Creating custom Azure Role to be used with PIM

Question

I need some help to create the Azure custom role that allows the group member to do only the following task:

Resource Group - Create/Read/Update

• Configuring the IAM for the Resource Group. How to achieve it in Azure ?

Thank you.

Answer 1

@EnterpriseArchitect

Thank you for posting your question in Microsoft Q&A.

You can create a custom role in Azure using GUI or using PowerShell.

Since you want to create a custom role for resource group, you can follow below steps,

• Login to Azure portal.
• Go to the resource group in which you wanted to create a custom role. (In our example let's consider a resource group and I am selecting compute as a resource)
• Once you go to the resource group you can click on "Access control (IAM)".
• Click on Add on the top and click on "Add custom role".
• Give a name to custom role that you want to create. Then you can select "start from scratch".
• Now in the next page you will have to select the resource to which you want to apply this permission to.
• Post that select the permissions as per your requirement.
• Now follow the instructions on the screen and you will be able to create a custom role.

You can also refer to below article,

https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles-portal#step-1-determine-the-permissions-you-need

Let me know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.