You need to create a custom role in Azure in order to be able to create a virtual machine. Is it enough to add Microsoft.Compute/* to actions?

No.

• You wouldn't be able to assign a resource group (missing role to list resource groups)
• You wouldn't be able to assign a virtual network (missing role to list virtual networks)

You need to add the following permissions to actions:

• Microsoft.Resources/*
• Microsoft.Network/*