We are attempting to provide VMs to Guest users. We do this by creating the VM and allocating the user the the "Azure role assignment" of "Virtual Machine Contributor" on that resource. We are using Bastion server to connect.
Intended users cannot see the VM inside their Azure portal.
If we make them an Administrator, they can see it. But that is not what we want.
Any advice would be welcome.