In the Azure portal, in the top menu, search for and select the subscription you want to create the custom role in. From the left navigation, select Access Control (IAM) > Add > Add custom role. Set ...