Adding a Customized Role to Restrict Access for Microsoft Azure VMs

If you need to restrict access to a Commvault agent running on a Microsoft Azure VM, for security reasons, you can use a customized role-based access control (RBAC) role for Commvault operations and assign it to the VM’s managed identity.

Before You Begin

For the list of permissions required for Commvault operations, download CustomRoleDefinition.json file.

Procedure

1. In the Azure portal, enable Managed Identity for the VM.

2. Use the CustomRoleDefinition.json file to create the role.

3. Verify that the role that you created is available for assignment at the required scopes.

4. On the Azure Resource Group Identity and Access Management (IAM), assign the custom role to the VM’s managed identity.