Role Based Access Control - VM's

Wondering if anyone has created a custom role so that a user can only create/modify/resize VM's.  I created a custom role based on Virtual Machine Contributor, but having trouble re-sizing a VM using that custom role.  Trying to figure out what I might be missing.

Here is the role I created.

Microsoft.storage/*/read
Microsoft.network/*/read
Microsoft.compute/*/read
Microsoft.compute/virtualmachines/*
Microsoft.authorization/*/read
Microsoft.network/networkinterfaces/*
Microsoft.network/networkSecurityGroups/read
Microsoft.network/networkSecurityGroups/join/action
Microsoft.network/virtualNetworks/subnets/join/action
Microsoft.ResourceHealth/availabilityStatuses/Read
Microsoft.Resources/subscriptions/resourcegroups/read
Microsoft.Insights/alertRules/*
Microsoft.Resources/deployments/*
Microsoft.Storage/*