Azure Roles and Custom Roles

• Azure Built in roles list Refer Here

Scenario-1: Give an access to a group to perform any operations on a specific resource group.

• This user should not be able give permissions to others users i.e Contributor
• Navigate to the specific Resource Groups => IAM Add Role Assignment => Contributor

Scenario-2: Give an access to a group/user to perform any database sql operations in a specific subscription

• Navigate to specific subscription => Assign SQL DB Contributor to the specific group in IAM.

Scenario-3: Give an access to a group/user to perform any database and vm operations but not delete the vm’s or databases.

• When we are defining azure custom roles ensure we are within limits Refer Here
• Refer Here to the steps recommended by microsoft to create a custom