Roles Create new role assignment This will try to assign the assignee the owner role: az role assignment create --assignee --role "owner" Resource:  https://www.xmcyber.com/privilege-escalation-and-lateral-movement-on-azure-part-1/