Role to manage auto-shutdown of VM

Rahul Kamble 0

We are encountering an issue where a user with appropriate roles and permissions is unable to manage the auto-shutdown feature for Azure Virtual Machines (VMs). Despite assigning the built-in DevTest Labs User role and attempting several combinations of roles and permissions, we have been unable to achieve the desired functionality for managing auto-shutdown settings.

Although users with privileged roles can successfully manage auto-shutdown, we require a solution that allows non-privileged users to only control the auto-shutdown settings for VMs without granting broader access.

I have used Microsoft.DevTestLab/schedules/* permission, which I checked in "contributor" role. Aslo, i have tried cloning contributor role with some not actions to create role that can only manage auto-shutdown. image (1)

Srinud 3,400 Reputation points Microsoft Vendor

2024-12-20T11:51:35.75+00:00

Hi Rahul Kamble,
Thank you for reaching out to us on the Microsoft Q&A forum.

Please create a custom role with the necessary limited permissions required for specific operations or actions and assign this role to the appropriate users.

Please find the below document for more information:
https://zcusa.951200.xyz/en-us/azure/role-based-access-control/custom-roles#how-to-determine-the-permissions-you-need

If the information is helpful, please consider by clicking the "Upvote" on the post.
Srinud 3,400 Reputation points Microsoft Vendor

2024-12-23T17:40:12.5933333+00:00

Hi Rahul Kamble,
I Hope you are doing well!!

I just wanted to check if you had a chance to review answer. If you found it helpful, could you kindly click the “Accept Answer and upvote” on the post. This will help increase its visibility of this question for other members of the Microsoft Q&A community.
If you have any further queries, please let us know in the comment.
Thank you.
Srinud 3,400 Reputation points Microsoft Vendor

2024-12-27T10:16:02.5333333+00:00

Hi Rahul Kamble,

I just wanted to check if you had a chance to review answer. If you found it helpful, could you kindly click the “Accept Answer and upvote” on the post. This will help increase its visibility of this question for other members of the Microsoft Q&A community. If you have any further queries, please let us know in the comment.
Thank you.

1 answer

akinbade abiola 21,130 Reputation points

2024-12-20T12:05:11.9266667+00:00

Hello.

Thanks for your question.

You can use the Virtual Machine Contributor' role.

https://zcusa.951200.xyz/en-us/azure/role-based-access-control/built-in-roles/compute#virtual-machine-contributor

You can test with that and further scale down to a custom role if needed.

If this doesn't work, you may need to check the Azure policies on your tenant.

You can mark it 'Accept Answer' and 'Upvote' if this helped you

Regards,

Abiola
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Role to manage auto-shutdown of VM

1 answer

Your answer