Which RBAC role is required to approve a Private Endpoint Connection (on an Event Hub namespace)?

Question

What is the minimum Azure RBAC (built-in) role required to approve a Pending Private Endpoint Connection (on an Event Hub namespace)? So far we managed to do it with Contributor on the Event Hub Namespace but we are wondering if there is a role which grants less permissions and still will work for this.

Answer 1

What is the minimum Azure RBAC (built-in) role required to approve a Pending Private Endpoint Connection (on an Event Hub namespace)?

There is a built-in role called Azure Event Hubs Data Owner in the Event Hub namespace that is specifically designed for managing Event Hub resources. This role provides complete access to Event Hubs resources

Refer the this MS Doc for more about the Azure Event Hubs Data Owner Role.

Azure Event Hubs Data Owner

In order to provide access specifically for approving private endpoints in the Event Hub namespace, you can create a custom role by cloning the "Azure Event Hubs Data Owner" role and removing all other actions, selecting only the "Approve Private Endpoint Connection" permission