Built-In Azure Role Definitions

Last updated: October 23, 2026

In addition to adding your own Azure role definitions, you can easily load Azure's built-in role definitions into Kion.

Note: Some built-in role definitions contain permissions that no longer exist within Azure. When Kion encounters these, we will ignore them.

Importing the Built-In Role Definitions

Before you can import the built-in role definitions, you need to add at least one Azure billing source to Kion, so we can read the definitions from the Azure API.

To set up a EA billing source, see the Azure EA Billing Sources.
To set up an CSP billing source, see the Azure CSP Billing Sources.

To import built-in role definitions:

In the sidebar, navigate to Settings > System Settings.
Click Built-in Role Definitions under Azure Settings.
Click the Load built-in Azure Role Definitions button.
The loading process may take a few moments. When the import finishes, the full list of all built-in Azure role definitions shows under Automation > Cloud Rules > Azure Role Definitions alongside any roles you added previously.