Json file, replace “/subscriptions/11111111-1111-1111-1111-111111111111” with your own subscription ID.
Save the Json file and run: az role definition create –role-definition filename.json
{ "Name": "Virtual Machine Stop/Start/Restart", "IsCustom": true, "Description": "Can stop, start and restart virtual machines.", "Actions": [ "Microsoft.Compute/*/read", "Microsoft.Compute/virtualMachines/start/action", "Microsoft.Compute/virtualMachines/restart/action", "Microsoft.Compute/virtualMachines/deallocate/action" ], "NotActions": [ ], "AssignableScopes": [ "/subscriptions/11111111-1111-1111-1111-111111111111" ] }