4 years ago, I wrote an article about the creation of Azure RBAC custom roles, through PowerShell.

Now, Microsoft releases the possibility to create a custom role, directly from the portal.

To start, go to a resource or a subscription in Access Control (IAM) and go to the Roles tab. Click on Add > Add custom role:

Access Control (IAM)

Provide the name, description, and choose from where you want to start your template:

  • Clone a role
  • Start from scratch (that I will use)
  • Start from JSON

Clone a role

Now, you can add permissions:

Add permission

I’ll take Microsoft Compute for this example. When you chose it, you have two choices:

  • Actions: Choose permissions that you want to give, depending of the category
  • Data Actions: for others permissions

Microsoft Compute

You can add this custom role to other subscriptions/resource groups:

 Subscriptions/resource groups

In the JSON tab, you have the JSON, generated, and that you can reuse later:

JSON format

You can now click on Create to start the creation of the custom role and assign this role to subscription/resource groups.

Visual Studio Enterprise

VSAN from StarWind is software-defined storage (SDS) solution created with restricted budgets and maximum output in mind. It pulls close to 100% of IOPS from existing hardware, ensures high uptime and fault tolerance starting with just two nodes. StarWind VSAN is hypervisor and hardware agnostic, allowing you to forget about hardware restrictions and crazy expensive physical shared storage.

Build your infrastructure with off-the-shelf hardware, scale however you like, increase return on investment (ROI) and enjoy Enterprise-grade virtualization features and benefits at SMB price today!


You can now add users, inside this custom role:

Add users

If you are not familiar with JSON, this new interface will save you a lot of time, and the export/import function is very helpful to do a backup of your roles, or to import them in another subscription.

Views All Time
3
Views Today
6
Back to blog
The following two tabs change content below.
Florent Appointaire
Florent Appointaire is Microsoft Engineer with 5 years of experience, specialized in Cloud Technologies (Public/Hybrid/Private). He is a freelance consultant in Belgium from the beginning of 2017. He is MVP Cloud and Datacentre Management. He is MCSE Private Cloud and Hyper-V certified. His favorite products are SCVMM, SCOM, Windows Azure pack/Azure Stack and Microsoft Azure.