Trend Micro Cloud One – custom role

The json script below is the custom role required to deploy your Azure based Cloud One HA solution not using a GLWB.

Copy the script below and save into a .json file.

{
  "properties": {
    "roleName": "Trend Micro Cloud One Stack",
    "description": "Trend Micro Cloud One Stack",
    "assignableScopes": [
      "/subscriptions/8cfc2697-4b29-4cb5-b322-24da76939e43/resourceGroups/allen-cloudOne"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.Network/loadBalancers/read",
          "Microsoft.Insights/Metrics/Read",
          "Microsoft.Compute/virtualMachineScaleSets/read",
          "Microsoft.Compute/virtualMachineScaleSets/virtualMachines/read",
          "Microsoft.Compute/virtualMachineScaleSets/virtualMachines/restart/action",
          "Microsoft.Network/virtualNetworks/subnets/read",
          "Microsoft.Network/virtualNetworks/subnets/write",
          "Microsoft.Network/routeTables/read",
          "Microsoft.Network/routeTables/write",
          "Microsoft.Network/routeTables/routes/write",
          "Microsoft.Network/routeTables/join/action"
        ],
        "notActions": [],
        "dataActions": [],
        "notDataActions": []
      }
    ]
  }
}