Microsoft Exam AZ-303 Topic 9 Question 10 Discussion

Part of example:

'IsCustom': true,

'AssignableScopes': [

'/subscriptions/{subscriptionId1}',

'/subscriptions/{subscriptionId2}',

'/subscriptions/{subscriptionId3}'

The following shows what a custom role looks like as displayed in JSON format. This custom role can be used for monitoring and restarting virtual machines.

{

'Name': 'Virtual Machine Operator',

'Id': '88888888-8888-8888-8888-888888888888',

'IsCustom': true,

'Description': 'Can monitor and restart virtual machines.',

'Actions': [

'Microsoft.Storage/*/read',

'Microsoft.Network/*/read',

'Microsoft.Compute/*/read',

'Microsoft.Compute/virtualMachines/start/action',

'Microsoft.Compute/virtualMachines/restart/action',

'Microsoft.Authorization/*/read',

'Microsoft.ResourceHealth/availabilityStatuses/read',

'Microsoft.Resources/subscriptions/resourceGroups/read',

'Microsoft.Insights/alertRules/*',

'Microsoft.Insights/diagnosticSettings/*',

'Microsoft.Support/*'

],

'NotActions': [],

'DataActions': [],

'NotDataActions': [],

'AssignableScopes': [

'/subscriptions/{subscriptionId1}',

'/subscriptions/{subscriptionId2}',

'/subscriptions/{subscriptionId3}'

]

}

https://docs.microsoft.com/en-us/azure/role-based-access-control/custom-roles