Azure custom role automation

Question

Hello All,

I encountered a scenario where we needed to create custom roles for 12 Azure services according to customer demands. This involved laboriously building the role at the resource group level through IAM. The process required us to handle numerous actions—selecting, deselecting, and configuring NOT actions, all while continuously monitoring the outcomes on screen. It took nearly a month to complete this extensive script. Now, I am seeking an automation solution that could reduce this task to just a few hours. Ideally, this solution would visually indicate on the Azure portal which buttons or subsections will be activated when a particular action is selected, using highlighted colors. Does anyone have suggestions for streamlining this time-consuming process?

Regards,

Abhi

Answer 1

There's a few ways to automate this, but I'd start with something simple and use Azure Automation.

Azure Automation allows you to automate repetitive tasks and workflows using PowerShell runbooks or Python scripts.

You can create runbooks that define the custom roles, their permissions, and assign them to resource groups or specific resources.

Azure Automation integrates with Azure Resource Manager, allowing you to manage resources and configurations at scale.