Azure ARM (27) 自定义Role，只能创建MySQL Flexible Server资源

　　《Windows Azure Platform 系列文章目录》

 

　　用户这里有个新的需求，自定义Role，只能创建MySQL Flexible Server资源和Private DNS Zone，不能创建资源资源。

　　可以使用下面的Custom Role

{
    "properties": {
        "roleName": "mysqlcontributor",
        "description": "",
        "assignableScopes": [
            "/subscriptions/[这里输入你的订阅ID]"
        ],
        "permissions": [
            {
                "actions": [
                    "Microsoft.Authorization/*/read",
                    "Microsoft.ResourceHealth/availabilityStatuses/read",
                    "Microsoft.Resources/deployments/*",
                    "Microsoft.Resources/subscriptions/resourceGroups/read",
                    "Microsoft.DBforMySQL/*",
                    "Microsoft.Support/*",
                    "Microsoft.Network/virtualNetworks/read",
                    "Microsoft.Network/virtualNetworks/subnets/read",
                    "Microsoft.Network/virtualNetworks/subnets/join/action",
                    "Microsoft.Network/privateDnsZones/*",
                    "Microsoft.Insights/alertRules/*",
                    "Microsoft.Insights/metrics/read",
                    "Microsoft.Insights/metricDefinitions/read",
                    "*/register/action"
                ],
                "notActions": [],
                "dataActions": [],
                "notDataActions": []
            }
        ]
    }
}