CustomAzureRole/CustomRoleDefinition.json at main · HungryManJew/CustomAzureRole · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
{
    "properties": {
        "roleName": "Custom Virtual Machine Operator",
        "description": "Custom role that provides read access to all resources, VM power management, and auto-shutdown management capabilities",
        "assignableScopes": [
            "/subscriptions/{subscriptionId1}",
            "/providers/Microsoft.Management/managementGroups/{managementGroupId1}"
        ],
        "permissions": [
            {
                "actions": [
                    "*/read",
                    "Microsoft.Compute/virtualMachines/start/action",
                    "Microsoft.Compute/virtualMachines/powerOff/action",
                    "Microsoft.Compute/virtualMachines/restart/action",
                    "Microsoft.Compute/virtualMachines/deallocate/action",
                    "Microsoft.Compute/virtualMachines/redeploy/action",
                    "Microsoft.DevTestLab/schedules/read",
                    "Microsoft.DevTestLab/schedules/write",
                    "Microsoft.DevTestLab/schedules/delete",
                    "Microsoft.DevTestLab/schedules/execute/action",
                    "Microsoft.Resources/subscriptions/resourceGroups/read",
                    "Microsoft.Resources/deployments/read",
                    "Microsoft.Authorization/*/read",
                    "Microsoft.Compute/virtualMachines/write"
                ],
                "notActions": [],
                "dataActions": [],
                "notDataActions": []
            }
        ]
    }
}