Microsoft Azure Exams, Other protection solutions

Exercise 2 – creating a custom RBAC role – Azure Governance

Exercise 2 – creating a custom RBAC role

This section will look at creating a custom RBAC role.

You can use an existing Azure AD instance to perform this exercise if you wish.

The following subsections cover how to complete this exercise, segregated into tasks for ease of understanding.

Task – accessing the Azure portal

  1. Log into the Azure portal at https://portal.azure.com. Alternatively, you can use the Azure desktop app: https://portal.azure.com/App/Download.

Task – creating a custom RBAC role

  1. In the search bar, type subscriptions; click Subscriptions from the results list.
  2. From the Subscriptions blade, click on your subscription.
  3. From the left menu of the Subscriptions blade, click Access Control (IAM).
  4. From the Access control blade, click +Add.
  5. Then, click Add custom role.
  6. From the Create a custom role blade, on the basics tab, enter the following information:
    • Custom role name.
    • Description.
    • Baseline permissions: leave as the default of Start from scratch.
  1. Click Next.
  2. From the Permissions tab, click +Add permissions.
  3. From the Add permissions blade, you can now search for each permission to add. You can now select the actions you wish the custom role to have. Then, click Add for each permission you wish to add.
  4. From the Permissions tab, click +Add permissions.
  5. Evaluate whether you need to add any exclude permissions; click Add or Cancel to return to the main blade to continue.
  6. Click Next: Review + create.
  7. On the Review + create tab, review your settings; you may go back to the previous tabs and make any edits if required. Once you have confirmed your settings, click Create.
  8. You will receive a message stating that the new custom RBAC role was created; click OK on the message.
  9. From the main Access control (IAM) blade, you will now be able to search/locate the new custom role that was created from the Roles tab.

In this exercise, we successfully created a custom RBAC role. In the following exercise, we will look at applying a resource lock to a resource group.