Custom Roles Azure

Question

I created a custom role in azure at the management group level with following access to a particular Azure AD user

Create virtual machine, Delete virtual Machine
Create Virtual network, Delete virtual network

Now when i login to portal with the user , iam unable to see the existing VM and virtual network.

Kindly suggest if any other permission need to be provided.

Answer 1

Hi @Rakesh Chand Sharma ,

Make sure you have "read" permissions assigned. For the VM creation and deletion you need:

Microsoft.Compute/virtualMachines/read
Microsoft.Compute/virtualMachines/write
Microsoft.Compute/virtualMachines/delete

For the virtual networks you need:

Microsoft.ClassicNetwork/virtualNetworks/read
Microsoft.ClassicNetwork/virtualNetworks/write
Microsoft.ClassicNetwork/virtualNetworks/delete

Alternatively, you can assign the built-in Virtual Machine Contributor role to your user, which allows the user to create and delete virtual machines.

See: Azure Resource Provider Operations