Use the Azure CLI client to find the subscription ID and Tenant ID from your account list. Then create a custom RBAC role using the JSON provided by adding your subscription ID and renaming to azure.json. Finally, create an Active Directory Service Principal and assign the role to it.
Creating custom roles using the Azure CLI:
https://docs.microsoft.com/en-us/azure/role-based-access-control/custom-roles
Assigning roles using the Azure CLI:
https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal
{
"Name": "LPU ResourceGroup",
"Description": "LPU for ResourceGroups",
"Actions": [
"Microsoft.Resources/*/read",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.Insights/metrics/*/read",
"Microsoft.Authorization/*/read"
],
"AssignableScopes": [
"/subscriptions/[Subscription ID]"
]
}Subscription ID
Required
GUID Subscription ID
Tenant ID
Required
GUID Tenant ID (also known as Directory ID)
Client ID
Required
GUID Client ID (also known as Application ID)
Client Secret
Required
The Secret (also known as Key) corresponding to the Client ID.
Maximum HTTP Retry Time (seconds)
The maximum amount of time in seconds to retry each API request when the API is throttling.
HTTP Request Timeout (seconds)
The maximum amount of time in seconds before a single HTTP request will fail.
Monitor Metric Collection Level
Selects which monitor metrics should be collected.
Filter By Resource Group Type
Selects whether to use a whitelist or blacklist when filtering by Resource Groups.
Filter By Resource Group Whitelist
A comma separated list of resource groups to explicitly allow. A '*' character is used to represent 'all', and a blank string is used for 'none'.
Filter By Resource Group Blacklist
A comma separated list of resource groups to filter out. A '*' character is used to represent 'all', and a blank string is used for 'none'.
Filter By Tags Group Type
Selects whether to use a whitelist or blacklist when filtering by Resource Groups.
Filter By Tags Group Whitelist
A comma separated list of tags to explicitly allow. Tags must follow the format <key:value>. Instead of a specific tag, or tag value, a '*' character is used to represent 'all'. A blank entry is treated as 'none'.
Filter By Tags Group Blacklist
A comma separated list of tags to filter out. Tags must follow the format <key:value>. Instead of a specific tag, or tag value, a '*' character is used to represent 'all'. A blank entry is treated as 'none'.
Average Pages
The average amount of pages needed for a paged resource type.
Average Request Retries
The average number of retry requests per unique requests made.
Average Retry Attempts
The average number of retry requests made per unique request that was retried.
Average Retry Wait (Milliseconds)
The average amount of time retried requests spent waiting.
Client ID
The client ID used to make API calls.
Failed Requests
The total number of requests that returned a failure response.
Maximum Pages
The most amount of pages needed for a paged resource type.
Maximum Retries
The highest number of retries made for a single request.
Maximum Retry Wait (Milliseconds)
The most amount of time a retried request spent waiting.
Minimum Pages
The least amount of pages needed for a paged resource type.
Minimum Retry Wait (Milliseconds)
The least amount of time a retried request spent waiting.
Other Status Responses
The total number of successful requests that responded with some other accepted status.
Request Timeouts
The total number of requests that timed out waiting for a response.
Requests Retried
The number of unique requests that were retried.
Retry Status Responses
The total number of successful requests that responded with the status TOO MANY REQUESTS (429).
Retry Timeouts
The total number of requests that needed to be retried, but the request retry time exceeded the maximum retry time.
Status OK Responses
The total number of successful requests that responded with the status OK (200).
Subscription ID
The subscription ID used to make API calls.
Successful Requests
The total number of requests that returned a successful response.
Tenant ID
The tenant ID used to make API calls.
Total Monitor Requests
The total number of requests made to get monitor metrics.
Total Paged Requests
The total amount of resource types that required paging.
Total Requests
The total number of requests made during collection.
Total Retries
The total number of retry requests that were made.
Unique Monitor Requests
The number of unique requests made to get monitor metrics.
Unique Requests
The number of requests made with unique endpoints.
ID
The Resource ID of the feature
Name
The name of the feature
State
The registration state of the feature for the subscription
Type
Microsoft Azure resource type
ID
Resource ID
Identity
The identity of the resource
Kind
The kind of the resource
Location
Resource location
Managed By
ID of the resource that manages this resource
Name
Resource name
Plan
The plan of the resource
SKU Capacity
The SKU capacity associated with the resource
SKU Family
The SKU family associated with the resource
SKU Model
The SKU model associated with the resource
SKU Name
The SKU name associated with the resource
SKU Size
The SKU size associated with the resource
SKU Tier
The SKU tier associated with the resource
Tags
Microsoft Azure resource tags
Type
Microsoft Azure resource type
ID
The ID of the resource group
Location
The location of the resource group
Managed By
ID of the resource that manages this resource
Name
The name of the resource group
Provisioning State
The provisioning state of the resource group
Tags
Microsoft Azure resource tags
Count Type
The type of count
Count Value
The total number of resources that use the resource tag. When a tag is initially created and has no associated resources, the value is 0
ID
ID of the tag
Tag Name
Name of the tag