Skip to content

Update custom roles for VM migrations-2 #10199

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 1 commit into from
Closed

Update custom roles for VM migrations-2 #10199

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 7 additions & 2 deletions data-migration/sql-server/virtual-machines/custom-roles.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ titleSuffix: Azure Database Migration Service
description: Learn to use the custom roles for SQL Server to Azure VM's migrations.
author: rwestMSFT
ms.author: randolphwest
ms.date: 06/11/2025
ms.date: 10/09/2025
ms.service: azure-database-migration-service
ms.topic: conceptual
ms.collection:
Expand Down Expand Up @@ -59,7 +59,9 @@ Use the `AssignableScopes` section of the role definition JSON string to control
"Microsoft.DataMigration/SqlMigrationServices/tasks/delete"
],
"notActions": [],
"dataActions": [],
"dataActions": [
"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read"
],
"notDataActions": []
}
]
Expand All @@ -71,6 +73,9 @@ You can use either the Azure portal, Azure PowerShell, Azure CLI, or Azure REST

For more information, see [Create or update Azure custom roles using the Azure portal](/azure/role-based-access-control/custom-roles-portal) and [Azure custom roles](/azure/role-based-access-control/custom-roles).

> [!NOTE]
> When migrating to Azure SQL Managed Instance or Azure SQL Virtual Machine via **Azure portal**, make sure the signed in user has **Storage Blob Data Reader** access on the storage account. This permission is needed to list folders and files in the blob container during migration setup via Azure portal only.

## Description of permissions needed to migrate to a virtual machine

| Permission Action | Description |
Expand Down