Role Based Access Control - VM's

[Greg Zygadlo]

Wondering if anyone has created a custom role so that a user can only create/modify/resize VM's.  I created a custom role based on Virtual Machine Contributor, but having trouble re-sizing a VM using that custom role.  Trying to figure out what I might be missing.

Here is the role I created.

Microsoft.storage/*/read
Microsoft.network/*/read
Microsoft.compute/*/read
Microsoft.compute/virtualmachines/*
Microsoft.authorization/*/read
Microsoft.network/networkinterfaces/*
Microsoft.network/networkSecurityGroups/read
Microsoft.network/networkSecurityGroups/join/action
Microsoft.network/virtualNetworks/subnets/join/action
Microsoft.ResourceHealth/availabilityStatuses/Read
Microsoft.Resources/subscriptions/resourcegroups/read
Microsoft.Insights/alertRules/*
Microsoft.Resources/deployments/*
Microsoft.Storage/*

[#2]

Can you add this and see 

Thanks

[#3]

Ended up setting up the DevTest Labs service and that solved my access issue to give them what they needed and keep control of costs.