Azure AVD IAM Role
Provide permission to the Azure Virtual Desktop Resource Provider to start and stop virtual machines.
Nyan
7/9/20251 min read


Understanding the “Desktop Virtualisation Power On/Off Contributor” Role in Azure Virtual Desktop
What Is the “Desktop Virtualisation Power On/Off Contributor”?
The Desktop Virtualisation Power On/Off Contributor is a built-in Azure role designed to grant users permission to start or stop session hosts within a host pool in AVD — without giving them full administrative access.
Key Use Case:
This role is perfect for IT support staff, Helpdesk teams, or automation systems that need to manage VM power states without compromising broader resource access or security.
What Can This Role Do?
This role provides limited, specific permissions to perform power operations:
Allowed Actions:
Start session host VMs
Stop session host VMs (including deallocation)
Restart VMs (optional, depending on scope)
Not Allowed:
No access to modify host pool settings
No permissions to create/delete virtual machines
No access to user session management