Azure Customised Global Admin role

Question

Hi Community,

I would like to create an Azure customised role (in JSON format) with Global Admin perms but with a limitation to creating resources. Anyone can help with that?

(or a more relevant built-in Azure role?)

Much appreciated!

Answer 1

Hi Patrik,
Are you asking because you don't have PIM?
From my experience it's better to work with the existing roles but use PIM to control access to all privileged roles.
You should can also use PIM to have another user authorize the use of privileged roles so there's no single person allowed to do any changes.

And if you're dealing with b2b, supply chains, etc that need privileged access to resources I'd suggest looking at Priva.

Reference:
pim-getting-started
microsoft-priva-risk-management

Answer 2

Hi David,

I might have been a bit confusing. Let me clarify it.

I want to create a "limited contributor" role, with the limitations of create new resources, but want to manage the ones which are already created. I hope that makes sense.