Roles can be high-level, like owner, or specific, like virtual machine reader. ... For example, the Virtual Machine Contributor role allows a user to create and manage virtual machines. If the built-in roles don't meet the specific needs of your organization, you can create your own Azure custom roles