Azure IAM Role "VM operator" (Only start and stop VM)

IAMRole-VMOperator.json

{
"Name": "VM Operator",
	"IsCustom": true,
    "Description": "Can start, restart and stop (deallocate) virtual machines.",
    "Actions": [
		"Microsoft.Compute/*/read",
        "Microsoft.Compute/virtualMachines/start/action",
        "Microsoft.Compute/virtualMachines/restart/action",
        "Microsoft.Compute/virtualMachines/deallocate/action"
    ],
    "NotActions": [
    ],
    "AssignableScopes": [
		"/subscriptions/1234abcde-1234-1234-1234-123467abcdef"
    ]
}