@@ -83,25 +83,26 @@ Following is a sample json role definition that can be provided as input
83
83
### Create using PSRoleDefinitionObject
84
84
```
85
85
PS C:\> $role = Get-AzRoleDefinition -Name "Virtual Machine Contributor"
86
- PS C:\> $role.Id = $null
87
- PS C:\> $role.Name = "Virtual Machine Operator"
88
- PS C:\> $role.Description = "Can monitor, start, and restart virtual machines."
89
- PS C:\> $role.Actions.RemoveRange(0,$role.Actions.Count)
90
- PS C:\> $role.Actions.Add("Microsoft.Compute/*/read")
91
- PS C:\> $role.Actions.Add("Microsoft.Compute/virtualMachines/start/action")
92
- PS C:\> $role.Actions.Add("Microsoft.Compute/virtualMachines/restart/action")
93
- PS C:\> $role.Actions.Add("Microsoft.Compute/virtualMachines/downloadRemoteDesktopConnectionFile/action")
94
- PS C:\> $role.Actions.Add("Microsoft.Network/*/read")
95
- PS C:\> $role.Actions.Add("Microsoft.Storage/*/read")
96
- PS C:\> $role.Actions.Add("Microsoft.Authorization/*/read")
97
- PS C:\> $role.Actions.Add("Microsoft.Resources/subscriptions/resourceGroups/read")
98
- PS C:\> $role.Actions.Add("Microsoft.Resources/subscriptions/resourceGroups/resources/read")
99
- PS C:\> $role.Actions.Add("Microsoft.Insights/alertRules/*")
100
- PS C:\> $role.Actions.Add("Microsoft.Support/*")
101
- PS C:\> $role.AssignableScopes.Clear()
102
- PS C:\> $role.AssignableScopes.Add("/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx")
103
-
104
- PS C:\> New-AzRoleDefinition -Role $role
86
+
87
+ PS C:\> $role.Id = $null
88
+ PS C:\> $role.Name = "Virtual Machine Operator"
89
+ PS C:\> $role.Description = "Can monitor, start, and restart virtual machines."
90
+ PS C:\> $role.Actions.RemoveRange(0,$role.Actions.Count)
91
+ PS C:\> $role.Actions.Add("Microsoft.Compute/*/read")
92
+ PS C:\> $role.Actions.Add("Microsoft.Compute/virtualMachines/start/action")
93
+ PS C:\> $role.Actions.Add("Microsoft.Compute/virtualMachines/restart/action")
94
+ PS C:\> $role.Actions.Add("Microsoft.Compute/virtualMachines/downloadRemoteDesktopConnectionFile/action")
95
+ PS C:\> $role.Actions.Add("Microsoft.Network/*/read")
96
+ PS C:\> $role.Actions.Add("Microsoft.Storage/*/read")
97
+ PS C:\> $role.Actions.Add("Microsoft.Authorization/*/read")
98
+ PS C:\> $role.Actions.Add("Microsoft.Resources/subscriptions/resourceGroups/read")
99
+ PS C:\> $role.Actions.Add("Microsoft.Resources/subscriptions/resourceGroups/resources/read")
100
+ PS C:\> $role.Actions.Add("Microsoft.Insights/alertRules/*")
101
+ PS C:\> $role.Actions.Add("Microsoft.Support/*")
102
+ PS C:\> $role.AssignableScopes.Clear()
103
+ PS C:\> $role.AssignableScopes.Add("/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx")
104
+
105
+ PS C:\> New-AzRoleDefinition -Role $role
105
106
```
106
107
107
108
### Create using JSON file
0 commit comments