Trying to Create Custom Role

Question

Trying to Create Custom Role

_DA Mukul Kumar 0

I am trying to add custom role to a newly added subscription for vendor but some of the listed roles are giving me error and i am not finding a reason for error.

Need some help in reviewing the JSON file and advise why some of the roles not working for me and any alternative to achieve it.

{

"properties": {

"roleName": "XX",

"type": "CustomRole",

"description": "XX",

"assignableScopes": ["XX"],

"permissions": [

{

"actions": [

"Microsoft.Resources/subscriptions/resourceGroups/read",

"Microsoft.Resources/subscriptions/resourceGroups/write",

"Microsoft.Resources/subscriptions/resourceGroups/delete",

"Microsoft.Storage/storageAccounts/read",

"Microsoft.Storage/storageAccounts/write",

"Microsoft.Storage/storageAccounts/delete",

"Microsoft.Storage/storageAccounts/listKeys/action",

"Microsoft.Storage/storageAccounts/blobServices/read",

"Microsoft.Storage/storageAccounts/blobServices/write",

"Microsoft.Storage/storageAccounts/blobServices/containers/read",

"Microsoft.Storage/storageAccounts/blobServices/containers/write",

"Microsoft.Storage/storageAccounts/blobServices/containers/delete",

"Microsoft.ManagedIdentity/userAssignedIdentities/read",

"Microsoft.ManagedIdentity/userAssignedIdentities/write",

"Microsoft.ManagedIdentity/userAssignedIdentities/delete",

"Microsoft.ManagedIdentity/userAssignedIdentities/federatedIdentityCredentials/read",

"Microsoft.ManagedIdentity/userAssignedIdentities/federatedIdentityCredentials/write",

"Microsoft.ManagedIdentity/userAssignedIdentities/federatedIdentityCredentials/delete",

"Microsoft.Authorization/roleAssignments/read",

"Microsoft.Authorization/roleAssignments/write",

"Microsoft.Authorization/roleAssignments/delete",

"Microsoft.Authorization/roleDefinitions/read",

"Microsoft.Subscription/resourceProviders/register/action",

"Microsoft.Subscription/resourceProviders/read"
```],

"notActions": [],

"DataActions": [],

"NotDataActions": []

}

]

}

}

Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-05-27T10:46:49.7066667+00:00

Hello @_DA Mukul Kumar To fix the error, try the below:

Replace:

"Microsoft.Subscription/resourceProviders/register/action"

With:

"Microsoft.Resources/subscriptions/providers/register/action"

And also remove the below actions from the custom role:

"Microsoft.Authorization/roleAssignments/write",

"Microsoft.Authorization/roleAssignments/delete"

also change the

"dataActions": [],

"notDataActions": []

Let me know if any further queries - feel free to reach out!
Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-05-28T11:30:55.2366667+00:00

Hello @_DA Mukul Kumar

Following up to see if the above provided information was helpful. If you have any further queries do let us know.

Your answer

Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-05-27T10:46:49.7066667+00:00

Hello @_DA Mukul Kumar To fix the error, try the below:

Replace:

"Microsoft.Subscription/resourceProviders/register/action"

With:

"Microsoft.Resources/subscriptions/providers/register/action"

And also remove the below actions from the custom role:

"Microsoft.Authorization/roleAssignments/write",

"Microsoft.Authorization/roleAssignments/delete"

also change the

"dataActions": [],

"notDataActions": []

Let me know if any further queries - feel free to reach out!
Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-05-28T11:30:55.2366667+00:00

Hello @_DA Mukul Kumar

Following up to see if the above provided information was helpful. If you have any further queries do let us know.