17:28:47.3967714Z",
  "HTTPRequest": {
    "clientIpAddress": "203.0.113.10"
  },
  "Hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
  "Level": "Information",
  "OperationNameValue": "MICROSOFT.WEB/SERVERFARMS/DELETE",
  "Properties": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/resourcegroups/rg-logcapture-gen/providers/Microsoft.Web/serverFarms/dwh92eef0appplan",
    "message": "Microsoft.Web/serverFarms/delete",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "f407f2ee-37e4-eb64-5a10-d91f560a8e8d",
    "eventSubmissionTimestamp": "2026-07-02T17:28:47.3967714Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resource": "dwh92eef0appplan",
    "resourceGroup": "rg-logcapture-gen",
    "resourceProviderValue": "MICROSOFT.WEB",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success"
  },
  "Properties_d": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/resourcegroups/rg-logcapture-gen/providers/Microsoft.Web/serverFarms/dwh92eef0appplan",
    "message": "Microsoft.Web/serverFarms/delete",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "f407f2ee-37e4-eb64-5a10-d91f560a8e8d",
    "eventSubmissionTimestamp": "2026-07-02T17:28:47.3967714Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resource": "dwh92eef0appplan",
    "resourceGroup": "rg-logcapture-gen",
    "resourceProviderValue": "MICROSOFT.WEB",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success"
  },
  "ResourceGroup": "rg-logcapture-gen",
  "ResourceProviderValue": "MICROSOFT.WEB",
  "SubscriptionId": "22222222-2222-2222-2222-222222222222"
}

References #

Microsoft.Web/serverfarms/eventGridFilters/delete

Namespace: Microsoft.Web

Description

Delete Event Grid Filter on server farm.

References #

Microsoft.Web/serverfarms/eventGridFilters/write

Namespace: Microsoft.Web

Description

Put Event Grid Filter on server farm.

References #

microsoft.web/serverfarms/firstpartyapps/keyvaultsettings/write

Namespace: Microsoft.Web

Description

Create or Update App Service Plan Key Vault first party settings

References #

microsoft.web/serverfarms/firstpartyapps/settings/delete

Namespace: Microsoft.Web

Description

Delete App Service Plans First Party Apps Settings

References #

microsoft.web/serverfarms/firstpartyapps/settings/write

Namespace: Microsoft.Web

Description

Update App Service Plans First Party Apps Settings

References #

microsoft.web/serverfarms/hybridconnectionnamespaces/relays/delete

Namespace: Microsoft.Web

Description

Delete App Service Plans Hybrid Connection Namespaces Relays.

References #

Microsoft.Web/serverfarms/Join/Action

Namespace: Microsoft.Web

Description

Joins an App Service Plan

References #

microsoft.web/serverfarms/providers/Microsoft.Insights/diagnosticSettings/write

Namespace: Microsoft.Web

Description

Creates or updates the diagnostic setting for the resource

References #

Microsoft.Web/serverfarms/restartSites/Action

Namespace: Microsoft.Web

Description

Restart all Web Apps in an App Service Plan

References #

Microsoft.Web/serverfarms/startSites/Action

Namespace: Microsoft.Web

Description

Start all Apps in an App Service Plan

References #

Microsoft.Web/serverfarms/stopSites/Action

Namespace: Microsoft.Web

Description

Stop all Apps in an App Service Plan

References #

microsoft.web/serverfarms/virtualnetworkconnections/gateways/write

Namespace: Microsoft.Web

Description

Update App Service Plans Virtual Network Connections Gateways.

References #

microsoft.web/serverfarms/virtualnetworkconnections/routes/delete

Namespace: Microsoft.Web

Description

Delete App Service Plans Virtual Network Connections Routes.

References #

microsoft.web/serverfarms/virtualnetworkconnections/routes/write

Namespace: Microsoft.Web

Description

Update App Service Plans Virtual Network Connections Routes.

References #

microsoft.web/serverfarms/workers/reboot/action

Namespace: Microsoft.Web

Description

Reboot App Service Plans Workers.

References #

Microsoft.Web/serverfarms/Write

Namespace: Microsoft.Web

Description

Create a new App Service Plan or update an existing one

Example Resource Log Record #

{
  "ActivityStatusValue": "Success",
  "ActivitySubstatusValue": "OK",
  "Authorization": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.Web/serverfarms/dwh92eef0appplan",
    "action": "Microsoft.Web/serverfarms/write",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Authorization_d": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.Web/serverfarms/dwh92eef0appplan",
    "action": "Microsoft.Web/serverfarms/write",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Caller": "adminuser@example.onmicrosoft.com",
  "CallerIpAddress": "203.0.113.10",
  "CategoryValue": "Administrative",
  "Claims": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783012099",
    "nbf": "1783012099",
    "exp": "1783017701",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "aio": "AXQAi/8cAAAAICIgGVONYdaNx/1snvX3s8KrpUMqKU1iXqIadxiu82gVEJAvHYNrOvXG+NHHfGfTck3ZHLhiYCsr3drrAIpgGkm+UY127NHbcWpDIvfua4QF6MoSbbj2Q8ekvpSlCw6WzLP3HwxTyNn70TNCRgq2Mg==",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "idtyp": "user",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "puid": "1111111111111111",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com",
    "uti": "eyUvMswr6EqJhPARR0x4AA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "5 3",
    "xms_ftd": "_yYfS1Dsz6HFh8q4mYaAf6M93yk_I-vt3b84gSLpQ4UBdXNub3J0aC1kc21z",
    "xms_idrel": "24 1",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282"
  },
  "Claims_d": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783012099",
    "nbf": "1783012099",
    "exp": "1783017701",
    "aio": "AXQAi/8cAAAAICIgGVONYdaNx/1snvX3s8KrpUMqKU1iXqIadxiu82gVEJAvHYNrOvXG+NHHfGfTck3ZHLhiYCsr3drrAIpgGkm+UY127NHbcWpDIvfua4QF6MoSbbj2Q8ekvpSlCw6WzLP3HwxTyNn70TNCRgq2Mg==",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "idtyp": "user",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "uti": "eyUvMswr6EqJhPARR0x4AA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "5 3",
    "xms_ftd": "_yYfS1Dsz6HFh8q4mYaAf6M93yk_I-vt3b84gSLpQ4UBdXNub3J0aC1kc21z",
    "xms_idrel": "24 1",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "puid": "1111111111111111",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com"
  },
  "CorrelationId": "9e625b44-bb76-4761-a3a4-dfa50496b39d",
  "EventDataId": "8349aaa6-78a7-1791-5191-76f35484f791",
  "EventSubmissionTimestamp": "2026-07-02T17:18:43.8626993Z",
  "HTTPRequest": {
    "clientIpAddress": "203.0.113.10"
  },
  "Hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
  "Level": "Information",
  "OperationNameValue": "MICROSOFT.WEB/SERVERFARMS/WRITE",
  "Properties": {
    "statusCode": "OK",
    "serviceRequestId": "",
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.Web/serverfarms/dwh92eef0appplan",
    "message": "Microsoft.Web/serverfarms/write",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "8349aaa6-78a7-1791-5191-76f35484f791",
    "eventSubmissionTimestamp": "2026-07-02T17:18:43.8626993Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resource": "dwh92eef0appplan",
    "resourceGroup": "rg-logcapture-gen",
    "resourceProviderValue": "MICROSOFT.WEB",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success",
    "activitySubstatusValue": "OK"
  },
  "Properties_d": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.Web/serverfarms/dwh92eef0appplan",
    "message": "Microsoft.Web/serverfarms/write",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "8349aaa6-78a7-1791-5191-76f35484f791",
    "eventSubmissionTimestamp": "2026-07-02T17:18:43.8626993Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resource": "dwh92eef0appplan",
    "resourceGroup": "rg-logcapture-gen",
    "resourceProviderValue": "MICROSOFT.WEB",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success",
    "statusCode": "OK",
    "serviceRequestId": "",
    "activitySubstatusValue": "OK"
  },
  "ResourceGroup": "rg-logcapture-gen",
  "ResourceProviderValue": "MICROSOFT.WEB",
  "SubscriptionId": "22222222-2222-2222-2222-222222222222"
}

References #

Microsoft.Web/sites/applySlotConfig/Action

Namespace: Microsoft.Web

Description

Apply web app slot configuration from target slot to the current web app

References #

Microsoft.Web/sites/backup/Action

Namespace: Microsoft.Web

Description

Create a new web app backup

References #

microsoft.web/sites/backup/write

Namespace: Microsoft.Web

Description

Update Web Apps Backup.

References #

microsoft.web/sites/backups/action

Namespace: Microsoft.Web

Description

Discovers an existing app backup that can be restored from a blob in Azure storage.

References #

microsoft.web/sites/backups/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Backups.

References #

microsoft.web/sites/backups/list/action

Namespace: Microsoft.Web

Description

List Web Apps Backups.

References #

microsoft.web/sites/backups/restore/action

Namespace: Microsoft.Web

Description

Restore Web Apps Backups.

References #

microsoft.web/sites/backups/write

Namespace: Microsoft.Web

Description

Update Web Apps Backups.

References #

Microsoft.Web/sites/basicPublishingCredentialsPolicies/Write

Namespace: Microsoft.Web

Description

List which publishing methods are allowed for a Web App

References #

microsoft.web/sites/config/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Config.

References #

Microsoft.Web/sites/config/list/Action

Namespace: Microsoft.Web

Description

List Web App's security sensitive settings, such as publishing credentials, app settings and connection strings

References #

microsoft.web/sites/config/snapshots/listsecrets/action

Namespace: Microsoft.Web

Description

Web Apps List Secrets From Snapshot.

References #

microsoft.web/sites/config/web/appsettings/delete

Namespace: Microsoft.Web

Description

Delete Web Apps App Setting

References #

microsoft.web/sites/config/web/appsettings/write

Namespace: Microsoft.Web

Description

Create or Update Web App Single App setting

References #

microsoft.web/sites/config/web/connectionstrings/delete

Namespace: Microsoft.Web

Description

Delete Web App single connection string

References #

microsoft.web/sites/config/web/connectionstrings/write

Namespace: Microsoft.Web

Description

Get Web App single App setting.

References #

Microsoft.Web/sites/config/Write

Namespace: Microsoft.Web

Description

Update Web App's configuration settings

References #

microsoft.web/sites/containerlogs/action

Namespace: Microsoft.Web

Description

Get Zipped Container Logs for Web App.

References #

microsoft.web/sites/containerlogs/download/action

Namespace: Microsoft.Web

Description

Download Web Apps Container Logs.

References #

microsoft.web/sites/continuouswebjobs/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Continuous Web Jobs.

References #

microsoft.web/sites/continuouswebjobs/start/action

Namespace: Microsoft.Web

Description

Start Web Apps Continuous Web Jobs.

References #

microsoft.web/sites/continuouswebjobs/stop/action

Namespace: Microsoft.Web

Description

Stop Web Apps Continuous Web Jobs.

References #

Microsoft.Web/sites/Delete

Namespace: Microsoft.Web

Description

Delete an existing Web App

Example Resource Log Record #

{
  "TenantId": "7c759f10-811c-4db8-ad6d-f07d8ae3f8ea",
  "SourceSystem": "Azure",
  "CallerIpAddress": "37.142.150.162",
  "CategoryValue": "Administrative",
  "CorrelationId": "a2bba39a-d17f-404d-9919-e59039e73ad4",
  "Authorization": {
    "scope": "/subscriptions/8f153238-e602-427e-a7c0-3043fbe50918/resourceGroups/Sentinel-MainRG/providers/Microsoft.Web/sites/Okta-new",
    "action": "Microsoft.Web/sites/delete",
    "evidence": {
      "role": "Contributor",
      "roleAssignmentScope": "/subscriptions/8f153238-e602-427e-a7c0-3043fbe50918",
      "roleAssignmentId": "9ddc3bf8125f4918ad9f9dd31a0ae60f",
      "roleDefinitionId": "b24988ac618042a0ab8820f7382dd24c",
      "principalId": "9b117c67170e4aed9702658b3fddc889",
      "principalType": "User"
    }
  },
  "Authorization_d": {
    "evidence": {
      "roleAssignmentScope": "/subscriptions/8f153238-e602-427e-a7c0-3043fbe50918",
      "roleAssignmentId": "9ddc3bf8125f4918ad9f9dd31a0ae60f",
      "roleDefinitionId": "b24988ac618042a0ab8820f7382dd24c",
      "principalType": "User",
      "principalId": "9b117c67170e4aed9702658b3fddc889",
      "role": "Contributor"
    },
    "action": "Microsoft.Web/sites/delete",
    "scope": "/subscriptions/8f153238-e602-427e-a7c0-3043fbe50918/resourceGroups/Sentinel-MainRG/providers/Microsoft.Web/sites/Okta-new"
  },
  "Claims": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/2ad3fc79-1859-42fa-9011-6f8df2251b22/",
    "iat": "1619619948",
    "nbf": "1619619948",
    "exp": "1619623848",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "aio": "ATQAy/8TAAAARk47FymlkYjF8aD5qw9R6mifAuz/IGhhTRBHWebW9HOR9MgLKM4YcDn72FFfKrZz",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd",
    "appid": "c44b4083-3bb0-49c1-b47d-974e53cbdf3c",
    "appidacr": "2",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "Vance",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Adele",
    "groups": "b8ebf801-537d-4ef0-9353-545d8b161a4c,4dee65d3-7474-4a57-b550-19b1435e6fdc,dc8c1d8a-5cbe-4db7-a252-ed6e77a9bac6,72d050bc-1235-43d2-be81-4029fbfbd6c7,0d569539-ca8f-4e1b-bfbd-35e57b0d4bf1,8041dfc5-efef-4035-8241-74179adf4b9f",
    "ipaddr": "37.142.150.162",
    "name": "Adele Vance",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "9b117c67-170e-4aed-9702-658b3fddc889",
    "puid": "10032000C757D25F",
    "rh": "0.AVIAefzTKlkY-kKQEW-N8iUbIoNAS8SwO8FJtH2XTlPL3zxSAJg.",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "ZkJagYHGZD8_R8qCe2VRG3nD8dGJehXAuGi58QDeOtM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "2ad3fc79-1859-42fa-9011-6f8df2251b22",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "AdeleV@M365x816222.OnMicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "AdeleV@M365x816222.OnMicrosoft.com",
    "uti": "thrQim_Tb0K8ZxSi9VWAAQ",
    "ver": "1.0",
    "xms_tcdt": "1591748537"
  },
  "Claims_d": {
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "ZkJagYHGZD8_R8qCe2VRG3nD8dGJehXAuGi58QDeOtM",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "9b117c67-170e-4aed-9702-658b3fddc889",
    "http://schemas.microsoft.com/identity/claims/tenantid": "2ad3fc79-1859-42fa-9011-6f8df2251b22",
    "xms_tcdt": "1591748537",
    "appidacr": "2",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "AdeleV@M365x816222.OnMicrosoft.com",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Adele",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "Vance",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "appid": "c44b4083-3bb0-49c1-b47d-974e53cbdf3c",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "nbf": "1619619948",
    "exp": "1619623848",
    "aio": "ATQAy/8TAAAARk47FymlkYjF8aD5qw9R6mifAuz/IGhhTRBHWebW9HOR9MgLKM4YcDn72FFfKrZz",
    "uti": "thrQim_Tb0K8ZxSi9VWAAQ",
    "ver": "1.0",
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/2ad3fc79-1859-42fa-9011-6f8df2251b22/",
    "iat": "1619619948",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "AdeleV@M365x816222.OnMicrosoft.com",
    "rh": "0.AVIAefzTKlkY-kKQEW-N8iUbIoNAS8SwO8FJtH2XTlPL3zxSAJg.",
    "groups": "b8ebf801-537d-4ef0-9353-545d8b161a4c,4dee65d3-7474-4a57-b550-19b1435e6fdc,dc8c1d8a-5cbe-4db7-a252-ed6e77a9bac6,72d050bc-1235-43d2-be81-4029fbfbd6c7,0d569539-ca8f-4e1b-bfbd-35e57b0d4bf1,8041dfc5-efef-4035-8241-74179adf4b9f",
    "ipaddr": "37.142.150.162",
    "name": "Adele Vance",
    "puid": "10032000C757D25F"
  },
  "OperationNameValue": "MICROSOFT.WEB/SITES/DELETE",
  "Properties": {
    "statusCode": "OK",
    "serviceRequestId": "c5b3981e-03ba-4e01-9703-1de27cb9218f",
    "eventCategory": "Administrative",
    "entity": "/subscriptions/8f153238-e602-427e-a7c0-3043fbe50918/resourceGroups/Sentinel-MainRG/providers/Microsoft.Web/sites/Okta-new",
    "message": "Microsoft.Web/sites/delete",
    "hierarchy": "2ad3fc79-1859-42fa-9011-6f8df2251b22/CONTOSO-MG/8f153238-e602-427e-a7c0-3043fbe50918",
    "caller": "AdeleV@M365x816222.OnMicrosoft.com",
    "eventDataId": "bd53ca1f-63d8-4886-9a3e-6869172bd5f2",
    "eventSubmissionTimestamp": "2021-04-28T14:31:40.3331458Z",
    "httpRequest": {
      "clientIpAddress": "37.142.150.162"
    },
    "resource": "okta-new",
    "resourceGroup": "SENTINEL-MAINRG",
    "resourceProviderValue": "MICROSOFT.WEB",
    "subscriptionId": "8F153238-E602-427E-A7C0-3043FBE50918",
    "activityStatusValue": "Success",
    "activitySubstatusValue": "OK"
  },
  "Properties_d": {
    "eventSubmissionTimestamp": "2021-04-28T14:31:40.3331458Z",
    "resourceProviderValue": "MICROSOFT.WEB",
    "activityStatusValue": "Success",
    "subscriptionId": "8f153238-e602-427e-a7c0-3043fbe50918",
    "eventCategory": "Administrative",
    "resourceGroup": "SENTINEL-MAINRG",
    "eventDataId": "bd53ca1f-63d8-4886-9a3e-6869172bd5f2",
    "httpRequest": {
      "clientIpAddress": "37.142.150.162"
    },
    "activitySubstatusValue": "OK",
    "hierarchy": "2ad3fc79-1859-42fa-9011-6f8df2251b22/CONTOSO-MG/8f153238-e602-427e-a7c0-3043fbe50918",
    "resource": "okta-new",
    "serviceRequestId": "c5b3981e-03ba-4e01-9703-1de27cb9218f",
    "message": "Microsoft.Web/sites/delete",
    "caller": "AdeleV@M365x816222.OnMicrosoft.com",
    "entity": "/subscriptions/8f153238-e602-427e-a7c0-3043fbe50918/resourceGroups/Sentinel-MainRG/providers/Microsoft.Web/sites/Okta-new",
    "statusCode": "OK"
  },
  "Caller": "AdeleV@M365x816222.OnMicrosoft.com",
  "EventDataId": "bd53ca1f-63d8-4886-9a3e-6869172bd5f2",
  "EventSubmissionTimestamp": "4/28/2021, 2:31:40.333 PM",
  "HTTPRequest": {
    "clientIpAddress": "37.142.150.162"
  },
  "ResourceGroup": "SENTINEL-MAINRG",
  "ResourceProviderValue": "MICROSOFT.WEB",
  "ActivityStatusValue": "Success",
  "ActivitySubstatusValue": "OK",
  "Hierarchy": "2ad3fc79-1859-42fa-9011-6f8df2251b22/CONTOSO-MG/8f153238-e602-427e-a7c0-3043fbe50918",
  "TimeGenerated": "4/28/2021, 2:31:40.333 PM",
  "SubscriptionId": "8f153238-e602-427e-a7c0-3043fbe50918",
  "Type": "AzureActivity"
}

References #

microsoft.web/sites/deployments/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Deployments.

References #

microsoft.web/sites/deployments/write

Namespace: Microsoft.Web

Description

Update Web Apps Deployments.

References #

microsoft.web/sites/deployWorkflowArtifacts/action

Namespace: Microsoft.Web

Description

Create the artifacts in a Logic App.

References #

microsoft.web/sites/diagnostics/analyses/execute/Action

Namespace: Microsoft.Web

Description

Run Web Apps Diagnostics Analysis.

References #

microsoft.web/sites/diagnostics/detectors/execute/Action

Namespace: Microsoft.Web

Description

Run Web Apps Diagnostics Detector.

References #

microsoft.web/sites/domainownershipidentifiers/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Domain Ownership Identifiers.

References #

microsoft.web/sites/domainownershipidentifiers/write

Namespace: Microsoft.Web

Description

Update Web Apps Domain Ownership Identifiers.

References #

Microsoft.Web/sites/eventGridFilters/delete

Namespace: Microsoft.Web

Description

Delete Event Grid Filter on web app.

References #

Microsoft.Web/sites/eventGridFilters/write

Namespace: Microsoft.Web

Description

Put Event Grid Filter on web app.

References #

microsoft.web/sites/extensions/api/action

Namespace: Microsoft.Web

Description

Invoke App Service Extensions APIs.

References #

microsoft.web/sites/extensions/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Site Extensions.

References #

microsoft.web/sites/extensions/write

Namespace: Microsoft.Web

Description

Update Web Apps Site Extensions.

References #

microsoft.web/sites/functions/action

Namespace: Microsoft.Web

Description

Functions Web Apps.

References #

microsoft.web/sites/functions/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Functions.

References #

microsoft.web/sites/functions/keys/delete

Namespace: Microsoft.Web

Description

Delete Function keys.

References #

microsoft.web/sites/functions/keys/write

Namespace: Microsoft.Web

Description

Update Function keys.

References #

microsoft.web/sites/functions/listkeys/action

Namespace: Microsoft.Web

Description

List Function keys.

References #

microsoft.web/sites/functions/listsecrets/action

Namespace: Microsoft.Web

Description

List Function secrets.

References #

microsoft.web/sites/functions/write

Namespace: Microsoft.Web

Description

Update Web Apps Functions.

References #

microsoft.web/sites/host/functionkeys/delete

Namespace: Microsoft.Web

Description

Delete Functions Host Function keys.

References #

microsoft.web/sites/host/functionkeys/write

Namespace: Microsoft.Web

Description

Update Functions Host Function keys.

References #

microsoft.web/sites/host/listkeys/action

Namespace: Microsoft.Web

Description

List Functions Host keys.

References #

microsoft.web/sites/host/listsyncstatus/action

Namespace: Microsoft.Web

Description

List Sync Function Triggers Status.

References #

microsoft.web/sites/host/sync/action

Namespace: Microsoft.Web

Description

Sync Function Triggers.

References #

microsoft.web/sites/host/systemkeys/delete

Namespace: Microsoft.Web

Description

Delete Functions Host System keys.

References #

microsoft.web/sites/host/systemkeys/write

Namespace: Microsoft.Web

Description

Update Functions Host System keys.

References #

microsoft.web/sites/hostnamebindings/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Hostname Bindings.

References #

microsoft.web/sites/hostnamebindings/write

Namespace: Microsoft.Web

Description

Update Web Apps Hostname Bindings.

References #

Microsoft.Web/sites/hostruntime/host/action

Namespace: Microsoft.Web

Description

Perform Function App runtime action like sync triggers, add functions, invoke functions, delete functions etc.

Detection Rules #

Full rule details for this event, including ATT&CK technique mappings and native queries →

Panther #

Azure Serverless Script Execution source informational: Detects when serverless resources execute PowerShell or Python scripts through Azure Automation runbook jobs or Azure Function Apps. Adversaries may abuse access to serverless resources to execute commands with inherited permissions from managed identities, RunAs accounts, or hybrid worker groups.T1059, T1651

References #

microsoft.web/sites/hostruntime/webhooks/api/workflows/triggers/listCallbackUrl/action

Namespace: Microsoft.Web

Description

Get Web Apps Hostruntime Workflow Trigger Uri.

References #

microsoft.web/sites/hostruntime/webhooks/api/workflows/triggers/run/action

Namespace: Microsoft.Web

Description

Run Web Apps Hostruntime Workflow Trigger.

References #

microsoft.web/sites/hybridconnection/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Hybrid Connection.

References #

microsoft.web/sites/hybridconnection/write

Namespace: Microsoft.Web

Description

Update Web Apps Hybrid Connection.

References #

microsoft.web/sites/hybridconnectionnamespaces/relays/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Hybrid Connection Namespaces Relays.

References #

microsoft.web/sites/hybridconnectionnamespaces/relays/listkeys/action

Namespace: Microsoft.Web

Description

List Keys Web Apps Hybrid Connection Namespaces Relays.

References #

microsoft.web/sites/hybridconnectionnamespaces/relays/write

Namespace: Microsoft.Web

Description

Update Web Apps Hybrid Connection Namespaces Relays.

References #

microsoft.web/sites/instances/deployments/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Instances Deployments.

References #

microsoft.web/sites/instances/processes/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Instances Processes.

References #

microsoft.web/sites/instances/processes/stop/action

Namespace: Microsoft.Web

Description

Stop Web Apps Instances Processes.

References #

Microsoft.Web/Sites/joinPerimeter/action

Namespace: Microsoft.Web

Description

Determines if a user is allowed to associate an Azure Web App with a Network Security Perimeter.

References #

microsoft.web/sites/listbackups/action

Namespace: Microsoft.Web

Description

List Web App backups.

References #

microsoft.web/sites/listsyncfunctiontriggerstatus/action

Namespace: Microsoft.Web

Description

List Sync Function Trigger Status.

References #

microsoft.web/sites/listworkflowsconnections/action

Namespace: Microsoft.Web

Description

List logic app's connections by its ID in a Logic App.

References #

microsoft.web/sites/migratemysql/action

Namespace: Microsoft.Web

Description

Migrate MySQL Web Apps.

References #

microsoft.web/sites/networkConfig/delete

Namespace: Microsoft.Web

Description

Delete App Service Network Configuration.

References #

microsoft.web/sites/networkConfig/write

Namespace: Microsoft.Web

Description

Update App Service Network Configuration.

References #

Microsoft.Web/Sites/networkSecurityPerimeterAssociationProxies/delete

Namespace: Microsoft.Web

Description

Delete Web App Network Security Perimeter Association Proxies.

References #

Microsoft.Web/Sites/networkSecurityPerimeterAssociationProxies/write

Namespace: Microsoft.Web

Description

Create or Update Web App Network Security Perimeter Association Proxies.

References #

Microsoft.Web/Sites/networkSecurityPerimeterConfigurations/action

Namespace: Microsoft.Web

Description

Reconcile Web App Network Security Perimeter Configurations.

References #

microsoft.web/sites/networktrace/action

Namespace: Microsoft.Web

Description

Network Trace Web Apps.

References #

microsoft.web/sites/newpassword/action

Namespace: Microsoft.Web

Description

Newpassword Web Apps.

References #

microsoft.web/sites/premieraddons/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Premier Addons.

References #

microsoft.web/sites/premieraddons/write

Namespace: Microsoft.Web

Description

Update Web Apps Premier Addons.

References #

Microsoft.Web/sites/privateEndpointConnectionProxies/Delete

Namespace: Microsoft.Web

Description

Delete Private Endpoint Connection Proxies

References #

Microsoft.Web/sites/privateEndpointConnectionProxies/validate/action

Namespace: Microsoft.Web

Description

Validate Private Endpoint Connection Proxies

References #

Microsoft.Web/sites/privateEndpointConnectionProxies/Write

Namespace: Microsoft.Web

Description

Create or Update Private Endpoint Connection Proxies

References #

Microsoft.Web/sites/privateEndpointConnections/Delete

Namespace: Microsoft.Web

Description

Delete a Private Endpoint Connection.

References #

Microsoft.Web/sites/privateEndpointConnections/Write

Namespace: Microsoft.Web

Description

Approve or Reject a private endpoint connection.

References #

Microsoft.Web/sites/PrivateEndpointConnectionsApproval/action

Namespace: Microsoft.Web

Description

Approve Private Endpoint Connections

References #

microsoft.web/sites/providers/Microsoft.Insights/diagnosticSettings/write

Namespace: Microsoft.Web

Description

Creates or updates the diagnostic setting for the resource

References #

microsoft.web/sites/publiccertificates/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Public Certificates.

References #

microsoft.web/sites/publiccertificates/write

Namespace: Microsoft.Web

Description

Update Web Apps Public Certificates.

References #

Microsoft.Web/sites/publish/Action

Namespace: Microsoft.Web

Description

Publish a Web App

References #

Microsoft.Web/sites/publishxml/Action

Namespace: Microsoft.Web

Description

Get publishing profile xml for a Web App

References #

microsoft.web/sites/recommendations/disable/action

Namespace: Microsoft.Web

Description

Disable Web Apps Recommendations.

References #

microsoft.web/sites/recover/action

Namespace: Microsoft.Web

Description

Recover Web Apps.

References #

Microsoft.Web/sites/resetSlotConfig/Action

Namespace: Microsoft.Web

Description

Reset web app configuration

References #

Microsoft.Web/sites/restart/Action

Namespace: Microsoft.Web

Description

Restart a Web App

References #

microsoft.web/sites/restore/write

Namespace: Microsoft.Web

Description

Restore Web Apps.

References #

microsoft.web/sites/restorefrombackupblob/action

Namespace: Microsoft.Web

Description

Restore Web App From Backup Blob.

References #

microsoft.web/sites/restorefromdeletedapp/action

Namespace: Microsoft.Web

Description

Restore Web Apps From Deleted App.

References #

microsoft.web/sites/restoresnapshot/action

Namespace: Microsoft.Web

Description

Restore Web Apps Snapshots.

References #

Microsoft.Web/sites/sitecontainers/Delete

Namespace: Microsoft.Web

Description

Delete Sitecontainers of an existing Web App

References #

Microsoft.Web/sites/sitecontainers/Write

Namespace: Microsoft.Web

Description

Create new Sitecontainers or update existing ones for a Web App

References #

microsoft.web/sites/siteextensions/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Site Extensions.

References #

microsoft.web/sites/siteextensions/write

Namespace: Microsoft.Web

Description

Update Web Apps Site Extensions.

References #

microsoft.web/sites/slotcopy/action

Namespace: Microsoft.Web

Description

Copy content from deployment slot.

References #

Microsoft.Web/sites/slots/applySlotConfig/Action

Namespace: Microsoft.Web

Description

Apply web app slot configuration from target slot to the current slot.

References #

Microsoft.Web/sites/slots/backup/Action

Namespace: Microsoft.Web

Description

Create new Web App Slot backup.

References #

microsoft.web/sites/slots/backup/write

Namespace: Microsoft.Web

Description

Update Web Apps Slots Backup.

References #

microsoft.web/sites/slots/backups/action

Namespace: Microsoft.Web

Description

Discover Web Apps Slots Backups.

References #

microsoft.web/sites/slots/backups/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Slots Backups.

References #

microsoft.web/sites/slots/backups/list/action

Namespace: Microsoft.Web

Description

List Web Apps Slots Backups.

References #

microsoft.web/sites/slots/backups/restore/action

Namespace: Microsoft.Web

Description

Restore Web Apps Slots Backups.

References #

Microsoft.Web/sites/slots/basicPublishingCredentialsPolicies/Write

Namespace: Microsoft.Web

Description

List which publishing credentials are allowed for a Web App Slot

References #

microsoft.web/sites/slots/config/appsettings/write

Namespace: Microsoft.Web

Description

Create or Update Web App Slot's Single App setting

References #

microsoft.web/sites/slots/config/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Slots Config.

References #

Microsoft.Web/sites/slots/config/list/Action

Namespace: Microsoft.Web

Description

List Web App Slot's security sensitive settings, such as publishing credentials, app settings and connection strings

References #

microsoft.web/sites/slots/config/snapshots/listsecrets/action

Namespace: Microsoft.Web

Description

Web Apps List Slot Secrets From Snapshot.

References #

microsoft.web/sites/slots/config/validateupgradepath/action

Namespace: Microsoft.Web

Description

Validate upgrade path for Web App.

References #

microsoft.web/sites/slots/config/web/appsettings/delete

Namespace: Microsoft.Web

Description

Delete Web App Slot's App Setting

References #

microsoft.web/sites/slots/config/web/connectionstrings/delete

Namespace: Microsoft.Web

Description

Delete Web App slot's single connection string

References #

microsoft.web/sites/slots/config/web/connectionstrings/write

Namespace: Microsoft.Web

Description

Create or Update Web App Slot's single sonnection string

References #

Microsoft.Web/sites/slots/config/Write

Namespace: Microsoft.Web

Description

Update Web App Slot's configuration settings

References #

microsoft.web/sites/slots/containerlogs/action

Namespace: Microsoft.Web

Description

Get Zipped Container Logs for Web App Slot.

References #

microsoft.web/sites/slots/containerlogs/download/action

Namespace: Microsoft.Web

Description

Download Web Apps Slots Container Logs.

References #

microsoft.web/sites/slots/continuouswebjobs/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Slots Continuous Web Jobs.

References #

microsoft.web/sites/slots/continuouswebjobs/start/action

Namespace: Microsoft.Web

Description

Start Web Apps Slots Continuous Web Jobs.

References #

microsoft.web/sites/slots/continuouswebjobs/stop/action

Namespace: Microsoft.Web

Description

Stop Web Apps Slots Continuous Web Jobs.

References #

Microsoft.Web/sites/slots/Delete

Namespace: Microsoft.Web

Description

Delete an existing Web App Slot

References #

microsoft.web/sites/slots/deployments/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Slots Deployments.

References #

microsoft.web/sites/slots/deployments/write

Namespace: Microsoft.Web

Description

Update Web Apps Slots Deployments.

References #

microsoft.web/sites/slots/deployWorkflowArtifacts/action

Namespace: Microsoft.Web

Description

Create the artifacts in a deployment slot in a Logic App.

References #

microsoft.web/sites/slots/diagnostics/analyses/execute/Action

Namespace: Microsoft.Web

Description

Run Web Apps Slots Diagnostics Analysis.

References #

microsoft.web/sites/slots/diagnostics/detectors/execute/Action

Namespace: Microsoft.Web

Description

Run Web Apps Slots Diagnostics Detector.

References #

microsoft.web/sites/slots/domainownershipidentifiers/delete

Namespace: Microsoft.Web

Description

Delete Web App Slots Domain Ownership Identifiers.

References #

microsoft.web/sites/slots/domainownershipidentifiers/write

Namespace: Microsoft.Web

Description

Update Web App Slots Domain Ownership Identifiers.

References #

microsoft.web/sites/slots/extensions/api/action

Namespace: Microsoft.Web

Description

Invoke App Service Slots Extensions APIs.

References #

microsoft.web/sites/slots/extensions/write

Namespace: Microsoft.Web

Description

Update Web Apps Slots Extensions.

References #

microsoft.web/sites/slots/functions/keys/delete

Namespace: Microsoft.Web

Description

Delete Function keys.

References #

microsoft.web/sites/slots/functions/keys/write

Namespace: Microsoft.Web

Description

Update Function keys.

References #

microsoft.web/sites/slots/functions/listkeys/action

Namespace: Microsoft.Web

Description

List Function keys.

References #

microsoft.web/sites/slots/functions/listsecrets/action

Namespace: Microsoft.Web

Description

List Secrets Web Apps Slots Functions.

References #

microsoft.web/sites/slots/host/functionkeys/delete

Namespace: Microsoft.Web

Description

Delete Functions Host Function keys.

References #

microsoft.web/sites/slots/host/functionkeys/write

Namespace: Microsoft.Web

Description

Update Functions Host Function keys.

References #

microsoft.web/sites/slots/host/listkeys/action

Namespace: Microsoft.Web

Description

List Functions Host keys.

References #

microsoft.web/sites/slots/host/sync/action

Namespace: Microsoft.Web

Description

Sync Function Triggers.

References #

microsoft.web/sites/slots/host/systemkeys/delete

Namespace: Microsoft.Web

Description

Delete Functions Host System keys.

References #

microsoft.web/sites/slots/host/systemkeys/write

Namespace: Microsoft.Web

Description

Update Functions Host System keys.

References #

microsoft.web/sites/slots/hostnamebindings/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Slots Hostname Bindings.

References #

microsoft.web/sites/slots/hostnamebindings/write

Namespace: Microsoft.Web

Description

Update Web Apps Slots Hostname Bindings.

References #

microsoft.web/sites/slots/hybridconnection/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Slots Hybrid Connection.

References #

microsoft.web/sites/slots/hybridconnection/write

Namespace: Microsoft.Web

Description

Update Web Apps Slots Hybrid Connection.

References #

microsoft.web/sites/slots/hybridconnectionnamespaces/relays/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Slots Hybrid Connection Namespaces Relays.

References #

microsoft.web/sites/slots/hybridconnectionnamespaces/relays/write

Namespace: Microsoft.Web

Description

Update Web Apps Slots Hybrid Connection Namespaces Relays.

References #

microsoft.web/sites/slots/instances/processes/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Slots Instances Processes.

References #

microsoft.web/sites/slots/instances/processes/stop/action

Namespace: Microsoft.Web

Description

Stop Web Apps Slots Instances Processes.

References #

microsoft.web/sites/slots/listbackups/action

Namespace: Microsoft.Web

Description

List Web App Slot backups.

References #

microsoft.web/sites/slots/listsyncfunctiontriggerstatus/action

Namespace: Microsoft.Web

Description

List Sync Function Trigger Status for deployment slot.

References #

microsoft.web/sites/slots/listworkflowsconnections/action

Namespace: Microsoft.Web

Description

List logic app's connections by its ID in a deployment slot in a Logic App.

References #

microsoft.web/sites/slots/networkConfig/delete

Namespace: Microsoft.Web

Description

Delete App Service Slots Network Configuration.

References #

microsoft.web/sites/slots/networkConfig/write

Namespace: Microsoft.Web

Description

Update App Service Slots Network Configuration.

References #

microsoft.web/sites/slots/networktrace/action

Namespace: Microsoft.Web

Description

Network Trace Web Apps Slots.

References #

microsoft.web/sites/slots/newpassword/action

Namespace: Microsoft.Web

Description

Newpassword Web Apps Slots.

References #

microsoft.web/sites/slots/premieraddons/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Slots Premier Addons.

References #

microsoft.web/sites/slots/premieraddons/write

Namespace: Microsoft.Web

Description

Update Web Apps Slots Premier Addons.

References #

microsoft.web/sites/slots/providers/Microsoft.Insights/diagnosticSettings/write

Namespace: Microsoft.Web

Description

Creates or updates the diagnostic setting for the resource

References #

microsoft.web/sites/slots/publiccertificates/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Slots Public Certificates.

References #

microsoft.web/sites/slots/publiccertificates/write

Namespace: Microsoft.Web

Description

Create or Update Web Apps Slots Public Certificates.

References #

Microsoft.Web/sites/slots/publish/Action

Namespace: Microsoft.Web

Description

Publish a Web App Slot

References #

Microsoft.Web/sites/slots/publishxml/Action

Namespace: Microsoft.Web

Description

Get publishing profile xml for Web App Slot

References #

microsoft.web/sites/slots/recover/action

Namespace: Microsoft.Web

Description

Recover Web Apps Slots.

References #

Microsoft.Web/sites/slots/resetSlotConfig/Action

Namespace: Microsoft.Web

Description

Reset web app slot configuration

References #

Microsoft.Web/sites/slots/restart/Action

Namespace: Microsoft.Web

Description

Restart a Web App Slot

References #

microsoft.web/sites/slots/restore/write

Namespace: Microsoft.Web

Description

Restore Web Apps Slots.

References #

microsoft.web/sites/slots/restorefrombackupblob/action

Namespace: Microsoft.Web

Description

Restore Web Apps Slot From Backup Blob.

References #

microsoft.web/sites/slots/restorefromdeletedapp/action

Namespace: Microsoft.Web

Description

Restore Web App Slots From Deleted App.

References #

microsoft.web/sites/slots/restoresnapshot/action

Namespace: Microsoft.Web

Description

Restore Web Apps Slots Snapshots.

References #

Microsoft.Web/sites/slots/sitecontainers/Delete

Namespace: Microsoft.Web

Description

Delete Sitecontainers of an existing Web App's Slot

References #

Microsoft.Web/sites/slots/sitecontainers/Write

Namespace: Microsoft.Web

Description

Create new or update existing Sitecontainers of a Web App's Slot

References #

microsoft.web/sites/slots/siteextensions/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Slots Site Extensions.

References #

microsoft.web/sites/slots/siteextensions/write

Namespace: Microsoft.Web

Description

Update Web Apps Slots Site Extensions.

References #

microsoft.web/sites/slots/slotcopy/action

Namespace: Microsoft.Web

Description

Copy content from one deployment slot to another.

References #

Microsoft.Web/sites/slots/slotsdiffs/Action

Namespace: Microsoft.Web

Description

Get differences in configuration between web app and slots

References #

Microsoft.Web/sites/slots/slotsswap/Action

Namespace: Microsoft.Web

Description

Swap Web App deployment slots

References #

Microsoft.Web/sites/slots/sourcecontrols/Delete

Namespace: Microsoft.Web

Description

Delete Web App Slot's source control configuration settings

References #

Microsoft.Web/sites/slots/sourcecontrols/Write

Namespace: Microsoft.Web

Description

Update Web App Slot's source control configuration settings

References #

Microsoft.Web/sites/slots/start/Action

Namespace: Microsoft.Web

Description

Start a Web App Slot

References #

Microsoft.Web/sites/slots/startDevSession/Action

Namespace: Microsoft.Web

Description

Start Dev Session for Web App Slot

References #

Microsoft.Web/sites/slots/stop/Action

Namespace: Microsoft.Web

Description

Stop a Web App Slot

References #

microsoft.web/sites/slots/sync/action

Namespace: Microsoft.Web

Description

Sync Web Apps Slots.

References #

microsoft.web/sites/slots/syncfunctiontriggers/action

Namespace: Microsoft.Web

Description

Sync Function Triggers for deployment slot.

References #

microsoft.web/sites/slots/triggeredwebjobs/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Slots Triggered WebJobs.

References #

microsoft.web/sites/slots/triggeredwebjobs/run/action

Namespace: Microsoft.Web

Description

Run Web Apps Slots Triggered WebJobs.

References #

microsoft.web/sites/slots/virtualnetworkconnections/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Slots Virtual Network Connections.

References #

microsoft.web/sites/slots/virtualnetworkconnections/gateways/write

Namespace: Microsoft.Web

Description

Update Web Apps Slots Virtual Network Connections Gateways.

References #

microsoft.web/sites/slots/virtualnetworkconnections/write

Namespace: Microsoft.Web

Description

Update Web Apps Slots Virtual Network Connections.

References #

Microsoft.Web/sites/slots/Write

Namespace: Microsoft.Web

Description

Create a new Web App Slot or update an existing one

References #

Microsoft.Web/sites/slotsdiffs/Action

Namespace: Microsoft.Web

Description

Get differences in configuration between web app and slots

References #

Microsoft.Web/sites/slotsswap/Action

Namespace: Microsoft.Web

Description

Swap Web App deployment slots

References #

Microsoft.Web/sites/sourcecontrols/Delete

Namespace: Microsoft.Web

Description

Delete Web App's source control configuration settings

References #

Microsoft.Web/sites/sourcecontrols/Write

Namespace: Microsoft.Web

Description

Update Web App's source control configuration settings

References #

Microsoft.Web/sites/start/Action

Namespace: Microsoft.Web

Description

Start a Web App

References #

Microsoft.Web/sites/startDevSession/Action

Namespace: Microsoft.Web

Description

Start Dev Session for a Web App

References #

Microsoft.Web/sites/stop/Action

Namespace: Microsoft.Web

Description

Stop a Web App

References #

microsoft.web/sites/sync/action

Namespace: Microsoft.Web

Description

Sync Web Apps.

References #

microsoft.web/sites/syncfunctiontriggers/action

Namespace: Microsoft.Web

Description

Sync Function Triggers.

References #

microsoft.web/sites/triggeredwebjobs/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Triggered WebJobs.

References #

microsoft.web/sites/triggeredwebjobs/run/action

Namespace: Microsoft.Web

Description

Run Web Apps Triggered WebJobs.

References #

microsoft.web/sites/virtualnetworkconnections/delete

Namespace: Microsoft.Web

Description

Delete Web Apps Virtual Network Connections.

References #

microsoft.web/sites/virtualnetworkconnections/gateways/write

Namespace: Microsoft.Web

Description

Update Web Apps Virtual Network Connections Gateways.

References #

microsoft.web/sites/virtualnetworkconnections/write

Namespace: Microsoft.Web

Description

Update Web Apps Virtual Network Connections.

References #

Microsoft.Web/sites/Write

Namespace: Microsoft.Web

Description

Create a new Web App or update an existing one

References #

microsoft.web/sourcecontrols/write

Namespace: Microsoft.Web

Description

Update Source Controls.

References #

Microsoft.Web/staticSites/authproviders/listusers/Action

Namespace: Microsoft.Web

Description

List the users for a Static Site

References #

Microsoft.Web/staticSites/authproviders/users/Delete

Namespace: Microsoft.Web

Description

Delete a user for a Static Site

References #

Microsoft.Web/staticSites/authproviders/users/Write

Namespace: Microsoft.Web

Description

Update a user for a Static Site

References #

Microsoft.Web/staticSites/builds/config/Write

Namespace: Microsoft.Web

Description

Create or update app settings for a Static Site Build

References #

Microsoft.Web/staticSites/builds/databaseConnections/Delete

Namespace: Microsoft.Web

Description

Delete a Database Connection from a Static Site Build

References #

Microsoft.Web/staticSites/builds/databaseConnections/show/action

Namespace: Microsoft.Web

Description

Show details for a Database Connection for a Static Site Build

References #

Microsoft.Web/staticSites/builds/databaseConnections/Write

Namespace: Microsoft.Web

Description

Create or Update a Database Connection with a Static Site Build

References #

Microsoft.Web/staticSites/builds/Delete

Namespace: Microsoft.Web

Description

Delete a build for a Static Site

References #

Microsoft.Web/staticSites/builds/linkedBackends/Delete

Namespace: Microsoft.Web

Description

Unlink a Backend from a Static Site Build

References #

Microsoft.Web/staticSites/builds/linkedBackends/validate/action

Namespace: Microsoft.Web

Description

Validate a Linked Backend for a Static Site Build

References #

Microsoft.Web/staticSites/builds/linkedBackends/Write

Namespace: Microsoft.Web

Description

References #

Microsoft.Web/staticSites/builds/listappsettings/Action

Namespace: Microsoft.Web

Description

List app settings for a Static Site Build

References #

Microsoft.Web/staticSites/builds/listfunctionappsettings/Action

Namespace: Microsoft.Web

Description

List function app settings for a Static Site Build

References #

Microsoft.Web/staticSites/builds/showDatabaseConnections/action

Namespace: Microsoft.Web

Description

Show details for Database Connections for a Static Site Build

References #

Microsoft.Web/staticSites/builds/userProvidedFunctionApps/Delete

Namespace: Microsoft.Web

Description

Detach a User Provided Function App from a Static Site Build

References #

Microsoft.Web/staticSites/builds/userProvidedFunctionApps/Write

Namespace: Microsoft.Web

Description

References #

Microsoft.Web/staticSites/builds/zipdeploy/action

Namespace: Microsoft.Web

Description

Deploy a Static Site Build from zipped content

References #

Microsoft.Web/staticSites/config/Write

Namespace: Microsoft.Web

Description

Create or update app settings for a Static Site

References #

Microsoft.Web/staticSites/createinvitation/action

Namespace: Microsoft.Web

Description

Creates invitiation link for static site user for a set of roles

References #

Microsoft.Web/staticSites/customdomains/Delete

Namespace: Microsoft.Web

Description

Delete a custom domain for a Static Site

References #

Microsoft.Web/staticSites/customdomains/validate/Action

Namespace: Microsoft.Web

Description

Validate a custom domain can be added to a Static Site

References #

Microsoft.Web/staticSites/customdomains/Write

Namespace: Microsoft.Web

Description

Create a custom domain for a Static Site

References #

Microsoft.Web/staticSites/databaseConnections/Delete

Namespace: Microsoft.Web

Description

Delete a Database Connection from a Static Site

References #

Microsoft.Web/staticSites/databaseConnections/show/action

Namespace: Microsoft.Web

Description

Show details for a Database Connection for a Static Site

References #

Microsoft.Web/staticSites/databaseConnections/Write

Namespace: Microsoft.Web

Description

Create or Update a Database Connection with a Static Site

References #

Microsoft.Web/staticSites/Delete

Namespace: Microsoft.Web

Description

Delete an existing Static Site

Example Resource Log Record #

{
  "ActivityStatusValue": "Success",
  "Authorization": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.Web/staticSites/dwhc6a93dstaticsite",
    "action": "Microsoft.Web/staticSites/delete",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Authorization_d": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.Web/staticSites/dwhc6a93dstaticsite",
    "action": "Microsoft.Web/staticSites/delete",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Caller": "adminuser@example.onmicrosoft.com",
  "CallerIpAddress": "203.0.113.10",
  "CategoryValue": "Administrative",
  "Claims": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783041418",
    "nbf": "1783041418",
    "exp": "1783045937",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "aio": "AXQAi/8cAAAAFIBIEdHXWN3pylNjmPLeQhWfcQ14ANLMkCfF9E8NqZtiUHdHNiO4QKChB+m3872z7F73QjwZK8qIldMrqscbefkaL+FBLWCt9JK9djz/ONZSfAxBzNSQV2uzP3xMJVD4RnM7NXOM1v57WDtsGbmO1g==",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "idtyp": "user",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "puid": "1111111111111111",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com",
    "uti": "tUdFU6nO4UmtUjpbHDqEAA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "3 5",
    "xms_ftd": "Jy-cEgg_SioO6K76SbtPp6tIHeVnjtpmAf1GT_VpKMsBdXNzb3V0aC1kc21z",
    "xms_idrel": "1 6",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282"
  },
  "Claims_d": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783041418",
    "nbf": "1783041418",
    "exp": "1783045937",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "aio": "AXQAi/8cAAAAFIBIEdHXWN3pylNjmPLeQhWfcQ14ANLMkCfF9E8NqZtiUHdHNiO4QKChB+m3872z7F73QjwZK8qIldMrqscbefkaL+FBLWCt9JK9djz/ONZSfAxBzNSQV2uzP3xMJVD4RnM7NXOM1v57WDtsGbmO1g==",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "idtyp": "user",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "puid": "1111111111111111",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com",
    "uti": "tUdFU6nO4UmtUjpbHDqEAA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "3 5",
    "xms_ftd": "Jy-cEgg_SioO6K76SbtPp6tIHeVnjtpmAf1GT_VpKMsBdXNzb3V0aC1kc21z",
    "xms_idrel": "1 6",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282"
  },
  "CorrelationId": "0acaaa56-0c0f-45b4-8a4e-a462fb8c04be",
  "EventDataId": "40ab81cd-7f69-e4bc-327b-b7b8a3eeec8c",
  "EventSubmissionTimestamp": "2026-07-03T02:16:36.6004923Z",
  "HTTPRequest": {
    "clientIpAddress": "203.0.113.10"
  },
  "Hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
  "Level": "Information",
  "OperationNameValue": "MICROSOFT.WEB/STATICSITES/DELETE",
  "Properties": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/resourcegroups/rg-logcapture-gen/providers/Microsoft.Web/staticSites/dwhc6a93dstaticsite",
    "message": "Microsoft.Web/staticSites/delete",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "40ab81cd-7f69-e4bc-327b-b7b8a3eeec8c",
    "eventSubmissionTimestamp": "2026-07-03T02:16:36.6004923Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resource": "dwhc6a93dstaticsite",
    "resourceGroup": "rg-logcapture-gen",
    "resourceProviderValue": "MICROSOFT.WEB",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success"
  },
  "Properties_d": {
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/resourcegroups/rg-logcapture-gen/providers/Microsoft.Web/staticSites/dwhc6a93dstaticsite",
    "message": "Microsoft.Web/staticSites/delete",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "40ab81cd-7f69-e4bc-327b-b7b8a3eeec8c",
    "eventSubmissionTimestamp": "2026-07-03T02:16:36.6004923Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resource": "dwhc6a93dstaticsite",
    "resourceGroup": "rg-logcapture-gen",
    "resourceProviderValue": "MICROSOFT.WEB",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success"
  },
  "ResourceGroup": "rg-logcapture-gen",
  "ResourceProviderValue": "MICROSOFT.WEB",
  "SubscriptionId": "22222222-2222-2222-2222-222222222222"
}

References #

Microsoft.Web/staticSites/detach/Action

Namespace: Microsoft.Web

Description

Detach a Static Site from the currently linked repository

References #

Microsoft.Web/staticSites/getuser/Action

Namespace: Microsoft.Web

Description

Get a user's information for a Static Site

References #

Microsoft.Web/staticSites/linkedBackends/Delete

Namespace: Microsoft.Web

Description

Unlink a Backend from a Static Site

References #

Microsoft.Web/staticSites/linkedBackends/validate/action

Namespace: Microsoft.Web

Description

Validate a Linked Backend for a Static Site

References #

Microsoft.Web/staticSites/linkedBackends/Write

Namespace: Microsoft.Web

Description

References #

Microsoft.Web/staticSites/listappsettings/Action

Namespace: Microsoft.Web

Description

List app settings for a Static Site

References #

Microsoft.Web/staticSites/listConfiguredRoles/action

Namespace: Microsoft.Web

Description

Lists the roles configured for the static site.

References #

Microsoft.Web/staticSites/listfunctionappsettings/Action

Namespace: Microsoft.Web

Description

List function app settings for a Static Site

References #

Microsoft.Web/staticSites/listsecrets/action

Namespace: Microsoft.Web

Description

List the secrets for a Static Site

References #

Microsoft.Web/staticSites/networkConfigs/Delete

Namespace: Microsoft.Web

Description

Disconnects a network configuration from a Static Site

References #

Microsoft.Web/staticSites/networkConfigs/Write

Namespace: Microsoft.Web

Description

Updates network configuration for a Static Site

References #

Microsoft.Web/staticSites/privateEndpointConnectionProxies/Delete

Namespace: Microsoft.Web

Description

Delete Private Endpoint Connection Proxies for a Static Site

References #

Microsoft.Web/staticSites/privateEndpointConnectionProxies/validate/action

Namespace: Microsoft.Web

Description

Validate Private Endpoint Connection Proxies for a Static Site

References #

Microsoft.Web/staticSites/privateEndpointConnectionProxies/Write

Namespace: Microsoft.Web

Description

Create or Update Private Endpoint Connection Proxies for a Static Site

References #

Microsoft.Web/staticSites/privateEndpointConnections/Delete

Namespace: Microsoft.Web

Description

Delete a Private Endpoint Connection for a Static Site

References #

Microsoft.Web/staticSites/privateEndpointConnections/Write

Namespace: Microsoft.Web

Description

Approve or Reject Private Endpoint Connection for a Static Site

References #

Microsoft.Web/staticSites/publish/action

Namespace: Microsoft.Web

Description

Check publish access to static web app

References #

Microsoft.Web/staticSites/resetapikey/Action

Namespace: Microsoft.Web

Description

Reset the api key for a Static Site

References #

Microsoft.Web/staticSites/showDatabaseConnections/action

Namespace: Microsoft.Web

Description

Show details for Database Connections for a Static Site

References #

Microsoft.Web/staticSites/userProvidedFunctionApps/Delete

Namespace: Microsoft.Web

Description

Detach a User Provided Function App from a Static Site

References #

Microsoft.Web/staticSites/userProvidedFunctionApps/Write

Namespace: Microsoft.Web

Description

References #

Microsoft.Web/staticSites/validateCustomDomainOwnership/action

Namespace: Microsoft.Web

Description

Validate the custom domain ownership for a static site

References #

Microsoft.Web/staticSites/Write

Namespace: Microsoft.Web

Description

Create a new Static Site or update an existing one

Example Resource Log Record #

{
  "ActivityStatusValue": "Success",
  "ActivitySubstatusValue": "OK",
  "Authorization": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.Web/staticSites/dwhc6a93dstaticsite",
    "action": "Microsoft.Web/staticSites/write",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Authorization_d": {
    "scope": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.Web/staticSites/dwhc6a93dstaticsite",
    "action": "Microsoft.Web/staticSites/write",
    "evidence": {
      "role": "Owner",
      "roleAssignmentScope": "/subscriptions/22222222-2222-2222-2222-222222222222",
      "roleAssignmentId": "0614d5b6f6da4638b65970d8138290c0",
      "roleDefinitionId": "8e3af657a8ff443ca75c2fe8c4bcb635",
      "principalId": "aaaaaaaa000000000000000000000001",
      "principalType": "User"
    }
  },
  "Caller": "adminuser@example.onmicrosoft.com",
  "CallerIpAddress": "203.0.113.10",
  "CategoryValue": "Administrative",
  "Claims": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783041418",
    "nbf": "1783041418",
    "exp": "1783045937",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "aio": "AXQAi/8cAAAAFIBIEdHXWN3pylNjmPLeQhWfcQ14ANLMkCfF9E8NqZtiUHdHNiO4QKChB+m3872z7F73QjwZK8qIldMrqscbefkaL+FBLWCt9JK9djz/ONZSfAxBzNSQV2uzP3xMJVD4RnM7NXOM1v57WDtsGbmO1g==",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "idtyp": "user",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "puid": "1111111111111111",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com",
    "uti": "tUdFU6nO4UmtUjpbHDqEAA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "3 5",
    "xms_ftd": "Jy-cEgg_SioO6K76SbtPp6tIHeVnjtpmAf1GT_VpKMsBdXNzb3V0aC1kc21z",
    "xms_idrel": "1 6",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282"
  },
  "Claims_d": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/11111111-1111-1111-1111-111111111111/",
    "iat": "1783041418",
    "nbf": "1783041418",
    "exp": "1783045937",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "acrs": "p1",
    "aio": "AXQAi/8cAAAAFIBIEdHXWN3pylNjmPLeQhWfcQ14ANLMkCfF9E8NqZtiUHdHNiO4QKChB+m3872z7F73QjwZK8qIldMrqscbefkaL+FBLWCt9JK9djz/ONZSfAxBzNSQV2uzP3xMJVD4RnM7NXOM1v57WDtsGbmO1g==",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd,mfa",
    "appid": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
    "appidacr": "0",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "User",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Admin",
    "groups": "7e349a88-0f5b-4e6e-b331-4ecd314e4e20",
    "idtyp": "user",
    "ipaddr": "203.0.113.10",
    "name": "Admin User",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "aaaaaaaa-0000-0000-0000-000000000001",
    "puid": "1111111111111111",
    "rh": "1.AXgA2MxkHpDbsUq-nMBN5yQeykZIf3kAutdPukPawfj2MBMBAM54AA.",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "sid": "0022840a-e4ab-884c-587f-d20d24637227",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "59zMO99J0dkUCRNy4Ijj09ztqIlC6EL2p5Qt9PVxzvM",
    "http://schemas.microsoft.com/identity/claims/tenantid": "11111111-1111-1111-1111-111111111111",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "adminuser@example.onmicrosoft.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "adminuser@example.onmicrosoft.com",
    "uti": "tUdFU6nO4UmtUjpbHDqEAA",
    "ver": "1.0",
    "wids": "62e90394-69f5-4237-9190-012177145e10,b79fbf4d-3ef9-4689-8143-76b194e85509",
    "xms_act_fct": "3 5",
    "xms_ftd": "Jy-cEgg_SioO6K76SbtPp6tIHeVnjtpmAf1GT_VpKMsBdXNzb3V0aC1kc21z",
    "xms_idrel": "1 6",
    "xms_sub_fct": "3 4",
    "xms_tcdt": "1768616282"
  },
  "CorrelationId": "61ccd227-e1e5-4943-9135-05bec6b08e02",
  "EventDataId": "b78ec877-ee19-082a-c9e9-04806b9cdc46",
  "EventSubmissionTimestamp": "2026-07-03T02:15:31.3370071Z",
  "HTTPRequest": {
    "clientIpAddress": "203.0.113.10"
  },
  "Hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
  "Level": "Information",
  "OperationNameValue": "MICROSOFT.WEB/STATICSITES/WRITE",
  "Properties": {
    "statusCode": "OK",
    "serviceRequestId": "",
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.Web/staticSites/dwhc6a93dstaticsite",
    "message": "Microsoft.Web/staticSites/write",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "b78ec877-ee19-082a-c9e9-04806b9cdc46",
    "eventSubmissionTimestamp": "2026-07-03T02:15:31.3370071Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resource": "dwhc6a93dstaticsite",
    "resourceGroup": "rg-logcapture-gen",
    "resourceProviderValue": "MICROSOFT.WEB",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success",
    "activitySubstatusValue": "OK"
  },
  "Properties_d": {
    "statusCode": "OK",
    "serviceRequestId": "",
    "eventCategory": "Administrative",
    "entity": "/subscriptions/22222222-2222-2222-2222-222222222222/resourceGroups/rg-logcapture-gen/providers/Microsoft.Web/staticSites/dwhc6a93dstaticsite",
    "message": "Microsoft.Web/staticSites/write",
    "hierarchy": "11111111-1111-1111-1111-111111111111/22222222-2222-2222-2222-222222222222",
    "caller": "adminuser@example.onmicrosoft.com",
    "eventDataId": "b78ec877-ee19-082a-c9e9-04806b9cdc46",
    "eventSubmissionTimestamp": "2026-07-03T02:15:31.3370071Z",
    "httpRequest": {
      "clientIpAddress": "203.0.113.10"
    },
    "resource": "dwhc6a93dstaticsite",
    "resourceGroup": "rg-logcapture-gen",
    "resourceProviderValue": "MICROSOFT.WEB",
    "subscriptionId": "22222222-2222-2222-2222-222222222222",
    "activityStatusValue": "Success",
    "activitySubstatusValue": "OK"
  },
  "ResourceGroup": "rg-logcapture-gen",
  "ResourceProviderValue": "MICROSOFT.WEB",
  "SubscriptionId": "22222222-2222-2222-2222-222222222222"
}