Role Based Access Control - VM's

%3CLINGO-SUB%20id%3D%22lingo-sub-125293%22%20slang%3D%22en-US%22%3ERole%20Based%20Access%20Control%20-%20VM's%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-125293%22%20slang%3D%22en-US%22%3E%3CP%3EWondering%20if%20anyone%20has%20created%20a%20custom%20role%20so%20that%20a%20user%20can%20only%20create%2Fmodify%2Fresize%20VM's.%26nbsp%3B%20I%20created%20a%20custom%20role%20based%20on%20Virtual%20Machine%20Contributor%2C%20but%20having%20trouble%20re-sizing%20a%20VM%20using%20that%20custom%20role.%26nbsp%3B%20Trying%20to%20figure%20out%20what%20I%20might%20be%20missing.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHere%20is%20the%20role%20I%20created.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMicrosoft.storage%2F*%2Fread%3CBR%20%2F%3EMicrosoft.network%2F*%2Fread%3CBR%20%2F%3EMicrosoft.compute%2F*%2Fread%3CBR%20%2F%3EMicrosoft.compute%2Fvirtualmachines%2F*%3CBR%20%2F%3EMicrosoft.authorization%2F*%2Fread%3CBR%20%2F%3EMicrosoft.network%2Fnetworkinterfaces%2F*%3CBR%20%2F%3EMicrosoft.network%2FnetworkSecurityGroups%2Fread%3CBR%20%2F%3EMicrosoft.network%2FnetworkSecurityGroups%2Fjoin%2Faction%3CBR%20%2F%3EMicrosoft.network%2FvirtualNetworks%2Fsubnets%2Fjoin%2Faction%3CBR%20%2F%3EMicrosoft.ResourceHealth%2FavailabilityStatuses%2FRead%3CBR%20%2F%3EMicrosoft.Resources%2Fsubscriptions%2Fresourcegroups%2Fread%3CBR%20%2F%3EMicrosoft.Insights%2FalertRules%2F*%3CBR%20%2F%3EMicrosoft.Resources%2Fdeployments%2F*%3CBR%20%2F%3EMicrosoft.Storage%2F*%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-125293%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-127172%22%20slang%3D%22en-US%22%3ERe%3A%20Role%20Based%20Access%20Control%20-%20VM's%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-127172%22%20slang%3D%22en-US%22%3E%3CP%3EEnded%20up%20setting%20up%20the%20DevTest%20Labs%20service%20and%20that%20solved%20my%20access%20issue%20to%20give%20them%20what%20they%20needed%20and%20keep%20control%20of%20costs.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-125351%22%20slang%3D%22en-US%22%3ERe%3A%20Role%20Based%20Access%20Control%20-%20VM's%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-125351%22%20slang%3D%22en-US%22%3E%3CP%3ECan%20you%20add%20this%20and%20see%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20363px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F23750i7554AE6F032E9D5F%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Capture.PNG%22%20title%3D%22Capture.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

Wondering if anyone has created a custom role so that a user can only create/modify/resize VM's.  I created a custom role based on Virtual Machine Contributor, but having trouble re-sizing a VM using that custom role.  Trying to figure out what I might be missing.

 

Here is the role I created.

 

Microsoft.storage/*/read
Microsoft.network/*/read
Microsoft.compute/*/read
Microsoft.compute/virtualmachines/*
Microsoft.authorization/*/read
Microsoft.network/networkinterfaces/*
Microsoft.network/networkSecurityGroups/read
Microsoft.network/networkSecurityGroups/join/action
Microsoft.network/virtualNetworks/subnets/join/action
Microsoft.ResourceHealth/availabilityStatuses/Read
Microsoft.Resources/subscriptions/resourcegroups/read
Microsoft.Insights/alertRules/*
Microsoft.Resources/deployments/*
Microsoft.Storage/*

2 Replies

Can you add this and see 

Capture.PNG

 

Thanks

Ended up setting up the DevTest Labs service and that solved my access issue to give them what they needed and keep control of costs.