Step 7: How to create a custom role
Below are the steps to create custom role and assign it to the storage account.
Go to Revyz app, Click on Get started.
Select ‘Azure Blob Storage’ card.
On Prerequisites for Azure Blob storage Setup page, check step 7: Create custom role and Download Custom role Json - This downloaded file defines the required permissions for secure and restricted access to the storage account.
On Azure account, Go to the Resource group you created earlier.
Click on Access control (IAM) section on the left.
Click on Add - > Add custom role.
Give custom role name, description and upload the downloaded Json as shown in below screenshot.
Click on Next. It will listed the permissions. Where you can see Read, Write and Tag permission. Revyz should not have Delete permission.
Click on “Next“ and click on 'Add assignable scopes'
Select your created Resource group and click on 'Select'.
Click on 'Next'.
Click on 'Next'.
Check the permissions once again and you can change the role name if required. The default role name would be ‘Revyz BYOS Storage Access'. For this setup, role name will be 'revyzqa role 1’.
Click on ‘Create’
