Creating a custom RBAC role

Now that you have become familiar with what roles are and you understand the differences between built-in roles and custom RBAC roles, you will learn how to use the Azure portal to create a custom RBAC role from scratch. For this exercise, you will name your new custom RBAC role IT Support – Restart VMs only, which can only restart virtual machines and deny the startup and shutdown of them.

Perform the following steps to begin creating your custom role:

1. Navigate to the Azure portal by opening a web browser and browsing to https://portal.azure.com.
2. In the top section search bar, search for and select Subscriptions, as shown in the following Figure 3.14:

Figure 3.14: The search bar in Azure

3. Select an active subscription; in this case, this will be the Demo subscription, as seen in the following Figure 3.15:

Figure 3.15: All available subscriptions

4. Select Access...