Azure Site Recovery (ASR) provides 3 built-in roles to control Site Recovery management operations:
- Site Recovery Contributor > manage Azure Site Recovery operations in a Recovery Services vault.
- Site Recovery Operator > execute and manage Failover and Failback operations.
- Site Recovery Reader > view all Site Recovery management operations.

Custom roles can be defined for more control.