A custom role must allow restarting VMs but nothing else. Which definition element lists the permitted operations?
- A notActions
- B actions (correct answer)
- C assignableScopes
- D dataActions
Shortcut: Compute/virtualMachines/restart/action. notActions subtracts from actions; dataActions covers data-plane operations.
actions enumerates allowed management-plane operations, here Microsoft.Compute/virtualMachines/restart/action. notActions subtracts from actions; dataActions covers data-plane operations.