- Microsoft Azure Administrator:Exam Guide AZ-103
- Sjoukje Zaal
- 251字
- 2021-06-24 14:02:01
Creating a custom role
In the following example, we will create a custom role that can only restart VMs in Azure. For this, you need to create a JSON file that will be deployed using PowerShell. We are assigning that role to a user account inside the JSON file, as follows:
- You can define the custom role by using the following JSON code. You should set the Id to null because the custom role gets an ID assigned to it at creation. We will add the custom role to two Azure subscriptions, as follows (replace the subscriptions in the AssignableScopes part with your subscription IDs):
{
"Name": "Packt Custom Role",
"Id": null,
"IsCustom": true,
"Description": "Allows for read access to Azure Storage, Network and Compute resources and access to support",
"Actions": [
"Microsoft.Compute/*/read",
"Microsoft.Storage/*/read",
"Microsoft.Network/*/read",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.Support/*"
],
"NotActions": [
],
"AssignableScopes": [
"/subscriptions/********-****-****-****-***********",
"/subscriptions/********-****-****-****-***********"
]
}
- Save the JSON file in a folder named CustomRoles on the C: drive of your computer. Then, run the following PowerShell script to create the role. First, log in to your Azure account, as follows:
Connect-AzAccount
- If necessary, select the right subscription:
Select-AzSubscription -SubscriptionId "********-****-****-****-***********"
- Then, create the custom role in Azure by importing the JSON file into PowerShell:
New-AzRoleDefinition -InputFile "C:\CustomRoles\PacktCustomRole.json"
In this demonstration, we created a custom role that can only restart VMs in Azure. Now, we're going to take a look at how you can create policies using Azure Policy.
推薦閱讀
- 電腦組裝與系統(tǒng)安裝
- 樂學Windows操作系統(tǒng)
- Red Hat Enterprise Linux 8系統(tǒng)管理實戰(zhàn)
- 白話區(qū)塊鏈
- 曝光:Linux企業(yè)運維實戰(zhàn)
- 嵌入式Linux系統(tǒng)開發(fā):基于Yocto Project
- Moodle 3.x Teaching Techniques(Third Edition)
- 無蘋果不生活 The New iPad隨身寶典
- Advanced TypeScript Programming Projects
- Django Project Blueprints
- 計算機系統(tǒng)的自主設計
- INSTANT Galleria Howto
- Java EE 7 Developer Handbook
- Linux操作系統(tǒng)案例教程(第2版)
- Linux內(nèi)核分析及應用