When you create an IAM user in Microsoft Azure for Skeddly, you must assign an IAM role to the user. Without assigning a role, Skeddly will not have permission to execute in your Azure account.

Depending on the actions you have created, the following roles are required.

Starting and Stopping Virtual Machines

Built-in Roles

If you are using built-in roles, the following role is required:

  • Virtual Machine Contributor

Custom Roles

If you are creating a custom role, the following permissions are required:

  • Microsoft.Compute/virtualMachines/read
  • Microsoft.Compute/virtualMachines/instanceView/read
  • Microsoft.Compute/virtualMachines/start/action
  • Microsoft.Compute/virtualMachines/deallocate/action

Creating and Deleting Virtual Machine Disk Snapshots

Build-in Roles

If you are using built-in roles, the folloiwng role is required:

  • Owner

"Owner" is required because it is the only IAM role that includes permissions to create and delete disk snapshots.

Custom Roles

If you are creating a custom role, the following permissions are required:

  • Microsoft.Compute/virtualMachines/read
  • Microsoft.Compute/virtualMachines/instanceView/read
  • Microsoft.Compute/virtualMachines/deallocate/action
  • Microsoft.Compute/virtualMachines/start/action
  • Microsoft.Compute/disks/read
  • Microsoft.Compute/snapshots/delete
  • Microsoft.Compute/snapshots/read
  • Microsoft.Compute/snapshots/write

Did this answer your question?