In each computer system, you want to make managing permissions as easy as possible. Assigning individual permissions to an individual person or an entity is cumbersome and error-prone. This is why, in most cases, you should aim to create a role that describes a scoped list of permissions and then assign it to a group.
In this section, you will learn how to create a custom role that you will be able to use in your Azure subscription. However, before we proceed, let's take a look at the most basic in-built roles that you can find in Azure (https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles). The in-built roles are useful in many standard scenarios, but unfortunately, they are often too general and require adjustment – this is why we need custom roles.
The easiest way to create roles in Azure is by using either the Azure CLI or PowerShell. For the CLI, you can use the following command:
$ az role definition create
usage...
