Cosmos DB SQL API custom role

Question

Hello,
I am trying to add a custom role readmetadata, but getting this error.
Any help would be appreciated.

Answer 1

Hi,

Currently you cannot create Azure Cosmos DB custom role definitions via the portal. You could create them via PowerShell, for example:

$resourceGroupName = "MyCosmosDB-rg"  
$accountName = "mycosmosdbaccount"  
New-AzCosmosDBSqlRoleDefinition -AccountName $accountName `  
    -ResourceGroupName $resourceGroupName `  
    -Type CustomRole -RoleName CosmosReadMetadata `  
    -DataAction @( `  
        'Microsoft.DocumentDB/databaseAccounts/readMetadata') `  
    -AssignableScope "/"  

Please see this FAQ:

https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac#is-it-possible-to-manage-role-definitions-and-role-assignments-from-the-azure-portal

Thanks.

-TP