diff --git a/src/Resources/Resources.Test/Resources.Test.csproj b/src/Resources/Resources.Test/Resources.Test.csproj index f4c76b7ecced..1bd0fb5377e0 100644 --- a/src/Resources/Resources.Test/Resources.Test.csproj +++ b/src/Resources/Resources.Test/Resources.Test.csproj @@ -12,7 +12,7 @@ - + diff --git a/src/Resources/Resources.Test/ScenarioTests/Common.ps1 b/src/Resources/Resources.Test/ScenarioTests/Common.ps1 index 379114abc347..0c1e61ddd8f1 100644 --- a/src/Resources/Resources.Test/ScenarioTests/Common.ps1 +++ b/src/Resources/Resources.Test/ScenarioTests/Common.ps1 @@ -116,6 +116,9 @@ function New-AzRoleAssignmentWithId [string] [Parameter()] $RoleDefinitionName, [Guid] [Parameter()] $RoleDefinitionId, [switch] [Parameter()] $AllowDelegation, + [string] [Parameter()] $Description, + [string] [Parameter()] $Condition, + [string] [Parameter()] $ConditionVersion, [Guid] [Parameter()] $RoleAssignmentId ) @@ -184,6 +187,21 @@ function New-AzRoleAssignmentWithId $cmdlet.RoleAssignmentId = $RoleAssignmentId } + if (-not ([string]::IsNullOrEmpty($Description))) + { + $cmdlet.Description = $Description + } + + if (-not ([string]::IsNullOrEmpty($Condition))) + { + $cmdlet.Condition = $Condition + } + + if (-not ([string]::IsNullOrEmpty($ConditionVersion))) + { + $cmdlet.ConditionVersion = $ConditionVersion + } + $cmdlet.ExecuteCmdlet() } diff --git a/src/Resources/Resources.Test/ScenarioTests/RoleAssignmentTests.cs b/src/Resources/Resources.Test/ScenarioTests/RoleAssignmentTests.cs index a5082741319d..4489c52b2147 100644 --- a/src/Resources/Resources.Test/ScenarioTests/RoleAssignmentTests.cs +++ b/src/Resources/Resources.Test/ScenarioTests/RoleAssignmentTests.cs @@ -181,6 +181,34 @@ public void RaCreatedBySP() TestRunner.RunTestScript("Test-RaCreatedBySP"); } + [Fact] + [Trait(Category.AcceptanceType, Category.CheckIn)] + public void RaWithV1Conditions() + { + TestRunner.RunTestScript("Test-RaWithV1Conditions"); + } + + [Fact] + [Trait(Category.AcceptanceType, Category.CheckIn)] + public void RaWithV2Conditions() + { + TestRunner.RunTestScript("Test-RaWithV2Conditions"); + } + + [Fact] + [Trait(Category.AcceptanceType, Category.CheckIn)] + public void RaWithV2ConditionsOnly() + { + TestRunner.RunTestScript("Test-RaWithV2ConditionsOnly"); + } + + [Fact] + [Trait(Category.AcceptanceType, Category.CheckIn)] + public void RaWithV2ConditionVersionOnly() + { + TestRunner.RunTestScript("Test-RaWithV2ConditionVersionOnly"); + } + [Fact(Skip = "Fix the flaky test and token error and then re-record the test. Token from admin user is being used even when trying to use newly created user.")] [Trait(Category.AcceptanceType, Category.CheckIn)] public void RaUserPermissions() diff --git a/src/Resources/Resources.Test/ScenarioTests/RoleAssignmentTests.ps1 b/src/Resources/Resources.Test/ScenarioTests/RoleAssignmentTests.ps1 index a5d521987e02..11b2e7c93839 100644 --- a/src/Resources/Resources.Test/ScenarioTests/RoleAssignmentTests.ps1 +++ b/src/Resources/Resources.Test/ScenarioTests/RoleAssignmentTests.ps1 @@ -721,4 +721,137 @@ function Test-RaCreatedBySP -RoleAssignmentId f0f113bd-7ff9-4eb6-b949-5de18d1b38ca Assert-NotNull $data +} + +<# +.SYNOPSIS +Create role assignment with v1 conditions +#> +function Test-RaWithV1Conditions{ + + #Given + $RoleDefinitionId = "acdd72a7-3385-48ef-bd42-f606fba81ae7" + $PrincipalId = "01072e9b-c4a1-4246-a756-031b529bbf66" + $Scope = '/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg' + $Description = "This test should not fail" + $Condition = "@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container'" + $ConditionVersion = "1.0" + + #When + $data = {New-AzRoleAssignmentWithId ` + -ObjectId $PrincipalId ` + -Scope $Scope ` + -RoleDefinitionId $RoleDefinitionId ` + -Description $Description ` + -Condition $Condition ` + -ConditionVersion $ConditionVersion ` + -RoleAssignmentId 734de5f5-c680-41c0-8beb-67b98c3539d1} + + #Then + Assert-Throws $data "Argument -ConditionVersion must be greater or equal than 2.0" +} + +<# +.SYNOPSIS +Create role assignment with v2 conditions +#> +function Test-RaWithV2Conditions{ + #Given + $RoleDefinitionId = "acdd72a7-3385-48ef-bd42-f606fba81ae7" + $PrincipalId = "01072e9b-c4a1-4246-a756-031b529bbf66" + $Scope = '/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg' + $Description = "This test should not fail" + $Condition = "@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:Name] StringEqualsIgnoreCase 'foo_storage_container'" + $ConditionVersion = "2.0" + + #When + $data = New-AzRoleAssignmentWithId ` + -ObjectId $PrincipalId ` + -Scope $Scope ` + -RoleDefinitionId $RoleDefinitionId ` + -Description $Description ` + -Condition $Condition ` + -ConditionVersion $ConditionVersion ` + -RoleAssignmentId 734de5f5-c680-41c0-8beb-67b98c3539d2 + + #Then + Assert-NotNull $data "The role assignment was not created succesfully" + Assert-AreEqual $RoleDefinitionId $data.RoleDefinitionId "Assertion failed because expected RoleDefinitionId '$RoleDefinitionId' does not match actual '$data.RoleDefinitionId'" + Assert-AreEqual $PrincipalId $data.ObjectId "Assertion failed because expected PrincipalId '$PrincipalId' does not match actual '$data.ObjectId'" + Assert-AreEqual $Scope $data.Scope "Assertion failed because expected Scope '$Scope' does not match actual '$data.Scope'" + Assert-AreEqual $Description $data.Description "Assertion failed because expected Description '$Description' does not match actual '$data.Description'" + Assert-AreEqual $Condition $data.Condition "Assertion failed because expected Condition '$Condition' does not match actual '$data.Condition'" + Assert-AreEqual $ConditionVersion $data.ConditionVersion "Assertion failed because expected ConditionVersion '$ConditionVersion' does not match actual '$data.ConditionVersion'" + + #Cleanup + $data = Remove-AzRoleAssignment -InputObject $data + Assert-Null $data "Role assignment was not deleted properly" +} + +<# +.SYNOPSIS +Create role assignment with v2 conditions +#> +function Test-RaWithV2ConditionsOnly{ + #Given + $RoleDefinitionId = "acdd72a7-3385-48ef-bd42-f606fba81ae7" + $PrincipalId = "01072e9b-c4a1-4246-a756-031b529bbf66" + $Scope = '/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg' + #$RoleDefinitionId = "0353ee0a-19ae-4380-ba3d-d54767c75d5b" + #$PrincipalId = "e95fa608-3d49-4438-9f60-35d85d84ca16" + #$Scope = '/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/resourceGroups/daorozco_bug_repro' + $Description = "This test should not fail" + $Condition = "@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:Name] StringEqualsIgnoreCase 'foo_storage_container'" + $ConditionVersion = "2.0" + + #When + $data = New-AzRoleAssignmentWithId ` + -ObjectId $PrincipalId ` + -Scope $Scope ` + -RoleDefinitionId $RoleDefinitionId ` + -Description $Description ` + -Condition $Condition ` + -RoleAssignmentId 734de5f5-c680-41c0-8beb-67b98c3539d2 + + #Then + Assert-NotNull $data "The role assignment was not created succesfully" + Assert-AreEqual $RoleDefinitionId $data.RoleDefinitionId "Assertion failed because expected RoleDefinitionId '$RoleDefinitionId' does not match actual '$data.RoleDefinitionId'" + Assert-AreEqual $PrincipalId $data.ObjectId "Assertion failed because expected PrincipalId '$PrincipalId' does not match actual '$data.ObjectId'" + Assert-AreEqual $Scope $data.Scope "Assertion failed because expected Scope '$Scope' does not match actual '$data.Scope'" + Assert-AreEqual $Description $data.Description "Assertion failed because expected Description '$Description' does not match actual '$data.Description'" + Assert-AreEqual $Condition $data.Condition "Assertion failed because expected Condition '$Condition' does not match actual '$data.Condition'" + Assert-AreEqual $ConditionVersion $data.ConditionVersion "Assertion failed because expected ConditionVersion '$ConditionVersion' does not match actual '$data.ConditionVersion'" + + #Cleanup + $data = Remove-AzRoleAssignment -InputObject $data + Assert-Null $data "Role assignment was not deleted properly" +} + +<# +.SYNOPSIS +Create role assignment with v2 conditions +#> +function Test-RaWithV2ConditionVersionOnly{ + # IMPORTANT this cmdlet gets interrupted before any network call in this scenario, no session record is needed + #Given + #$RoleDefinitionId = "acdd72a7-3385-48ef-bd42-f606fba81ae7" + #$PrincipalId = "01072e9b-c4a1-4246-a756-031b529bbf66" + #$Scope = '/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg' + $RoleDefinitionId = "0353ee0a-19ae-4380-ba3d-d54767c75d5b" + $PrincipalId = "e95fa608-3d49-4438-9f60-35d85d84ca16" + $Scope = '/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/resourceGroups/daorozco_bug_repro' + $Description = "This test should not fail" + $ConditionVersion = "2.0" + + #When + $data = {New-AzRoleAssignmentWithId ` + -ObjectId $PrincipalId ` + -Scope $Scope ` + -RoleDefinitionId $RoleDefinitionId ` + -Description $Description ` + -ConditionVersion $ConditionVersion ` + -RoleAssignmentId 734de5f5-c680-41c0-8beb-67b98c3539d2} + + #Then + Assert-Throws $data "If -ConditionVersion is set -Condition can not be empty." } \ No newline at end of file diff --git a/src/Resources/Resources.Test/SessionRecords/Microsoft.Azure.Commands.Resources.Test.ScenarioTests.RoleAssignmentTests/RaWithV1Conditions.json b/src/Resources/Resources.Test/SessionRecords/Microsoft.Azure.Commands.Resources.Test.ScenarioTests.RoleAssignmentTests/RaWithV1Conditions.json new file mode 100644 index 000000000000..e02c8b4d1f52 --- /dev/null +++ b/src/Resources/Resources.Test/SessionRecords/Microsoft.Azure.Commands.Resources.Test.ScenarioTests.RoleAssignmentTests/RaWithV1Conditions.json @@ -0,0 +1,518 @@ +{ + "Entries": [ + { + "RequestUri": "//subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments/734de5f5-c680-41c0-8beb-67b98c3539d1?api-version=2020-04-01-preview", + "EncodedRequestUri": "Ly9zdWJzY3JpcHRpb25zLzQwMDRhOWZkLWQ1OGUtNDhkYy1hZWIyLTRhNGFlYzU4NjA2Zi9yZXNvdXJjZUdyb3Vwcy9kYW9yb3pjb19idWdfcmVwcm8vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3JvbGVBc3NpZ25tZW50cy83MzRkZTVmNS1jNjgwLTQxYzAtOGJlYi02N2I5OGMzNTM5ZDE/YXBpLXZlcnNpb249MjAyMC0wNC0wMS1wcmV2aWV3", + "RequestMethod": "PUT", + "RequestBody": "{\r\n \"properties\": {\r\n \"roleDefinitionId\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"principalId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"canDelegate\": false,\r\n \"description\": \"This test should not fail\",\r\n \"condition\": \"@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container'\",\r\n \"conditionVersion\": \"1.0\"\r\n }\r\n}", + "RequestHeaders": { + "x-ms-client-request-id": [ + "b5c311e5-d703-451f-a7b7-6c181b6f341e" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.28928.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.12.0.0" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Content-Length": [ + "547" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-request-id": [ + "59de6b34-8b25-4720-933c-503a47b487ae" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Set-Cookie": [ + "x-ms-gateway-slice=Production; path=/; SameSite=None; secure; HttpOnly" + ], + "x-ms-ratelimit-remaining-subscription-writes": [ + "1199" + ], + "x-ms-correlation-request-id": [ + "496febc6-c217-47ef-b246-408671fd16f6" + ], + "x-ms-routing-request-id": [ + "WESTUS:20200709T230031Z:496febc6-c217-47ef-b246-408671fd16f6" + ], + "Date": [ + "Thu, 09 Jul 2020 23:00:31 GMT" + ], + "Content-Length": [ + "1050" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"properties\": {\r\n \"roleDefinitionId\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"principalId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"principalType\": \"User\",\r\n \"scope\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg\",\r\n \"condition\": \"@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container'\",\r\n \"conditionVersion\": \"1.0\",\r\n \"createdOn\": \"2020-07-09T23:00:30.2997885Z\",\r\n \"updatedOn\": \"2020-07-09T23:00:30.2997885Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"canDelegate\": false,\r\n \"delegatedManagedIdentityResourceId\": null,\r\n \"description\": \"This test should not fail\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments/734de5f5-c680-41c0-8beb-67b98c3539d1\",\r\n \"type\": \"Microsoft.Authorization/roleAssignments\",\r\n \"name\": \"734de5f5-c680-41c0-8beb-67b98c3539d1\"\r\n}", + "StatusCode": 201 + }, + { + "RequestUri": "//subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7?api-version=2018-01-01-preview", + "EncodedRequestUri": "Ly9zdWJzY3JpcHRpb25zLzQwMDRhOWZkLWQ1OGUtNDhkYy1hZWIyLTRhNGFlYzU4NjA2Zi9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcm9sZURlZmluaXRpb25zL2FjZGQ3MmE3LTMzODUtNDhlZi1iZDQyLWY2MDZmYmE4MWFlNz9hcGktdmVyc2lvbj0yMDE4LTAxLTAxLXByZXZpZXc=", + "RequestMethod": "GET", + "RequestBody": "", + "RequestHeaders": { + "x-ms-client-request-id": [ + "f847702a-2031-49fe-a8d4-b72b04a96481" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.28928.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.12.0.0" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-request-id": [ + "7ac679cc-da8f-4b12-afa1-3e589d6d8719" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Set-Cookie": [ + "x-ms-gateway-slice=Production; path=/; secure; HttpOnly; SameSite=None" + ], + "x-ms-ratelimit-remaining-subscription-reads": [ + "11999" + ], + "x-ms-correlation-request-id": [ + "b26cbe8c-da0c-4a36-8792-a2d3c3028bc1" + ], + "x-ms-routing-request-id": [ + "WESTUS:20200709T230031Z:b26cbe8c-da0c-4a36-8792-a2d3c3028bc1" + ], + "Date": [ + "Thu, 09 Jul 2020 23:00:31 GMT" + ], + "Content-Length": [ + "603" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"properties\": {\r\n \"roleName\": \"Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you view everything, but not make any changes.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:35.7424745Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"acdd72a7-3385-48ef-bd42-f606fba81ae7\"\r\n}", + "StatusCode": 200 + }, + { + "RequestUri": "/395544B0-BF41-429D-921F-E1CA2252FCF4/getObjectsByObjectIds?api-version=1.6", + "EncodedRequestUri": "LzEyNzNhZGVmLTAwYTMtNDA4Ni1hNTFhLWRiY2NlMTg1N2QzNi9nZXRPYmplY3RzQnlPYmplY3RJZHM/YXBpLXZlcnNpb249MS42", + "RequestMethod": "POST", + "RequestBody": "{\r\n \"objectIds\": [\r\n \"01072e9b-c4a1-4246-a756-031b529bbf66\"\r\n ],\r\n \"includeDirectoryObjectReferences\": true\r\n}", + "RequestHeaders": { + "x-ms-client-request-id": [ + "26494229-be6d-4932-bccb-f3f2549af2fe" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.28928.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Graph.RBAC.GraphRbacManagementClient/3.5.0.0" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Content-Length": [ + "116" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "ocp-aad-diagnostics-server-name": [ + "a9mmah5e/Em6iyx6j5zM82NNZhbYYB8EG3Lr9YKbAhU=" + ], + "request-id": [ + "4fb4daf1-df73-4fd5-ac12-4ceb8ce9b2d3" + ], + "client-request-id": [ + "26494229-be6d-4932-bccb-f3f2549af2fe" + ], + "x-ms-dirapi-data-contract-version": [ + "1.6" + ], + "ocp-aad-session-key": [ + "p63jtIjENpcyijIiOIxNCP1yPg2snfkMpbJW0UQ_i4zOrUpJrywLKZr0FkjlHGkeU6yH-z1e19j-kJr-05qAUNaWch3Z5RxLYEC-YPL-Sy6MNy5vcPch0VBBtskaMGL4.5b-I7qbld4WHI9HmC-mo66Q0Zt4LE0HpjMgeZITbXHY" + ], + "x-aad-resource-unit": [ + "3" + ], + "DataServiceVersion": [ + "3.0;" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Access-Control-Allow-Origin": [ + "*" + ], + "X-AspNet-Version": [ + "4.0.30319" + ], + "X-Powered-By": [ + "ASP.NET" + ], + "Duration": [ + "727329" + ], + "Date": [ + "Thu, 09 Jul 2020 23:00:30 GMT" + ], + "Content-Type": [ + "application/json; odata=minimalmetadata; streaming=true; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Content-Length": [ + "1511" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"odata.metadata\": \"https://graph.windows.net/1273adef-00a3-4086-a51a-dbcce1857d36/$metadata#directoryObjects\",\r\n \"value\": [\r\n {\r\n \"odata.type\": \"Microsoft.DirectoryServices.User\",\r\n \"objectType\": \"User\",\r\n \"objectId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"deletionTimestamp\": null,\r\n \"accountEnabled\": true,\r\n \"ageGroup\": null,\r\n \"assignedLicenses\": [],\r\n \"assignedPlans\": [],\r\n \"city\": null,\r\n \"companyName\": null,\r\n \"consentProvidedForMinor\": null,\r\n \"country\": null,\r\n \"createdDateTime\": \"2020-07-06T23:49:47Z\",\r\n \"creationType\": null,\r\n \"department\": null,\r\n \"dirSyncEnabled\": null,\r\n \"displayName\": \"ddd\",\r\n \"employeeId\": null,\r\n \"facsimileTelephoneNumber\": null,\r\n \"givenName\": null,\r\n \"immutableId\": null,\r\n \"isCompromised\": null,\r\n \"jobTitle\": null,\r\n \"lastDirSyncTime\": null,\r\n \"legalAgeGroupClassification\": null,\r\n \"mail\": null,\r\n \"mailNickname\": \"dagoroz-bug-repro\",\r\n \"mobile\": null,\r\n \"onPremisesDistinguishedName\": null,\r\n \"onPremisesSecurityIdentifier\": null,\r\n \"otherMails\": [],\r\n \"passwordPolicies\": null,\r\n \"passwordProfile\": {\r\n \"password\": null,\r\n \"forceChangePasswordNextLogin\": true,\r\n \"enforceChangePasswordPolicy\": false\r\n },\r\n \"physicalDeliveryOfficeName\": null,\r\n \"postalCode\": null,\r\n \"preferredLanguage\": null,\r\n \"provisionedPlans\": [],\r\n \"provisioningErrors\": [],\r\n \"proxyAddresses\": [],\r\n \"refreshTokensValidFromDateTime\": \"2020-07-06T23:49:47Z\",\r\n \"showInAddressList\": null,\r\n \"signInNames\": [],\r\n \"sipProxyAddress\": null,\r\n \"state\": null,\r\n \"streetAddress\": null,\r\n \"surname\": null,\r\n \"telephoneNumber\": null,\r\n \"usageLocation\": null,\r\n \"userIdentities\": [],\r\n \"userPrincipalName\": \"dagoroz-bug-repro@rbacclitest.onmicrosoft.com\",\r\n \"userState\": null,\r\n \"userStateChangedOn\": null,\r\n \"userType\": \"Member\"\r\n }\r\n ]\r\n}", + "StatusCode": 200 + }, + { + "RequestUri": "/395544B0-BF41-429D-921F-E1CA2252FCF4/getObjectsByObjectIds?api-version=1.6", + "EncodedRequestUri": "LzEyNzNhZGVmLTAwYTMtNDA4Ni1hNTFhLWRiY2NlMTg1N2QzNi9nZXRPYmplY3RzQnlPYmplY3RJZHM/YXBpLXZlcnNpb249MS42", + "RequestMethod": "POST", + "RequestBody": "{\r\n \"objectIds\": [\r\n \"01072e9b-c4a1-4246-a756-031b529bbf66\"\r\n ],\r\n \"includeDirectoryObjectReferences\": true\r\n}", + "RequestHeaders": { + "x-ms-client-request-id": [ + "e5e4c510-a698-4f60-8cca-9a285e7bc731" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.28928.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Graph.RBAC.GraphRbacManagementClient/3.5.0.0" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Content-Length": [ + "116" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "ocp-aad-diagnostics-server-name": [ + "Jyamh40I/riKJflXwk3LHmaI3Lsq6osSe+/rd7Qerq0=" + ], + "request-id": [ + "317d9513-fb17-4e28-bdf8-67dd13306c22" + ], + "client-request-id": [ + "e5e4c510-a698-4f60-8cca-9a285e7bc731" + ], + "x-ms-dirapi-data-contract-version": [ + "1.6" + ], + "ocp-aad-session-key": [ + "lN2aNUDadUPUeAODLRUiL7a8_Owj3OwGEKFMQNaWy9OUEUJdTuKJV2gR2JqWzrS6PifMCCg8ZQ8Iqkl9KYoLTEyGtMpO-G2DgluTp--hl-LTO6uZKqq1mo0_76T_kNCk.fGJ-MXwJop6Flnh-LJbk6Z9H_EvZZCuN7WtM0p7bVuc" + ], + "x-aad-resource-unit": [ + "3" + ], + "DataServiceVersion": [ + "3.0;" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Access-Control-Allow-Origin": [ + "*" + ], + "X-AspNet-Version": [ + "4.0.30319" + ], + "X-Powered-By": [ + "ASP.NET" + ], + "Duration": [ + "740529" + ], + "Date": [ + "Thu, 09 Jul 2020 23:00:31 GMT" + ], + "Content-Type": [ + "application/json; odata=minimalmetadata; streaming=true; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Content-Length": [ + "1511" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"odata.metadata\": \"https://graph.windows.net/1273adef-00a3-4086-a51a-dbcce1857d36/$metadata#directoryObjects\",\r\n \"value\": [\r\n {\r\n \"odata.type\": \"Microsoft.DirectoryServices.User\",\r\n \"objectType\": \"User\",\r\n \"objectId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"deletionTimestamp\": null,\r\n \"accountEnabled\": true,\r\n \"ageGroup\": null,\r\n \"assignedLicenses\": [],\r\n \"assignedPlans\": [],\r\n \"city\": null,\r\n \"companyName\": null,\r\n \"consentProvidedForMinor\": null,\r\n \"country\": null,\r\n \"createdDateTime\": \"2020-07-06T23:49:47Z\",\r\n \"creationType\": null,\r\n \"department\": null,\r\n \"dirSyncEnabled\": null,\r\n \"displayName\": \"ddd\",\r\n \"employeeId\": null,\r\n \"facsimileTelephoneNumber\": null,\r\n \"givenName\": null,\r\n \"immutableId\": null,\r\n \"isCompromised\": null,\r\n \"jobTitle\": null,\r\n \"lastDirSyncTime\": null,\r\n \"legalAgeGroupClassification\": null,\r\n \"mail\": null,\r\n \"mailNickname\": \"dagoroz-bug-repro\",\r\n \"mobile\": null,\r\n \"onPremisesDistinguishedName\": null,\r\n \"onPremisesSecurityIdentifier\": null,\r\n \"otherMails\": [],\r\n \"passwordPolicies\": null,\r\n \"passwordProfile\": {\r\n \"password\": null,\r\n \"forceChangePasswordNextLogin\": true,\r\n \"enforceChangePasswordPolicy\": false\r\n },\r\n \"physicalDeliveryOfficeName\": null,\r\n \"postalCode\": null,\r\n \"preferredLanguage\": null,\r\n \"provisionedPlans\": [],\r\n \"provisioningErrors\": [],\r\n \"proxyAddresses\": [],\r\n \"refreshTokensValidFromDateTime\": \"2020-07-06T23:49:47Z\",\r\n \"showInAddressList\": null,\r\n \"signInNames\": [],\r\n \"sipProxyAddress\": null,\r\n \"state\": null,\r\n \"streetAddress\": null,\r\n \"surname\": null,\r\n \"telephoneNumber\": null,\r\n \"usageLocation\": null,\r\n \"userIdentities\": [],\r\n \"userPrincipalName\": \"dagoroz-bug-repro@rbacclitest.onmicrosoft.com\",\r\n \"userState\": null,\r\n \"userStateChangedOn\": null,\r\n \"userType\": \"Member\"\r\n }\r\n ]\r\n}", + "StatusCode": 200 + }, + { + "RequestUri": "//subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments?$filter=principalId%20eq%20'01072e9b-c4a1-4246-a756-031b529bbf66'&api-version=2020-04-01-preview", + "EncodedRequestUri": "Ly9zdWJzY3JpcHRpb25zLzQwMDRhOWZkLWQ1OGUtNDhkYy1hZWIyLTRhNGFlYzU4NjA2Zi9yZXNvdXJjZUdyb3Vwcy9kYW9yb3pjb19idWdfcmVwcm8vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3JvbGVBc3NpZ25tZW50cz8kZmlsdGVyPXByaW5jaXBhbElkJTIwZXElMjAnZTk1ZmE2MDgtM2Q0OS00NDM4LTlmNjAtMzVkODVkODRjYTE2JyZhcGktdmVyc2lvbj0yMDIwLTA0LTAxLXByZXZpZXc=", + "RequestMethod": "GET", + "RequestBody": "", + "RequestHeaders": { + "x-ms-client-request-id": [ + "10c67b81-ce54-4aa9-937e-5aa1d7667498" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.28928.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.12.0.0" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-request-id": [ + "e7a30428-c47d-4eb2-9ab7-85e93cfafa29" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Set-Cookie": [ + "x-ms-gateway-slice=Production; path=/; SameSite=None; secure; HttpOnly" + ], + "x-ms-ratelimit-remaining-subscription-reads": [ + "11999" + ], + "x-ms-correlation-request-id": [ + "12c38987-af64-4eef-ad9c-a2ad32108370" + ], + "x-ms-routing-request-id": [ + "WESTUS:20200709T230031Z:12c38987-af64-4eef-ad9c-a2ad32108370" + ], + "Date": [ + "Thu, 09 Jul 2020 23:00:31 GMT" + ], + "Content-Length": [ + "1096" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"properties\": {\r\n \"roleDefinitionId\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"principalId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"principalType\": \"User\",\r\n \"scope\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg\",\r\n \"condition\": \"@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container'\",\r\n \"conditionVersion\": \"1.0\",\r\n \"createdOn\": \"2020-07-09T23:00:30.4997866Z\",\r\n \"updatedOn\": \"2020-07-09T23:00:30.4997866Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"canDelegate\": false,\r\n \"delegatedManagedIdentityResourceId\": null,\r\n \"description\": \"This test should not fail\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments/734de5f5-c680-41c0-8beb-67b98c3539d1\",\r\n \"type\": \"Microsoft.Authorization/roleAssignments\",\r\n \"name\": \"734de5f5-c680-41c0-8beb-67b98c3539d1\"\r\n }\r\n ]\r\n}", + "StatusCode": 200 + }, + { + "RequestUri": "//subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleDefinitions?api-version=2018-01-01-preview", + "EncodedRequestUri": "Ly9zdWJzY3JpcHRpb25zLzQwMDRhOWZkLWQ1OGUtNDhkYy1hZWIyLTRhNGFlYzU4NjA2Zi9yZXNvdXJjZUdyb3Vwcy9kYW9yb3pjb19idWdfcmVwcm8vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3JvbGVEZWZpbml0aW9ucz9hcGktdmVyc2lvbj0yMDE4LTAxLTAxLXByZXZpZXc=", + "RequestMethod": "GET", + "RequestBody": "", + "RequestHeaders": { + "x-ms-client-request-id": [ + "8d5e5db6-cc81-40cc-ac01-3bc0118d9183" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.28928.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.12.0.0" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-request-id": [ + "05b9fd3a-b8a6-4504-8a3e-094a6b7938e3" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Set-Cookie": [ + "x-ms-gateway-slice=Production; path=/; secure; HttpOnly; SameSite=None" + ], + "x-ms-ratelimit-remaining-subscription-reads": [ + "11998" + ], + "x-ms-correlation-request-id": [ + "2888c327-01b4-4741-9331-de67276b428b" + ], + "x-ms-routing-request-id": [ + "WESTUS:20200709T230032Z:2888c327-01b4-4741-9331-de67276b428b" + ], + "Date": [ + "Thu, 09 Jul 2020 23:00:31 GMT" + ], + "Content-Length": [ + "244004" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Custom Reader Test Properties\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Read, monitor and restart virtual machines\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Authorization/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.ClassicCompute/virtualMachines/restart/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-13T18:17:20.8584392Z\",\r\n \"updatedOn\": \"2018-03-13T18:18:37.0952708Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/171d2453-29dc-42b4-84fc-3fd259eeaec3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"171d2453-29dc-42b4-84fc-3fd259eeaec3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"OnCommand Cloud Manager Operator\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"OnCommand Cloud Manager Permissions\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Compute/disks/delete\",\r\n \"Microsoft.Compute/disks/read\",\r\n \"Microsoft.Compute/disks/write\",\r\n \"Microsoft.Compute/locations/operations/read\",\r\n \"Microsoft.Compute/locations/vmSizes/read\",\r\n \"Microsoft.Compute/operations/read\",\r\n \"Microsoft.Compute/virtualMachines/instanceView/read\",\r\n \"Microsoft.Compute/virtualMachines/powerOff/action\",\r\n \"Microsoft.Compute/virtualMachines/read\",\r\n \"Microsoft.Compute/virtualMachines/restart/action\",\r\n \"Microsoft.Compute/virtualMachines/start/action\",\r\n \"Microsoft.Compute/virtualMachines/deallocate/action\",\r\n \"Microsoft.Compute/virtualMachines/vmSizes/read\",\r\n \"Microsoft.Compute/virtualMachines/write\",\r\n \"Microsoft.Network/locations/operationResults/read\",\r\n \"Microsoft.Network/locations/operations/read\",\r\n \"Microsoft.Network/networkInterfaces/read\",\r\n \"Microsoft.Network/networkInterfaces/write\",\r\n \"Microsoft.Network/networkInterfaces/join/action\",\r\n \"Microsoft.Network/networkSecurityGroups/read\",\r\n \"Microsoft.Network/networkSecurityGroups/write\",\r\n \"Microsoft.Network/networkSecurityGroups/join/action\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/virtualNetworks/checkIpAddressAvailability/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/virtualMachines/read\",\r\n \"Microsoft.Network/virtualNetworks/virtualMachines/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/join/action\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Resources/deployments/read\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/resources/read\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/delete\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/subscriptions/resourcegroups/resources/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/write\",\r\n \"Microsoft.Storage/checknameavailability/read\",\r\n \"Microsoft.Storage/operations/read\",\r\n \"Microsoft.Storage/storageAccounts/listkeys/action\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.Storage/storageAccounts/regeneratekey/action\",\r\n \"Microsoft.Storage/storageAccounts/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-03-29T21:56:07.9054892Z\",\r\n \"updatedOn\": \"2017-03-29T21:56:07.9054892Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/9acd117c-1527-4461-ab19-031c2329aa9b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"9acd117c-1527-4461-ab19-031c2329aa9b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Support Custom Role\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Support Custom Role\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-02-02T02:17:43.627696Z\",\r\n \"updatedOn\": \"2017-04-20T22:55:02.9860347Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/ee2d57e0-fda3-436d-8174-f3c9684efb46\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ee2d57e0-fda3-436d-8174-f3c9684efb46\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Test Administrator\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test Role to manage Azure environment\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ADHybridHealthService/configuration/read\",\r\n \"Microsoft.ADHybridHealthService/services/read\",\r\n \"Microsoft.ADHybridHealthService/services/servicemembers/read\",\r\n \"Microsoft.ADHybridHealthService/services/servicemembers/alerts/read\",\r\n \"Microsoft.ADHybridHealthService/services/alerts/read\",\r\n \"Microsoft.Advisor/register/action\",\r\n \"Microsoft.Advisor/recommendations/read\",\r\n \"Microsoft.Authorization/classicAdministrators/read\",\r\n \"Microsoft.Authorization/locks/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-25T23:19:00.1735084Z\",\r\n \"updatedOn\": \"2017-05-25T23:19:00.1735084Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/239cd0e7-5e27-4872-a1d0-0ff3c4cec6b6\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"239cd0e7-5e27-4872-a1d0-0ff3c4cec6b6\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Test Administrator for testing\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test Role to manage Azure environment\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/roleAssignments/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-10-31T23:40:34.3971201Z\",\r\n \"updatedOn\": \"2017-10-31T23:40:34.3971201Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/7db62a6c-edd9-42bb-b30e-31fc063ce154\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7db62a6c-edd9-42bb-b30e-31fc063ce154\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Test definiton\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Can monitor compute, network and storage, and restart virtual machines\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/ResourceGroups/rbacproda\",\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/ResourceGroups\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-06-30T20:29:54.258388Z\",\r\n \"updatedOn\": \"2017-06-30T20:29:54.258388Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/574857fa-2e5b-4029-ada2-7d042637cbfb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"574857fa-2e5b-4029-ada2-7d042637cbfb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Test RD\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test RDDD\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Compute/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-04-17T18:39:35.636177Z\",\r\n \"updatedOn\": \"2018-04-17T18:39:35.636177Z\",\r\n \"createdBy\": \"76102c29-afb3-4704-a4b7-683bd5b14934\",\r\n \"updatedBy\": \"76102c29-afb3-4704-a4b7-683bd5b14934\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/98b036c8-8bf1-4f4a-8f50-a0a6dde0e734\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"98b036c8-8bf1-4f4a-8f50-a0a6dde0e734\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"test role and another testrole\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test role\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-22T23:58:52.7462995Z\",\r\n \"updatedOn\": \"2018-04-11T20:49:59.3331071Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/a997608d-3f63-4eeb-b01b-1b3ae270cd6d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a997608d-3f63-4eeb-b01b-1b3ae270cd6d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Test definiton2\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Can monitor compute, network and storage, and restart virtual machines\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/ResourceGroups/rbacproda\",\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/ResourceGroups\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-06-30T20:32:19.4246182Z\",\r\n \"updatedOn\": \"2017-06-30T20:32:19.4246182Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/0b98a570-beae-486e-aa44-7cb035aa126d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0b98a570-beae-486e-aa44-7cb035aa126d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testrole132\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Custom Role Test Desc\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-05-30T23:13:47.7513317Z\",\r\n \"updatedOn\": \"2018-05-30T23:13:47.7513317Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/3e66a0a6-a18a-4afc-a5cc-ec19e06012ae\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3e66a0a6-a18a-4afc-a5cc-ec19e06012ae\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testrole-novm\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets Fuse Developers access select objects they need.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Resources/subscriptions/resourceGroups/*/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/*/read\",\r\n \"Microsoft.Storage/storageAccounts/*/read\",\r\n \"Microsoft.Web/sites/*/read\",\r\n \"Microsoft.ServiceBus/namespaces/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/*/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-09-20T00:19:06.4239042Z\",\r\n \"updatedOn\": \"2018-09-20T00:19:06.4239042Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/ef4af617-2f0e-412b-b30a-b7c848aa9098\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ef4af617-2f0e-412b-b30a-b7c848aa9098\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"TestRole_1c581fde-9c61-41fe-b0fa-9f113f09280d\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Custom Role Test Desc\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/rbactest\",\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-03-11T00:43:21.0606467Z\",\r\n \"updatedOn\": \"2017-04-21T18:07:28.8010892Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/41c81219-e0b7-4d81-96db-5ac27ff234be\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"41c81219-e0b7-4d81-96db-5ac27ff234be\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"TestRole_6d13263a-d237-4d4d-9227-a9e055757887\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Custom Role Test Desc\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-06-29T23:20:59.9048046Z\",\r\n \"updatedOn\": \"2017-06-29T23:20:59.9048046Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/7749b7c9-67a5-4d9c-9e58-58c811859c1a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7749b7c9-67a5-4d9c-9e58-58c811859c1a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"TestContributor\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you manage everything except access to resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/*/Delete\",\r\n \"Microsoft.Authorization/*/Write\",\r\n \"Microsoft.Authorization/elevateAccess/Action\",\r\n \"Microsoft.Blueprint/blueprintAssignments/write\",\r\n \"Microsoft.Blueprint/blueprintAssignments/delete\",\r\n \"Microsoft.Storage/storageAccounts/write\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-03-06T00:36:20.4923118Z\",\r\n \"updatedOn\": \"2019-04-10T19:14:27.67508Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/c24988ac-6180-42a0-ab88-20f7382dd24c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CustomRole Tests Role\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test role\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-21T18:24:29.0508834Z\",\r\n \"updatedOn\": \"2019-08-21T18:32:39.5641976Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8d7dd69e-9ae2-44a1-94d8-f7bc8e12645e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8d7dd69e-9ae2-44a1-94d8-f7bc8e12645e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testbatchcontributor\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Batch/batchAccounts/read\",\r\n \"Microsoft.Batch/batchAccounts/*/read\",\r\n \"Microsoft.Batch/batchAccounts/applications/*\",\r\n \"Microsoft.Batch/batchAccounts/listkeys/action\",\r\n \"Microsoft.Batch/batchAccounts/pools/write\",\r\n \"Microsoft.Batch/batchAccounts/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-09-10T16:44:02.3947885Z\",\r\n \"updatedOn\": \"2019-09-10T16:44:02.3947885Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/e2ab292b-812a-4306-9c73-df992f61649b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e2ab292b-812a-4306-9c73-df992f61649b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"No RD WRITE\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you manage everything, including access to resources.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/roleDefinitions/write\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-01-28T00:57:45.1574464Z\",\r\n \"updatedOn\": \"2020-01-28T00:57:45.1574464Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/d8bae860-743b-407c-8cf0-3aa1cbb8788c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"d8bae860-743b-407c-8cf0-3aa1cbb8788c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"No RD READ\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you manage everything, including access to resources.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/roleDefinitions/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-01-29T00:27:29.0693475Z\",\r\n \"updatedOn\": \"2020-01-29T00:27:29.0693475Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/724dd060-7e51-4f7b-a749-cd927f345b68\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"724dd060-7e51-4f7b-a749-cd927f345b68\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"asd\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Synapse/register/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-19T20:09:21.8617073Z\",\r\n \"updatedOn\": \"2020-02-19T20:09:21.8617073Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/254d9483-0229-40a3-a457-f6cbb5449be6\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"254d9483-0229-40a3-a457-f6cbb5449be6\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"teste\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"setesrt\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"microsoft.operationalinsights/register/action\",\r\n \"microsoft.operationalinsights/unregister/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-27T01:22:58.9649766Z\",\r\n \"updatedOn\": \"2020-02-27T01:22:58.9649766Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/7da825e5-3464-48e4-8646-fab69f7de46c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7da825e5-3464-48e4-8646-fab69f7de46c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"asda\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"asdasd\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Synapse/checkNameAvailability/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-27T19:33:25.1899025Z\",\r\n \"updatedOn\": \"2020-02-27T19:33:25.1899025Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/7cab0ec5-99cb-466f-937e-26806c98f0fb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7cab0ec5-99cb-466f-937e-26806c98f0fb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CloneIt\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-17T03:08:21.1526749Z\",\r\n \"updatedOn\": \"2020-03-17T03:08:21.1526749Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/acfb9fda-b179-4290-8d82-609ddb722ca0\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"acfb9fda-b179-4290-8d82-609ddb722ca0\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"RyanTestMG\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you view everything, but not make any changes.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\",\r\n \"/providers/Microsoft.Management/managementGroups/thisdoesntexist\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-18T23:23:29.8420866Z\",\r\n \"updatedOn\": \"2020-03-18T23:23:29.8420866Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/f5fde758-46cb-4388-8e2d-5dfb6f9c5e26\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f5fde758-46cb-4388-8e2d-5dfb6f9c5e26\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"27MarchCR Clone\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [\r\n \"Microsoft.ClassicCompute/virtualMachines/capture/action\",\r\n \"Microsoft.ClassicCompute/virtualMachines/start/action\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-27T03:30:41.2204287Z\",\r\n \"updatedOn\": \"2020-05-25T03:59:50.7212707Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/688cffa8-c3ad-434d-95bf-4feef208c51f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"688cffa8-c3ad-434d-95bf-4feef208c51f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"dfg\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"84codes.CloudAMQP/updateCommunicationPreference/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-04-15T17:01:23.582234Z\",\r\n \"updatedOn\": \"2020-04-15T17:01:23.582234Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/666436ac-d087-4028-8caa-3d56838acc54\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"666436ac-d087-4028-8caa-3d56838acc54\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testest\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"84codes.CloudAMQP/updateCommunicationPreference/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-04-15T17:28:05.771688Z\",\r\n \"updatedOn\": \"2020-04-15T17:28:05.771688Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/778f1528-7abc-42be-a89f-d72860782919\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"778f1528-7abc-42be-a89f-d72860782919\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testewasdasd\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"84codes.CloudAMQP/updateCommunicationPreference/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-04-16T19:16:54.3681577Z\",\r\n \"updatedOn\": \"2020-04-16T19:16:54.3681577Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/351dc63d-3eec-4697-bf6b-ebeb52629640\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"351dc63d-3eec-4697-bf6b-ebeb52629640\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"asdsad\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Synapse/checkNameAvailability/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-04-23T15:27:01.6742334Z\",\r\n \"updatedOn\": \"2020-04-23T15:27:01.6742334Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/2b516d2c-4b58-45d7-8c2b-55f2e936d21a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"2b516d2c-4b58-45d7-8c2b-55f2e936d21a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testrole1234\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T09:19:08.0056403Z\",\r\n \"updatedOn\": \"2020-06-09T09:19:08.0056403Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/f1ae5ae6-80f8-4b6a-9962-96e885ed2fdf\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f1ae5ae6-80f8-4b6a-9962-96e885ed2fdf\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customreader\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T21:33:19.2160171Z\",\r\n \"updatedOn\": \"2020-06-09T21:33:19.2160171Z\",\r\n \"createdBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\",\r\n \"updatedBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/e9bfc956-b9d6-4931-8df6-d8e759dfb7bd\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e9bfc956-b9d6-4931-8df6-d8e759dfb7bd\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customabc\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T21:37:45.502473Z\",\r\n \"updatedOn\": \"2020-06-09T21:37:45.502473Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/1d3c667d-d849-4444-a61e-910a34a5fbc3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"1d3c667d-d849-4444-a61e-910a34a5fbc3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customroletest123\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:01:04.3209554Z\",\r\n \"updatedOn\": \"2020-06-09T22:01:04.3209554Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/0a301507-673a-47b2-a629-7fa8ca72af3f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0a301507-673a-47b2-a629-7fa8ca72af3f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customroleabc\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:09:16.2626975Z\",\r\n \"updatedOn\": \"2020-06-09T22:09:16.2626975Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/bc1ff923-7253-46cd-9120-6ad03ef2d6e6\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"bc1ff923-7253-46cd-9120-6ad03ef2d6e6\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customreader123\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:12:24.0862728Z\",\r\n \"updatedOn\": \"2020-06-09T22:12:24.0862728Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8700af82-f42f-4393-a5f2-eee83964a9aa\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8700af82-f42f-4393-a5f2-eee83964a9aa\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"test123abc\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:14:57.6218091Z\",\r\n \"updatedOn\": \"2020-06-09T22:14:57.6218091Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/eef4fe94-b510-4514-8669-0548903f3495\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"eef4fe94-b510-4514-8669-0548903f3495\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customroleabc123\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:37:36.1262398Z\",\r\n \"updatedOn\": \"2020-06-09T22:37:36.1262398Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/fd01a54f-fd90-46ec-b525-a636a28df51f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fd01a54f-fd90-46ec-b525-a636a28df51f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testcustomroleabc\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:42:30.4994673Z\",\r\n \"updatedOn\": \"2020-06-09T22:42:30.4994673Z\",\r\n \"createdBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\",\r\n \"updatedBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/fecfef36-f4fc-4e4b-93ff-7db5732a444d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fecfef36-f4fc-4e4b-93ff-7db5732a444d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"zzcustomrolezz\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:52:41.6786191Z\",\r\n \"updatedOn\": \"2020-06-09T22:52:41.6786191Z\",\r\n \"createdBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\",\r\n \"updatedBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/dc307f0a-46a2-4260-bbca-66b3a4448a8d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"dc307f0a-46a2-4260-bbca-66b3a4448a8d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testCustomRole\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:55:26.5124865Z\",\r\n \"updatedOn\": \"2020-06-09T22:55:26.5124865Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b768931c-5d00-4572-a731-431c6189f0da\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b768931c-5d00-4572-a731-431c6189f0da\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"bbCustomRole\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T23:42:41.0368856Z\",\r\n \"updatedOn\": \"2020-06-09T23:42:41.0368856Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/ae101df6-14ae-4d66-bbe0-a469a964f90f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ae101df6-14ae-4d66-bbe0-a469a964f90f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"zzCustomRole\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T23:55:14.2992167Z\",\r\n \"updatedOn\": \"2020-06-09T23:55:14.2992167Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/bec73b96-f2cf-436c-8917-d547da43a149\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"bec73b96-f2cf-436c-8917-d547da43a149\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customrole123\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-10T01:13:23.0150344Z\",\r\n \"updatedOn\": \"2020-06-10T01:13:23.0150344Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/32d6d31d-e61a-41ec-8386-5dc64b3bc204\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"32d6d31d-e61a-41ec-8386-5dc64b3bc204\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"No RA READ\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you manage everything, including access to resources.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/roleAssignments/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-17T06:31:33.3927723Z\",\r\n \"updatedOn\": \"2020-06-17T06:31:33.3927723Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/6f2b4c36-69f1-4a45-8cda-7d5a9b690408\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"6f2b4c36-69f1-4a45-8cda-7d5a9b690408\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"No RA WRITE\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you manage everything, including access to resources.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/roleAssignments/write\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-17T06:41:55.5369299Z\",\r\n \"updatedOn\": \"2020-06-17T06:41:55.5369299Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/a43bed91-a7af-418a-8f07-e135d151b5b8\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a43bed91-a7af-418a-8f07-e135d151b5b8\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Another tests role\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test role\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\",\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/ResourceGroups/rbactest\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-01T23:09:24.5638411Z\",\r\n \"updatedOn\": \"2020-07-01T23:09:24.5638411Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/0a0e83bc-50b9-4c4d-b2c2-3f41e1a8baf2\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0a0e83bc-50b9-4c4d-b2c2-3f41e1a8baf2\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Daoroz-Custom1\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"A role to use when testing various things\\nIt does not grant any real permissions, just the ability to read role definitions\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/roleDefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-08T17:44:15.2525393Z\",\r\n \"updatedOn\": \"2020-07-08T17:44:15.2525393Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/0353ee0a-19ae-4380-ba3d-d54767c75d5b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0353ee0a-19ae-4380-ba3d-d54767c75d5b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Daoroz-Custom2\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"A role to be used when testing various things\\nIt does not grant any real permissions, just the ability to read role definitions\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/roleDefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-08T17:51:15.4187811Z\",\r\n \"updatedOn\": \"2020-07-08T17:51:15.4187811Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/98ee936c-393c-4f03-81a8-6eccfd82d96e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"98ee936c-393c-4f03-81a8-6eccfd82d96e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Custom Reader Role at MG Root\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Custom Role at MG Root\",\r\n \"assignableScopes\": [\r\n \"/providers/Microsoft.Management/managementGroups/1273adef-00a3-4086-a51a-dbcce1857d36\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-07-24T19:26:02.777463Z\",\r\n \"updatedOn\": \"2019-07-24T19:26:02.777463Z\",\r\n \"createdBy\": \"cdab7ada-d740-47da-a823-ec29c9a68482\",\r\n \"updatedBy\": \"cdab7ada-d740-47da-a823-ec29c9a68482\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/fa3bf1c6-5da9-47c7-976e-1007e1bc385a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fa3bf1c6-5da9-47c7-976e-1007e1bc385a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Custom Role Manish reader\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Custom Role Manish reader\",\r\n \"assignableScopes\": [\r\n \"/providers/Microsoft.Management/managementGroups/1273adef-00a3-4086-a51a-dbcce1857d36\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-07T18:53:42.1390099Z\",\r\n \"updatedOn\": \"2020-05-08T01:15:45.1587505Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"e8df956a-9463-408a-a9be-cf5f46d09b37\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/4edfca53-b078-483f-9d0e-c83e4544e854\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4edfca53-b078-483f-9d0e-c83e4544e854\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrPush\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr push\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/pull/read\",\r\n \"Microsoft.ContainerRegistry/registries/push/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-10-29T17:52:32.5201177Z\",\r\n \"updatedOn\": \"2018-11-13T23:26:19.9749249Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8311e382-0749-4cb8-b61a-304f252e45ec\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8311e382-0749-4cb8-b61a-304f252e45ec\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"API Management Service Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage service and the APIs\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ApiManagement/service/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8650193Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:17.7502607Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/312a565d-c81f-4fd8-895a-4e21e48d571c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"312a565d-c81f-4fd8-895a-4e21e48d571c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrPull\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr pull\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/pull/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-10-22T19:01:56.8227182Z\",\r\n \"updatedOn\": \"2018-11-13T23:22:03.2302457Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/7f951dda-4ed3-4680-a7ca-43fe172d538d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7f951dda-4ed3-4680-a7ca-43fe172d538d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrImageSigner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr image signer\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/sign/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-15T23:23:08.4038322Z\",\r\n \"updatedOn\": \"2018-10-29T19:06:24.9004422Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/6cef56e8-d556-48e5-a04f-b8e64114680f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"6cef56e8-d556-48e5-a04f-b8e64114680f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrDelete\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr delete\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/artifacts/delete\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-03-11T20:19:31.6682804Z\",\r\n \"updatedOn\": \"2019-03-11T20:24:38.9845104Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/c2f4ef07-c644-48eb-af81-4b1b4947fb11\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c2f4ef07-c644-48eb-af81-4b1b4947fb11\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrQuarantineReader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr quarantine data reader\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/quarantine/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-16T00:27:39.9596835Z\",\r\n \"updatedOn\": \"2019-10-22T00:12:39.702093Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/cdda3590-29a3-44f6-95f2-9f980659eb04\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"cdda3590-29a3-44f6-95f2-9f980659eb04\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrQuarantineWriter\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr quarantine data writer\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/quarantine/read\",\r\n \"Microsoft.ContainerRegistry/registries/quarantine/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-16T00:26:37.587182Z\",\r\n \"updatedOn\": \"2019-10-22T00:10:29.8202164Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/c8d4ff99-41c3-41a8-9f60-21dfdad59608\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c8d4ff99-41c3-41a8-9f60-21dfdad59608\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"API Management Service Operator Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage service but not the APIs\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ApiManagement/service/*/read\",\r\n \"Microsoft.ApiManagement/service/backup/action\",\r\n \"Microsoft.ApiManagement/service/delete\",\r\n \"Microsoft.ApiManagement/service/managedeployments/action\",\r\n \"Microsoft.ApiManagement/service/read\",\r\n \"Microsoft.ApiManagement/service/restore/action\",\r\n \"Microsoft.ApiManagement/service/updatecertificate/action\",\r\n \"Microsoft.ApiManagement/service/updatehostname/action\",\r\n \"Microsoft.ApiManagement/service/write\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.ApiManagement/service/users/keys/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-11-09T00:03:42.1194019Z\",\r\n \"updatedOn\": \"2016-11-18T23:56:25.4682649Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/e022efe7-f5ba-4159-bbe4-b44f577e9b61\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e022efe7-f5ba-4159-bbe4-b44f577e9b61\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"API Management Service Reader Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read-only access to service and APIs\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ApiManagement/service/*/read\",\r\n \"Microsoft.ApiManagement/service/read\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.ApiManagement/service/users/keys/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-11-09T00:26:45.1540473Z\",\r\n \"updatedOn\": \"2017-01-23T23:10:34.8876776Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/71522526-b88f-4d52-b57f-d31fc3546d0d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"71522526-b88f-4d52-b57f-d31fc3546d0d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Application Insights Component Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage Application Insights components\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/metricAlerts/*\",\r\n \"Microsoft.Insights/components/*\",\r\n \"Microsoft.Insights/webtests/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2020-02-12T12:45:46.9200472Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/ae349356-3a1b-4a5e-921d-050484c6347e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ae349356-3a1b-4a5e-921d-050484c6347e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Application Insights Snapshot Debugger\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Gives user permission to use Application Insights Snapshot Debugger features\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/components/*/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-19T21:25:12.3728747Z\",\r\n \"updatedOn\": \"2017-04-19T23:34:59.9511581Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/08954f03-6346-4c2e-81c0-ec3a5cfae23b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"08954f03-6346-4c2e-81c0-ec3a5cfae23b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Attestation Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read the attestation provider properties\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Attestation/attestationProviders/attestation/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-03-25T19:42:59.157671Z\",\r\n \"updatedOn\": \"2019-05-10T17:52:38.9036953Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": \"SYSTEM\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/fd1bd22b-8476-40bc-a0bc-69b95687b9f3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fd1bd22b-8476-40bc-a0bc-69b95687b9f3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Automation Job Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Create and Manage Jobs using Automation Runbooks.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Automation/automationAccounts/hybridRunbookWorkerGroups/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/resume/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/stop/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/streams/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/suspend/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/write\",\r\n \"Microsoft.Automation/automationAccounts/jobs/output/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-19T20:52:41.0020018Z\",\r\n \"updatedOn\": \"2018-08-14T22:08:48.1147327Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/4fe576fe-1146-4730-92eb-48519fa6bf9f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4fe576fe-1146-4730-92eb-48519fa6bf9f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Automation Runbook Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read Runbook properties - to be able to create Jobs of the runbook.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Automation/automationAccounts/runbooks/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-19T20:47:49.5640674Z\",\r\n \"updatedOn\": \"2017-04-25T01:00:45.6444999Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5fb5aef8-1081-4b8e-bb16-9d5d0385bab5\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5fb5aef8-1081-4b8e-bb16-9d5d0385bab5\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Automation Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Automation Operators are able to start, stop, suspend, and resume jobs\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Automation/automationAccounts/hybridRunbookWorkerGroups/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/resume/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/stop/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/streams/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/suspend/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/write\",\r\n \"Microsoft.Automation/automationAccounts/jobSchedules/read\",\r\n \"Microsoft.Automation/automationAccounts/jobSchedules/write\",\r\n \"Microsoft.Automation/automationAccounts/linkedWorkspace/read\",\r\n \"Microsoft.Automation/automationAccounts/read\",\r\n \"Microsoft.Automation/automationAccounts/runbooks/read\",\r\n \"Microsoft.Automation/automationAccounts/schedules/read\",\r\n \"Microsoft.Automation/automationAccounts/schedules/write\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Automation/automationAccounts/jobs/output/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-08-18T01:05:03.391613Z\",\r\n \"updatedOn\": \"2018-05-10T20:12:39.69782Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/d3881f73-407a-4167-8283-e981cbba0404\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"d3881f73-407a-4167-8283-e981cbba0404\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Avere Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can create and manage an Avere vFXT cluster.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Compute/*/read\",\r\n \"Microsoft.Compute/availabilitySets/*\",\r\n \"Microsoft.Compute/proximityPlacementGroups/*\",\r\n \"Microsoft.Compute/virtualMachines/*\",\r\n \"Microsoft.Compute/disks/*\",\r\n \"Microsoft.Network/*/read\",\r\n \"Microsoft.Network/networkInterfaces/*\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/join/action\",\r\n \"Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action\",\r\n \"Microsoft.Network/networkSecurityGroups/join/action\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/*/read\",\r\n \"Microsoft.Storage/storageAccounts/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/resources/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-03-18T20:00:58.9207889Z\",\r\n \"updatedOn\": \"2020-05-27T06:48:54.4896867Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/4f8fab4f-1852-4a58-a46a-8eaf358af14a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4f8fab4f-1852-4a58-a46a-8eaf358af14a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Avere Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Used by the Avere vFXT cluster to manage the cluster\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Compute/virtualMachines/read\",\r\n \"Microsoft.Network/networkInterfaces/read\",\r\n \"Microsoft.Network/networkInterfaces/write\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/join/action\",\r\n \"Microsoft.Network/networkSecurityGroups/join/action\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/delete\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-03-18T20:02:38.3399857Z\",\r\n \"updatedOn\": \"2019-03-29T00:26:37.9205875Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/c025889f-8102-4ebf-b32c-fc0c6f0c6bd9\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c025889f-8102-4ebf-b32c-fc0c6f0c6bd9\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service Cluster Admin Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"List cluster admin credential action.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerService/managedClusters/listClusterAdminCredential/action\",\r\n \"Microsoft.ContainerService/managedClusters/accessProfiles/listCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-08-15T21:38:18.5953853Z\",\r\n \"updatedOn\": \"2020-02-07T02:49:24.9715273Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/0ab0b1a8-8aac-4efd-b8c2-3ee1fb270be8\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0ab0b1a8-8aac-4efd-b8c2-3ee1fb270be8\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service Cluster User Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"List cluster user credential action.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerService/managedClusters/listClusterUserCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-08-15T22:04:53.4037241Z\",\r\n \"updatedOn\": \"2020-02-11T23:37:03.589924Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/4abbcc35-e782-43d8-92c5-2d3f1bd2253f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4abbcc35-e782-43d8-92c5-2d3f1bd2253f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Maps Data Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Grants access to read map related data from an Azure maps account.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Maps/accounts/*/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-10-05T19:47:03.472307Z\",\r\n \"updatedOn\": \"2020-04-28T22:33:41.7780319Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/423170ca-a8f6-4b0f-8487-9e4eb8f49bfa\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"423170ca-a8f6-4b0f-8487-9e4eb8f49bfa\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Stack Registration Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Azure Stack registrations.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.AzureStack/edgeSubscriptions/read\",\r\n \"Microsoft.AzureStack/registrations/products/*/action\",\r\n \"Microsoft.AzureStack/registrations/products/read\",\r\n \"Microsoft.AzureStack/registrations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-11-13T23:42:06.2161827Z\",\r\n \"updatedOn\": \"2020-06-29T22:11:17.0759529Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/6f12a6df-dd06-4f3e-bcb1-ce8be600526a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"6f12a6df-dd06-4f3e-bcb1-ce8be600526a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Backup Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage backup service,but can't create vaults and give access to others\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.RecoveryServices/locations/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/refreshContainers/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobs/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobsExport/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperationResults/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectableItems/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectedItems/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionContainers/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupSecurityPIN/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read\",\r\n \"Microsoft.RecoveryServices/Vaults/certificates/*\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/*\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/*\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/*\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupstorageconfig/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupconfig/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupValidateOperation/action\",\r\n \"Microsoft.RecoveryServices/Vaults/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperations/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupEngines/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectableContainers/read\",\r\n \"Microsoft.RecoveryServices/locations/backupStatus/action\",\r\n \"Microsoft.RecoveryServices/locations/backupPreValidateProtection/action\",\r\n \"Microsoft.RecoveryServices/locations/backupValidateFeatures/action\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/write\",\r\n \"Microsoft.RecoveryServices/operations/read\",\r\n \"Microsoft.RecoveryServices/locations/operationStatus/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-01-03T13:12:15.7321344Z\",\r\n \"updatedOn\": \"2019-12-17T10:44:35.8361149Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5e467623-bb1f-42f4-a55d-6e525e11384b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Billing Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows read access to billing data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Billing/*/read\",\r\n \"Microsoft.Commerce/*/read\",\r\n \"Microsoft.Consumption/*/read\",\r\n \"Microsoft.Management/managementGroups/read\",\r\n \"Microsoft.CostManagement/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-25T02:13:38.9054151Z\",\r\n \"updatedOn\": \"2018-09-26T17:45:09.2227236Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/fa23ad8b-c56e-40d8-ac0c-ce449e1d2c64\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fa23ad8b-c56e-40d8-ac0c-ce449e1d2c64\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Backup Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage backup services, except removal of backup, vault creation and giving access to others\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/backup/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationsStatus/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/provisionInstantItemRecovery/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/restore/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/revokeInstantItemRecovery/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/refreshContainers/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobs/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobsExport/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperationResults/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectableItems/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectedItems/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read\",\r\n \"Microsoft.RecoveryServices/Vaults/certificates/write\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/read\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/write\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/*\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/write\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupstorageconfig/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupValidateOperation/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperations/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/operations/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/inquire/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupEngines/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectableContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/items/read\",\r\n \"Microsoft.RecoveryServices/locations/backupStatus/action\",\r\n \"Microsoft.RecoveryServices/locations/backupPreValidateProtection/action\",\r\n \"Microsoft.RecoveryServices/locations/backupValidateFeatures/action\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/write\",\r\n \"Microsoft.RecoveryServices/operations/read\",\r\n \"Microsoft.RecoveryServices/locations/operationStatus/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-01-03T13:21:11.894764Z\",\r\n \"updatedOn\": \"2019-12-17T11:02:43.9998686Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/00c29273-979b-4161-815c-10b084fb9324\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"00c29273-979b-4161-815c-10b084fb9324\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Backup Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can view backup services, but can't make changes\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.RecoveryServices/locations/allocatedStamp/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationsStatus/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobs/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobs/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobsExport/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectedItems/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupstorageconfig/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupconfig/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperations/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/operations/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupEngines/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/items/read\",\r\n \"Microsoft.RecoveryServices/locations/backupStatus/action\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/*\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/write\",\r\n \"Microsoft.RecoveryServices/operations/read\",\r\n \"Microsoft.RecoveryServices/locations/operationStatus/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.RecoveryServices/locations/backupValidateFeatures/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-01-03T13:18:41.3893065Z\",\r\n \"updatedOn\": \"2020-03-04T12:12:04.321311Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/a795c7a0-d4a2-40c1-ae25-d81f01202912\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a795c7a0-d4a2-40c1-ae25-d81f01202912\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Blockchain Member Node Access (Preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for access to Blockchain Member nodes\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Blockchain/blockchainMembers/transactionNodes/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Blockchain/blockchainMembers/transactionNodes/connect/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-21T10:33:01.9604839Z\",\r\n \"updatedOn\": \"2018-12-21T10:33:58.0042162Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/31a002a1-acaf-453e-8a5b-297c9ca1ea24\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"31a002a1-acaf-453e-8a5b-297c9ca1ea24\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"BizTalk Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage BizTalk services, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.BizTalkServices/BizTalk/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:42:18.897821Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5e3c6656-6cfa-4708-81fe-0de47ac73342\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5e3c6656-6cfa-4708-81fe-0de47ac73342\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CDN Endpoint Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage CDN endpoints, but can’t grant access to other users.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Cdn/edgenodes/read\",\r\n \"Microsoft.Cdn/operationresults/*\",\r\n \"Microsoft.Cdn/profiles/endpoints/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-01-23T02:48:46.4996252Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:52.6231539Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/426e0c7f-0c7e-4658-b36f-ff54d6c29b45\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"426e0c7f-0c7e-4658-b36f-ff54d6c29b45\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CDN Endpoint Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can view CDN endpoints, but can’t make changes.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Cdn/edgenodes/read\",\r\n \"Microsoft.Cdn/operationresults/*\",\r\n \"Microsoft.Cdn/profiles/endpoints/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-01-23T02:48:46.4996252Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:53.1585846Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/871e35f6-b5c1-49cc-a043-bde969a0f2cd\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"871e35f6-b5c1-49cc-a043-bde969a0f2cd\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CDN Profile Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage CDN profiles and their endpoints, but can’t grant access to other users.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Cdn/edgenodes/read\",\r\n \"Microsoft.Cdn/operationresults/*\",\r\n \"Microsoft.Cdn/profiles/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-01-23T02:48:46.4996252Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:53.7051278Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/ec156ff8-a8d1-4d15-830c-5b80698ca432\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ec156ff8-a8d1-4d15-830c-5b80698ca432\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CDN Profile Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can view CDN profiles and their endpoints, but can’t make changes.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Cdn/edgenodes/read\",\r\n \"Microsoft.Cdn/operationresults/*\",\r\n \"Microsoft.Cdn/profiles/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-01-23T02:48:46.4996252Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:54.2283001Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8f96442b-4075-438f-813d-ad51ab4019af\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8f96442b-4075-438f-813d-ad51ab4019af\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Classic Network Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage classic networks, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ClassicNetwork/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:39.7576926Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b34d265f-36f7-4a0d-a4d4-e158ca92e90f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b34d265f-36f7-4a0d-a4d4-e158ca92e90f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Classic Storage Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage classic storage accounts, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ClassicStorage/storageAccounts/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:30.8964641Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/86e8f5dc-a6e9-4c67-9d15-de283e8eac25\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"86e8f5dc-a6e9-4c67-9d15-de283e8eac25\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Classic Storage Account Key Operator Service Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Classic Storage Account Key Operators are allowed to list and regenerate keys on Classic Storage Accounts\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ClassicStorage/storageAccounts/listkeys/action\",\r\n \"Microsoft.ClassicStorage/storageAccounts/regeneratekey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-13T18:22:52.14611Z\",\r\n \"updatedOn\": \"2017-04-13T20:54:03.0505986Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/985d6b00-f706-48f5-a6fe-d0ca12fb668d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"985d6b00-f706-48f5-a6fe-d0ca12fb668d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"ClearDB MySQL DB Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage ClearDB MySQL databases, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"successbricks.cleardb/databases/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:42:23.2893077Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/9106cda0-8a86-4e81-b686-29a22c54effe\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"9106cda0-8a86-4e81-b686-29a22c54effe\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Classic Virtual Machine Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage classic virtual machines, but not access to them, and not the virtual network or storage account they’re connected to.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ClassicCompute/domainNames/*\",\r\n \"Microsoft.ClassicCompute/virtualMachines/*\",\r\n \"Microsoft.ClassicNetwork/networkSecurityGroups/join/action\",\r\n \"Microsoft.ClassicNetwork/reservedIps/link/action\",\r\n \"Microsoft.ClassicNetwork/reservedIps/read\",\r\n \"Microsoft.ClassicNetwork/virtualNetworks/join/action\",\r\n \"Microsoft.ClassicNetwork/virtualNetworks/read\",\r\n \"Microsoft.ClassicStorage/storageAccounts/disks/read\",\r\n \"Microsoft.ClassicStorage/storageAccounts/images/read\",\r\n \"Microsoft.ClassicStorage/storageAccounts/listKeys/action\",\r\n \"Microsoft.ClassicStorage/storageAccounts/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-04-25T00:37:56.5416086Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:43.0770473Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/d73bb868-a0df-4d4d-bd69-98a00b01fccb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"d73bb868-a0df-4d4d-bd69-98a00b01fccb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services User\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read and list keys of Cognitive Services.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\",\r\n \"Microsoft.CognitiveServices/accounts/listkeys/action\",\r\n \"Microsoft.Insights/alertRules/read\",\r\n \"Microsoft.Insights/diagnosticSettings/read\",\r\n \"Microsoft.Insights/logDefinitions/read\",\r\n \"Microsoft.Insights/metricdefinitions/read\",\r\n \"Microsoft.Insights/metrics/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-08-08T23:23:43.7701274Z\",\r\n \"updatedOn\": \"2019-02-13T19:53:56.7209248Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/a97b65f3-24c7-4388-baec-2e87135dc908\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a97b65f3-24c7-4388-baec-2e87135dc908\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Data Reader (Preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read Cognitive Services data.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-02-13T20:02:12.6849986Z\",\r\n \"updatedOn\": \"2019-02-13T22:53:55.167529Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b59867f0-fa02-499b-be73-45a86b5b3e1c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b59867f0-fa02-499b-be73-45a86b5b3e1c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you create, read, update, delete and manage keys of Cognitive Services.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.CognitiveServices/*\",\r\n \"Microsoft.Features/features/read\",\r\n \"Microsoft.Features/providers/features/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/diagnosticSettings/*\",\r\n \"Microsoft.Insights/logDefinitions/read\",\r\n \"Microsoft.Insights/metricdefinitions/read\",\r\n \"Microsoft.Insights/metrics/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourcegroups/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-08-08T23:18:39.2257848Z\",\r\n \"updatedOn\": \"2018-09-14T00:53:37.7546808Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CosmosBackupOperator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can submit restore request for a Cosmos DB database or a container for an account\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.DocumentDB/databaseAccounts/backup/action\",\r\n \"Microsoft.DocumentDB/databaseAccounts/restore/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-07T19:47:14.965156Z\",\r\n \"updatedOn\": \"2018-12-07T19:52:21.9969834Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/db7b14f2-5adf-42da-9f96-f2ee17bab5cb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"db7b14f2-5adf-42da-9f96-f2ee17bab5cb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage everything except access to resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/*/Delete\",\r\n \"Microsoft.Authorization/*/Write\",\r\n \"Microsoft.Authorization/elevateAccess/Action\",\r\n \"Microsoft.Blueprint/blueprintAssignments/write\",\r\n \"Microsoft.Blueprint/blueprintAssignments/delete\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:38.458061Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cosmos DB Account Reader Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read Azure Cosmos DB Accounts data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.DocumentDB/*/read\",\r\n \"Microsoft.DocumentDB/databaseAccounts/readonlykeys/action\",\r\n \"Microsoft.Insights/MetricDefinitions/read\",\r\n \"Microsoft.Insights/Metrics/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-10-30T17:53:54.6005577Z\",\r\n \"updatedOn\": \"2018-02-21T01:36:59.6186231Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/fbdf93bf-df7d-467e-a4d2-9458aa1360c8\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fbdf93bf-df7d-467e-a4d2-9458aa1360c8\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cost Management Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can view costs and manage cost configuration (e.g. budgets, exports)\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Consumption/*\",\r\n \"Microsoft.CostManagement/*\",\r\n \"Microsoft.Billing/billingPeriods/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Advisor/configurations/read\",\r\n \"Microsoft.Advisor/recommendations/read\",\r\n \"Microsoft.Management/managementGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-14T16:09:22.8834827Z\",\r\n \"updatedOn\": \"2019-06-25T21:25:06.8686379Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/434105ed-43f6-45c7-a02f-909b2ba83430\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"434105ed-43f6-45c7-a02f-909b2ba83430\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cost Management Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can view cost data and configuration (e.g. budgets, exports)\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Consumption/*/read\",\r\n \"Microsoft.CostManagement/*/read\",\r\n \"Microsoft.Billing/billingPeriods/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Advisor/configurations/read\",\r\n \"Microsoft.Advisor/recommendations/read\",\r\n \"Microsoft.Management/managementGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-14T16:09:22.8834827Z\",\r\n \"updatedOn\": \"2019-06-25T20:59:11.5762937Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/72fafb9e-0641-4937-9268-a91bfd8191a3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"72fafb9e-0641-4937-9268-a91bfd8191a3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Data Box Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage everything under Data Box Service except giving access to others.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Databox/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-07-27T08:28:42.714021Z\",\r\n \"updatedOn\": \"2018-07-27T08:36:56.3827309Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/add466c9-e687-43fc-8d98-dfcf8d720be5\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"add466c9-e687-43fc-8d98-dfcf8d720be5\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Data Box Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Data Box Service except creating order or editing order details and giving access to others.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Databox/*/read\",\r\n \"Microsoft.Databox/jobs/listsecrets/action\",\r\n \"Microsoft.Databox/jobs/listcredentials/action\",\r\n \"Microsoft.Databox/locations/availableSkus/action\",\r\n \"Microsoft.Databox/locations/validateInputs/action\",\r\n \"Microsoft.Databox/locations/regionConfiguration/action\",\r\n \"Microsoft.Databox/locations/validateAddress/action\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-07-27T08:26:21.9284772Z\",\r\n \"updatedOn\": \"2020-01-24T05:39:52.6143537Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/028f4ed7-e2a9-465e-a8f4-9c0ffdfdc027\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"028f4ed7-e2a9-465e-a8f4-9c0ffdfdc027\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Data Factory Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Create and manage data factories, as well as child resources within them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.DataFactory/dataFactories/*\",\r\n \"Microsoft.DataFactory/factories/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.EventGrid/eventSubscriptions/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2020-02-14T19:49:21.5789216Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"673868aa-7521-48a0-acc6-0f60742d39f5\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Data Purger\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can purge analytics data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Insights/components/*/read\",\r\n \"Microsoft.Insights/components/purge/action\",\r\n \"Microsoft.OperationalInsights/workspaces/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/purge/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-04-30T22:39:49.61677Z\",\r\n \"updatedOn\": \"2018-04-30T22:44:15.1171162Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/150f5e0c-0603-4f03-8c7f-cf70034c4e90\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"150f5e0c-0603-4f03-8c7f-cf70034c4e90\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Data Lake Analytics Developer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you submit, monitor, and manage your own jobs but not create or delete Data Lake Analytics accounts.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.BigAnalytics/accounts/*\",\r\n \"Microsoft.DataLakeAnalytics/accounts/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.BigAnalytics/accounts/Delete\",\r\n \"Microsoft.BigAnalytics/accounts/TakeOwnership/action\",\r\n \"Microsoft.BigAnalytics/accounts/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/Delete\",\r\n \"Microsoft.DataLakeAnalytics/accounts/TakeOwnership/action\",\r\n \"Microsoft.DataLakeAnalytics/accounts/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/dataLakeStoreAccounts/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/dataLakeStoreAccounts/Delete\",\r\n \"Microsoft.DataLakeAnalytics/accounts/storageAccounts/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/storageAccounts/Delete\",\r\n \"Microsoft.DataLakeAnalytics/accounts/firewallRules/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/firewallRules/Delete\",\r\n \"Microsoft.DataLakeAnalytics/accounts/computePolicies/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/computePolicies/Delete\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-10-20T00:33:29.3115234Z\",\r\n \"updatedOn\": \"2017-08-18T00:00:17.0411642Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/47b7735b-770e-4598-a7da-8b91488b4c88\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"47b7735b-770e-4598-a7da-8b91488b4c88\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"DevTest Labs User\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you connect, start, restart, and shutdown your virtual machines in your Azure DevTest Labs.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Compute/availabilitySets/read\",\r\n \"Microsoft.Compute/virtualMachines/*/read\",\r\n \"Microsoft.Compute/virtualMachines/deallocate/action\",\r\n \"Microsoft.Compute/virtualMachines/read\",\r\n \"Microsoft.Compute/virtualMachines/restart/action\",\r\n \"Microsoft.Compute/virtualMachines/start/action\",\r\n \"Microsoft.DevTestLab/*/read\",\r\n \"Microsoft.DevTestLab/labs/claimAnyVm/action\",\r\n \"Microsoft.DevTestLab/labs/createEnvironment/action\",\r\n \"Microsoft.DevTestLab/labs/ensureCurrentUserProfile/action\",\r\n \"Microsoft.DevTestLab/labs/formulas/delete\",\r\n \"Microsoft.DevTestLab/labs/formulas/read\",\r\n \"Microsoft.DevTestLab/labs/formulas/write\",\r\n \"Microsoft.DevTestLab/labs/policySets/evaluatePolicies/action\",\r\n \"Microsoft.DevTestLab/labs/virtualMachines/claim/action\",\r\n \"Microsoft.DevTestLab/labs/virtualmachines/listApplicableSchedules/action\",\r\n \"Microsoft.DevTestLab/labs/virtualMachines/getRdpFileContents/action\",\r\n \"Microsoft.Network/loadBalancers/backendAddressPools/join/action\",\r\n \"Microsoft.Network/loadBalancers/inboundNatRules/join/action\",\r\n \"Microsoft.Network/networkInterfaces/*/read\",\r\n \"Microsoft.Network/networkInterfaces/join/action\",\r\n \"Microsoft.Network/networkInterfaces/read\",\r\n \"Microsoft.Network/networkInterfaces/write\",\r\n \"Microsoft.Network/publicIPAddresses/*/read\",\r\n \"Microsoft.Network/publicIPAddresses/join/action\",\r\n \"Microsoft.Network/publicIPAddresses/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/join/action\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Resources/deployments/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/listKeys/action\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Compute/virtualMachines/vmSizes/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-08T21:52:45.0657582Z\",\r\n \"updatedOn\": \"2019-05-08T11:27:34.8855476Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/76283e04-6283-4c54-8f91-bcf1374a3c64\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"76283e04-6283-4c54-8f91-bcf1374a3c64\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"DocumentDB Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage DocumentDB accounts, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.DocumentDb/databaseAccounts/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-11-21T01:38:32.0948484Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5bd9cd88-fe45-4216-938b-f97437e15450\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"DNS Zone Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage DNS zones and record sets in Azure DNS, but does not let you control who has access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/dnsZones/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-10-15T23:33:25.9730842Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:40.3710365Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/befefa01-2a29-4197-83a8-272ff33ce314\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"befefa01-2a29-4197-83a8-272ff33ce314\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"EventGrid EventSubscription Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage EventGrid event subscription operations.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.EventGrid/eventSubscriptions/*\",\r\n \"Microsoft.EventGrid/topicTypes/eventSubscriptions/read\",\r\n \"Microsoft.EventGrid/locations/eventSubscriptions/read\",\r\n \"Microsoft.EventGrid/locations/topicTypes/eventSubscriptions/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-10-08T23:27:28.3130743Z\",\r\n \"updatedOn\": \"2019-01-08T00:06:34.3543171Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/428e0ff0-5e57-4d9c-a221-2c70d0e0a443\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"428e0ff0-5e57-4d9c-a221-2c70d0e0a443\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"EventGrid EventSubscription Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read EventGrid event subscriptions.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.EventGrid/eventSubscriptions/read\",\r\n \"Microsoft.EventGrid/topicTypes/eventSubscriptions/read\",\r\n \"Microsoft.EventGrid/locations/eventSubscriptions/read\",\r\n \"Microsoft.EventGrid/locations/topicTypes/eventSubscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-10-09T17:29:28.1417894Z\",\r\n \"updatedOn\": \"2019-01-08T00:05:40.2884365Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/2414bbcf-6497-4faf-8c65-045460748405\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"2414bbcf-6497-4faf-8c65-045460748405\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Graph Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Create and manage all aspects of the Enterprise Graph - Ontology, Schema mapping, Conflation and Conversational AI and Ingestions\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/conflation/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/conflation/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/sourceschema/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/sourceschema/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/knowledge/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/knowledge/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/intentclassification/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/intentclassification/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/ingestion/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/ingestion/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/ontology/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/ontology/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/delete\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-02-23T21:07:22.5844236Z\",\r\n \"updatedOn\": \"2019-02-28T20:21:18.9318073Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b60367af-1334-4454-b71e-769d9a4f83d9\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b60367af-1334-4454-b71e-769d9a4f83d9\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"HDInsight Domain Services Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can Read, Create, Modify and Delete Domain Services related operations needed for HDInsight Enterprise Security Package\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.AAD/*/read\",\r\n \"Microsoft.AAD/domainServices/*/read\",\r\n \"Microsoft.AAD/domainServices/oucontainer/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-09-12T22:42:51.7451109Z\",\r\n \"updatedOn\": \"2018-09-12T23:06:45.7641599Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8d8d5a11-05d3-4bda-a417-a08778121c7c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8d8d5a11-05d3-4bda-a417-a08778121c7c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Intelligent Systems Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Intelligent Systems accounts, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.IntelligentSystems/accounts/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:32:00.9996357Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/03a6d094-3444-4b3d-88af-7477090a9e5e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"03a6d094-3444-4b3d-88af-7477090a9e5e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage key vaults, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.KeyVault/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.KeyVault/locations/deletedVaults/purge/action\",\r\n \"Microsoft.KeyVault/hsmPools/*\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-02-25T17:08:28.5184971Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:49.5373075Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/f25e0fa2-a7c8-4377-a976-54943a77a395\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f25e0fa2-a7c8-4377-a976-54943a77a395\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Knowledge Consumer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Knowledge Read permission to consume Enterprise Graph Knowledge using entity search and graph query\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/knowledge/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-02-23T21:23:31.4037552Z\",\r\n \"updatedOn\": \"2019-02-28T20:25:00.7369384Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/ee361c5d-f7b5-4119-b4b6-892157c8f64c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ee361c5d-f7b5-4119-b4b6-892157c8f64c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Lab Creator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you create, manage, delete your managed labs under your Azure Lab Accounts.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.LabServices/labAccounts/*/read\",\r\n \"Microsoft.LabServices/labAccounts/createLab/action\",\r\n \"Microsoft.LabServices/labAccounts/sizes/getRegionalAvailability/action\",\r\n \"Microsoft.LabServices/labAccounts/getRegionalAvailability/action\",\r\n \"Microsoft.LabServices/labAccounts/getPricingAndAvailability/action\",\r\n \"Microsoft.LabServices/labAccounts/getRestrictionsAndUsage/action\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-01-18T23:38:58.1036141Z\",\r\n \"updatedOn\": \"2020-02-12T23:54:21.0840302Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b97fb8bc-a8b2-4522-a38b-dd33c7e65ead\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b97fb8bc-a8b2-4522-a38b-dd33c7e65ead\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Log Analytics Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Log Analytics Reader can view and search all monitoring data as well as and view monitoring settings, including viewing the configuration of Azure diagnostics on all Azure resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/analytics/query/action\",\r\n \"Microsoft.OperationalInsights/workspaces/search/action\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.OperationalInsights/workspaces/sharedKeys/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-02T00:20:28.1449012Z\",\r\n \"updatedOn\": \"2018-01-30T18:08:26.0438523Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/73c42c96-874c-492b-b04d-ab87d138a893\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"73c42c96-874c-492b-b04d-ab87d138a893\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Log Analytics Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Log Analytics Contributor can read all monitoring data and edit monitoring settings. Editing monitoring settings includes adding the VM extension to VMs; reading storage account keys to be able to configure collection of logs from Azure Storage; creating and configuring Automation accounts; adding solutions; and configuring Azure diagnostics on all Azure resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Automation/automationAccounts/*\",\r\n \"Microsoft.ClassicCompute/virtualMachines/extensions/*\",\r\n \"Microsoft.ClassicStorage/storageAccounts/listKeys/action\",\r\n \"Microsoft.Compute/virtualMachines/extensions/*\",\r\n \"Microsoft.HybridCompute/machines/extensions/write\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/diagnosticSettings/*\",\r\n \"Microsoft.OperationalInsights/*\",\r\n \"Microsoft.OperationsManagement/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourcegroups/deployments/*\",\r\n \"Microsoft.Storage/storageAccounts/listKeys/action\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-25T21:51:45.3174711Z\",\r\n \"updatedOn\": \"2020-03-26T22:57:55.366783Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Logic App Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read, enable and disable logic app.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*/read\",\r\n \"Microsoft.Insights/metricAlerts/*/read\",\r\n \"Microsoft.Insights/diagnosticSettings/*/read\",\r\n \"Microsoft.Insights/metricDefinitions/*/read\",\r\n \"Microsoft.Logic/*/read\",\r\n \"Microsoft.Logic/workflows/disable/action\",\r\n \"Microsoft.Logic/workflows/enable/action\",\r\n \"Microsoft.Logic/workflows/validate/action\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Web/connectionGateways/*/read\",\r\n \"Microsoft.Web/connections/*/read\",\r\n \"Microsoft.Web/customApis/*/read\",\r\n \"Microsoft.Web/serverFarms/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-04-28T21:33:30.4656007Z\",\r\n \"updatedOn\": \"2019-10-15T04:28:56.3265986Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/515c2055-d9d4-4321-b1b9-bd0c9a0f79fe\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"515c2055-d9d4-4321-b1b9-bd0c9a0f79fe\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Logic App Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage logic app, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ClassicStorage/storageAccounts/listKeys/action\",\r\n \"Microsoft.ClassicStorage/storageAccounts/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/metricAlerts/*\",\r\n \"Microsoft.Insights/diagnosticSettings/*\",\r\n \"Microsoft.Insights/logdefinitions/*\",\r\n \"Microsoft.Insights/metricDefinitions/*\",\r\n \"Microsoft.Logic/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/listkeys/action\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Web/connectionGateways/*\",\r\n \"Microsoft.Web/connections/*\",\r\n \"Microsoft.Web/customApis/*\",\r\n \"Microsoft.Web/serverFarms/join/action\",\r\n \"Microsoft.Web/serverFarms/read\",\r\n \"Microsoft.Web/sites/functions/listSecrets/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-04-28T21:33:30.4656007Z\",\r\n \"updatedOn\": \"2019-10-15T04:31:27.7685427Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/87a39d53-fc1b-424a-814c-f7e04687dc9e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"87a39d53-fc1b-424a-814c-f7e04687dc9e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Application Operator Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read and perform actions on Managed Application resources\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Solutions/applications/read\",\r\n \"Microsoft.Solutions/*/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-07-27T00:59:33.7988813Z\",\r\n \"updatedOn\": \"2019-02-20T01:09:55.1593079Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/c7393b34-138c-406f-901b-d8cf2b17e6ae\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c7393b34-138c-406f-901b-d8cf2b17e6ae\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Applications Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read resources in a managed app and request JIT access.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Solutions/jitRequests/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-09-06T00:33:58.3651522Z\",\r\n \"updatedOn\": \"2018-09-06T00:33:58.3651522Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b9331d33-8a36-4f8c-b097-4f54124fdb44\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b9331d33-8a36-4f8c-b097-4f54124fdb44\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Identity Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read and Assign User Assigned Identity\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ManagedIdentity/userAssignedIdentities/*/read\",\r\n \"Microsoft.ManagedIdentity/userAssignedIdentities/*/assign/action\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-14T19:52:04.3924594Z\",\r\n \"updatedOn\": \"2017-12-14T22:16:00.1483256Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/f1a07417-d97a-45cb-824c-7a7467783830\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f1a07417-d97a-45cb-824c-7a7467783830\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Identity Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Create, Read, Update, and Delete User Assigned Identity\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ManagedIdentity/userAssignedIdentities/read\",\r\n \"Microsoft.ManagedIdentity/userAssignedIdentities/write\",\r\n \"Microsoft.ManagedIdentity/userAssignedIdentities/delete\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-14T19:53:42.8804692Z\",\r\n \"updatedOn\": \"2019-06-20T21:51:27.0850433Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/e40ec5ca-96e0-45a2-b4ff-59039f2c2b59\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e40ec5ca-96e0-45a2-b4ff-59039f2c2b59\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Management Group Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Management Group Contributor Role\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Management/managementGroups/delete\",\r\n \"Microsoft.Management/managementGroups/read\",\r\n \"Microsoft.Management/managementGroups/subscriptions/delete\",\r\n \"Microsoft.Management/managementGroups/subscriptions/write\",\r\n \"Microsoft.Management/managementGroups/write\",\r\n \"Microsoft.Management/managementGroups/subscriptions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-06-22T00:28:29.0523964Z\",\r\n \"updatedOn\": \"2020-07-06T18:13:34.9045672Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5d58bcaf-24a5-4b20-bdb6-eed9f69fbe4c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5d58bcaf-24a5-4b20-bdb6-eed9f69fbe4c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Management Group Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Management Group Reader Role\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Management/managementGroups/read\",\r\n \"Microsoft.Management/managementGroups/subscriptions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-06-22T00:31:03.4295347Z\",\r\n \"updatedOn\": \"2020-07-06T18:09:27.1441705Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/ac63b705-f282-497d-ac71-919bf39d939d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ac63b705-f282-497d-ac71-919bf39d939d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Monitoring Metrics Publisher\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Enables publishing metrics against Azure resources\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Insights/Register/Action\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Insights/Metrics/Write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-08-14T00:36:16.5610279Z\",\r\n \"updatedOn\": \"2018-08-14T00:37:18.1465065Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/3913510d-42f4-4e42-8a64-420c390055eb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3913510d-42f4-4e42-8a64-420c390055eb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Monitoring Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read all monitoring data.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/search/action\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-09-21T19:19:52.4939376Z\",\r\n \"updatedOn\": \"2018-01-30T18:08:27.262625Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/43d0d8ad-25c7-4714-9337-8ba259a9fe05\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"43d0d8ad-25c7-4714-9337-8ba259a9fe05\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Network Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage networks, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-02T00:18:27.3542698Z\",\r\n \"updatedOn\": \"2016-05-31T23:14:00.3326359Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4d97b98b-1d4f-4787-a291-c67834d212e7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Monitoring Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read all monitoring data and update monitoring settings.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.AlertsManagement/alerts/*\",\r\n \"Microsoft.AlertsManagement/alertsSummary/*\",\r\n \"Microsoft.Insights/actiongroups/*\",\r\n \"Microsoft.Insights/activityLogAlerts/*\",\r\n \"Microsoft.Insights/AlertRules/*\",\r\n \"Microsoft.Insights/components/*\",\r\n \"Microsoft.Insights/DiagnosticSettings/*\",\r\n \"Microsoft.Insights/eventtypes/*\",\r\n \"Microsoft.Insights/LogDefinitions/*\",\r\n \"Microsoft.Insights/metricalerts/*\",\r\n \"Microsoft.Insights/MetricDefinitions/*\",\r\n \"Microsoft.Insights/Metrics/*\",\r\n \"Microsoft.Insights/Register/Action\",\r\n \"Microsoft.Insights/scheduledqueryrules/*\",\r\n \"Microsoft.Insights/webtests/*\",\r\n \"Microsoft.Insights/workbooks/*\",\r\n \"Microsoft.Insights/privateLinkScopes/*\",\r\n \"Microsoft.Insights/privateLinkScopeOperationStatuses/*\",\r\n \"Microsoft.OperationalInsights/workspaces/write\",\r\n \"Microsoft.OperationalInsights/workspaces/intelligencepacks/*\",\r\n \"Microsoft.OperationalInsights/workspaces/savedSearches/*\",\r\n \"Microsoft.OperationalInsights/workspaces/search/action\",\r\n \"Microsoft.OperationalInsights/workspaces/sharedKeys/action\",\r\n \"Microsoft.OperationalInsights/workspaces/storageinsightconfigs/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.WorkloadMonitor/monitors/*\",\r\n \"Microsoft.WorkloadMonitor/notificationSettings/*\",\r\n \"Microsoft.AlertsManagement/smartDetectorAlertRules/*\",\r\n \"Microsoft.AlertsManagement/actionRules/*\",\r\n \"Microsoft.AlertsManagement/smartGroups/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-09-21T19:21:08.4345976Z\",\r\n \"updatedOn\": \"2020-04-19T16:03:16.7692305Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"749f88d5-cbae-40b8-bcfc-e573ddc772fa\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"New Relic APM Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage New Relic Application Performance Management accounts and applications, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"NewRelic.APM/accounts/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:42:16.2033878Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5d28c62d-5b37-4476-8438-e587778df237\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5d28c62d-5b37-4476-8438-e587778df237\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage everything, including access to resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:32.2101122Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8e3af657-a8ff-443c-a75c-2fe8c4bcb635\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8e3af657-a8ff-443c-a75c-2fe8c4bcb635\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you view everything, but not make any changes.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:35.7424745Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"acdd72a7-3385-48ef-bd42-f606fba81ae7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Redis Cache Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Redis caches, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Cache/redis/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:48.2353169Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/e0f68234-74aa-48ed-b826-c38b57376e17\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e0f68234-74aa-48ed-b826-c38b57376e17\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Reader and Data Access\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you view everything but will not let you delete or create a storage account or contained resource. It will also allow read/write access to all data contained in a storage account via access to storage account keys.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/listKeys/action\",\r\n \"Microsoft.Storage/storageAccounts/ListAccountSas/action\",\r\n \"Microsoft.Storage/storageAccounts/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-27T23:20:46.1498906Z\",\r\n \"updatedOn\": \"2019-04-04T23:41:26.1056261Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/c12c1c16-33a1-487b-954d-41c89c60f349\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c12c1c16-33a1-487b-954d-41c89c60f349\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Resource Policy Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Users with rights to create/modify resource policy, create support ticket and read resources/hierarchy.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Authorization/policyassignments/*\",\r\n \"Microsoft.Authorization/policydefinitions/*\",\r\n \"Microsoft.Authorization/policysetdefinitions/*\",\r\n \"Microsoft.PolicyInsights/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-08-25T19:08:01.3861639Z\",\r\n \"updatedOn\": \"2019-11-20T20:26:12.8811365Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/36243c78-bf99-498c-9df9-86d9f8d28608\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"36243c78-bf99-498c-9df9-86d9f8d28608\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Scheduler Job Collections Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Scheduler job collections, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Scheduler/jobcollections/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:42:24.8360756Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/188a0f2f-5c9e-469b-ae67-2aa5ce574b94\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"188a0f2f-5c9e-469b-ae67-2aa5ce574b94\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Search Service Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Search services, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Search/searchServices/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:42:21.8687229Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/7ca78c08-252a-4471-8644-bb5ff32d4ba0\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7ca78c08-252a-4471-8644-bb5ff32d4ba0\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Security Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Security Admin Role\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Authorization/policyAssignments/*\",\r\n \"Microsoft.Authorization/policyDefinitions/*\",\r\n \"Microsoft.Authorization/policySetDefinitions/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Management/managementGroups/read\",\r\n \"Microsoft.operationalInsights/workspaces/*/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Security/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-03T07:51:23.0917487Z\",\r\n \"updatedOn\": \"2019-03-12T21:12:48.635016Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fb1c8493-542b-48eb-b624-b4c8fea62acd\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Security Manager (Legacy)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"This is a legacy role. Please use Security Administrator instead\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ClassicCompute/*/read\",\r\n \"Microsoft.ClassicCompute/virtualMachines/*/write\",\r\n \"Microsoft.ClassicNetwork/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Security/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-22T17:45:15.8986455Z\",\r\n \"updatedOn\": \"2018-03-08T18:18:48.618362Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/e3d13bf0-dd5a-482e-ba6b-9b8433878d10\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e3d13bf0-dd5a-482e-ba6b-9b8433878d10\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Security Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Security Reader Role\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.operationalInsights/workspaces/*/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Security/*/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Management/managementGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-03T07:48:49.0516559Z\",\r\n \"updatedOn\": \"2018-06-28T17:27:23.106561Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/39bc4728-0917-49c7-9d2c-d95423bc2eb4\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"39bc4728-0917-49c7-9d2c-d95423bc2eb4\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Spatial Anchors Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage spatial anchors in your account, but not delete them\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/create/action\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/query/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-21T17:57:41.1420864Z\",\r\n \"updatedOn\": \"2019-02-13T06:13:39.8686435Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8bbe83f1-e2a6-4df7-8cb4-4e04d4e5c827\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8bbe83f1-e2a6-4df7-8cb4-4e04d4e5c827\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Site Recovery Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Site Recovery service except vault creation and role assignment\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.RecoveryServices/locations/allocatedStamp/read\",\r\n \"Microsoft.RecoveryServices/locations/allocateStamp/action\",\r\n \"Microsoft.RecoveryServices/Vaults/certificates/write\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/*\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/refreshContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationAlertSettings/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationEvents/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationJobs/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationPolicies/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/*\",\r\n \"Microsoft.RecoveryServices/Vaults/storageConfig/*\",\r\n \"Microsoft.RecoveryServices/Vaults/tokenInfo/read\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.RecoveryServices/Vaults/vaultTokens/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/*\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/notificationConfiguration/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationOperationStatus/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-19T13:46:17.4592776Z\",\r\n \"updatedOn\": \"2019-11-07T06:13:49.0760858Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/6670b86e-a3f7-4917-ac9b-5d6ab1be4567\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"6670b86e-a3f7-4917-ac9b-5d6ab1be4567\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Site Recovery Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you failover and failback but not perform other Site Recovery management operations\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.RecoveryServices/locations/allocatedStamp/read\",\r\n \"Microsoft.RecoveryServices/locations/allocateStamp/action\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/read\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/refreshContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationAlertSettings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationEvents/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/checkConsistency/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/reassociateGateway/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/renewcertificate/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/replicationNetworkMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectableItems/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/applyRecoveryPoint/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/failoverCommit/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/plannedFailover/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/recoveryPoints/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/repairReplication/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/reProtect/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/switchprotection/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/testFailover/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/testFailoverCleanup/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/unplannedFailover/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/updateMobilityService/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/refreshProvider/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/replicationStorageClassificationMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationvCenters/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationJobs/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationPolicies/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/failoverCommit/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/plannedFailover/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/reProtect/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/testFailover/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/testFailoverCleanup/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/unplannedFailover/action\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/*\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/notificationConfiguration/read\",\r\n \"Microsoft.RecoveryServices/Vaults/storageConfig/read\",\r\n \"Microsoft.RecoveryServices/Vaults/tokenInfo/read\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.RecoveryServices/Vaults/vaultTokens/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-19T13:47:50.1341148Z\",\r\n \"updatedOn\": \"2019-08-28T12:00:57.4472826Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": \"\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/494ae006-db33-4328-bf46-533a6560a3ca\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"494ae006-db33-4328-bf46-533a6560a3ca\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Spatial Anchors Account Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you locate and read properties of spatial anchors in your account\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/query/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-21T17:57:42.9271004Z\",\r\n \"updatedOn\": \"2019-02-13T06:16:15.3170663Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5d51204f-eb77-4b1c-b86a-2ec626c49413\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5d51204f-eb77-4b1c-b86a-2ec626c49413\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Site Recovery Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you view Site Recovery status but not perform other management operations\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.RecoveryServices/locations/allocatedStamp/read\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/notificationConfiguration/read\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/refreshContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationAlertSettings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationEvents/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/replicationNetworkMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectableItems/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/recoveryPoints/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/replicationStorageClassificationMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationvCenters/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationJobs/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationPolicies/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/read\",\r\n \"Microsoft.RecoveryServices/Vaults/storageConfig/read\",\r\n \"Microsoft.RecoveryServices/Vaults/tokenInfo/read\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.RecoveryServices/Vaults/vaultTokens/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-19T13:35:40.0093634Z\",\r\n \"updatedOn\": \"2017-05-26T19:54:51.393325Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/dbaa88c4-0c30-4179-9fb3-46319faa6149\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"dbaa88c4-0c30-4179-9fb3-46319faa6149\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Spatial Anchors Account Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage spatial anchors in your account, including deleting them\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/create/action\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/delete\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/query/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-21T17:57:43.5489832Z\",\r\n \"updatedOn\": \"2019-02-13T06:15:31.8572222Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/70bbe301-9835-447d-afdd-19eb3167307c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"70bbe301-9835-447d-afdd-19eb3167307c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SQL Managed Instance Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage SQL Managed Instances and required network configuration, but can’t give access to others.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Network/networkSecurityGroups/*\",\r\n \"Microsoft.Network/routeTables/*\",\r\n \"Microsoft.Sql/locations/*/read\",\r\n \"Microsoft.Sql/locations/instanceFailoverGroups/*\",\r\n \"Microsoft.Sql/managedInstances/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Network/virtualNetworks/subnets/*\",\r\n \"Microsoft.Network/virtualNetworks/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/metrics/read\",\r\n \"Microsoft.Insights/metricDefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-10T22:57:14.2937983Z\",\r\n \"updatedOn\": \"2020-06-24T22:56:31.0576055Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/4939a1f6-9ae0-4e48-a1e0-f2cbe897382d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4939a1f6-9ae0-4e48-a1e0-f2cbe897382d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SQL DB Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage SQL databases, but not access to them. Also, you can't manage their security-related policies or their parent SQL servers.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Sql/locations/*/read\",\r\n \"Microsoft.Sql/servers/databases/*\",\r\n \"Microsoft.Sql/servers/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Insights/metrics/read\",\r\n \"Microsoft.Insights/metricDefinitions/read\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Sql/managedInstances/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/managedInstances/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/databases/auditingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/auditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/auditRecords/read\",\r\n \"Microsoft.Sql/servers/databases/connectionPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/dataMaskingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/extendedAuditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/securityMetrics/*\",\r\n \"Microsoft.Sql/servers/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentScans/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentSettings/*\",\r\n \"Microsoft.Sql/servers/vulnerabilityAssessments/*\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-28T22:44:35.864967Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/9b7fa17d-e63e-47b0-bb0a-15c516ac86ec\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"9b7fa17d-e63e-47b0-bb0a-15c516ac86ec\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SQL Security Manager\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage the security-related policies of SQL servers and databases, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Sql/managedInstances/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/managedInstances/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/databases/transparentDataEncryption/*\",\r\n \"Microsoft.Sql/managedInstances/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/auditingPolicies/*\",\r\n \"Microsoft.Sql/servers/auditingSettings/*\",\r\n \"Microsoft.Sql/servers/extendedAuditingSettings/read\",\r\n \"Microsoft.Sql/servers/databases/auditingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/auditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/auditRecords/read\",\r\n \"Microsoft.Sql/servers/databases/connectionPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/dataMaskingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/extendedAuditingSettings/read\",\r\n \"Microsoft.Sql/servers/databases/read\",\r\n \"Microsoft.Sql/servers/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/schemas/read\",\r\n \"Microsoft.Sql/servers/databases/schemas/tables/columns/read\",\r\n \"Microsoft.Sql/servers/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/schemas/tables/read\",\r\n \"Microsoft.Sql/servers/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/securityMetrics/*\",\r\n \"Microsoft.Sql/servers/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/transparentDataEncryption/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentScans/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentSettings/*\",\r\n \"Microsoft.Sql/servers/firewallRules/*\",\r\n \"Microsoft.Sql/servers/read\",\r\n \"Microsoft.Sql/servers/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/servers/vulnerabilityAssessments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-16T18:44:40.4607572Z\",\r\n \"updatedOn\": \"2019-08-08T22:58:22.2532171Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": \"yaiyun\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"056cd41c-7e88-42e1-933e-88ba6a50c9c3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage storage accounts, including accessing storage account keys which provide full access to storage account data.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/diagnosticSettings/*\",\r\n \"Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-02T00:18:27.3542698Z\",\r\n \"updatedOn\": \"2019-05-29T20:56:33.9582501Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"17d1049b-9a84-46fb-8f53-869881c3d3ab\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SQL Server Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage SQL servers and databases, but not access to them, and not their security -related policies.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Sql/locations/*/read\",\r\n \"Microsoft.Sql/servers/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Insights/metrics/read\",\r\n \"Microsoft.Insights/metricDefinitions/read\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Sql/managedInstances/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/managedInstances/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/auditingPolicies/*\",\r\n \"Microsoft.Sql/servers/auditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/auditingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/auditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/auditRecords/read\",\r\n \"Microsoft.Sql/servers/databases/connectionPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/dataMaskingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/extendedAuditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/securityMetrics/*\",\r\n \"Microsoft.Sql/servers/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentScans/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentSettings/*\",\r\n \"Microsoft.Sql/servers/extendedAuditingSettings/*\",\r\n \"Microsoft.Sql/servers/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/servers/vulnerabilityAssessments/*\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-28T22:44:36.5466043Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Account Key Operator Service Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Storage Account Key Operators are allowed to list and regenerate keys on Storage Accounts\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/listkeys/action\",\r\n \"Microsoft.Storage/storageAccounts/regeneratekey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-13T18:26:11.577057Z\",\r\n \"updatedOn\": \"2017-04-13T20:57:14.5990198Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/81a9662b-bebf-436f-a333-f67b29880f12\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"81a9662b-bebf-436f-a333-f67b29880f12\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Blob Data Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read, write and delete access to Azure Storage blob containers and data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/delete\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/write\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/move/action\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-21T00:01:24.7972312Z\",\r\n \"updatedOn\": \"2020-03-30T22:49:07.866942Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/ba92f5b4-2d11-453d-a403-e96b0029c9fe\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ba92f5b4-2d11-453d-a403-e96b0029c9fe\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Blob Data Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for full access to Azure Storage blob containers and data, including assigning POSIX access control.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/*\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-04T07:02:58.2775257Z\",\r\n \"updatedOn\": \"2019-07-16T21:30:33.7002563Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b7e6dc6d-f1e8-4753-8033-0f276bb0955b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b7e6dc6d-f1e8-4753-8033-0f276bb0955b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Blob Data Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read access to Azure Storage blob containers and data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-21T00:01:24.7972312Z\",\r\n \"updatedOn\": \"2019-07-15T22:01:25.5409721Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/2a2b9908-6ea1-4ae2-8e65-a410df84e7d1\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"2a2b9908-6ea1-4ae2-8e65-a410df84e7d1\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Queue Data Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read, write, and delete access to Azure Storage queues and queue messages\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/delete\",\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/read\",\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/delete\",\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/read\",\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-21T00:01:24.7972312Z\",\r\n \"updatedOn\": \"2019-03-05T21:58:02.7367128Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/974c5e8b-45b9-4653-ba55-5f855dd0fb88\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"974c5e8b-45b9-4653-ba55-5f855dd0fb88\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Queue Data Message Processor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for peek, receive, and delete access to Azure Storage queue messages\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/read\",\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/process/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-01-28T22:27:04.8947111Z\",\r\n \"updatedOn\": \"2019-03-05T22:05:46.1259125Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8a0f0c08-91a1-4084-bc3d-661d67233fed\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8a0f0c08-91a1-4084-bc3d-661d67233fed\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Queue Data Message Sender\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for sending of Azure Storage queue messages\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/add/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-01-28T22:28:34.7459724Z\",\r\n \"updatedOn\": \"2019-03-05T22:11:49.6383892Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/c6a89b2d-59bc-44d0-9896-0f6e12d7b80a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c6a89b2d-59bc-44d0-9896-0f6e12d7b80a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Queue Data Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read access to Azure Storage queues and queue messages\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-21T00:01:24.7972312Z\",\r\n \"updatedOn\": \"2019-03-05T22:17:32.1779262Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/19e7f393-937e-4f77-808e-94535e297925\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"19e7f393-937e-4f77-808e-94535e297925\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Support Request Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you create and manage Support requests\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-06-22T22:25:37.8053068Z\",\r\n \"updatedOn\": \"2017-06-23T01:06:24.2399631Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/cfd33db0-3dd1-45e3-aa9d-cdbdf3b6f24e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"cfd33db0-3dd1-45e3-aa9d-cdbdf3b6f24e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Traffic Manager Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Traffic Manager profiles, but does not let you control who has access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/trafficManagerProfiles/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-10-15T23:33:25.9730842Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:44.1458854Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/a4b10055-b0c7-44c2-b00f-c7b5b3550cf7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a4b10055-b0c7-44c2-b00f-c7b5b3550cf7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Virtual Machine Administrator Login\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"View Virtual Machines in the portal and login as administrator\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Network/publicIPAddresses/read\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/loadBalancers/read\",\r\n \"Microsoft.Network/networkInterfaces/read\",\r\n \"Microsoft.Compute/virtualMachines/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Compute/virtualMachines/login/action\",\r\n \"Microsoft.Compute/virtualMachines/loginAsAdmin/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-02-09T18:36:13.3315744Z\",\r\n \"updatedOn\": \"2018-05-09T22:17:57.0514548Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/1c0163c0-47e6-4577-8991-ea5c82e286e4\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"1c0163c0-47e6-4577-8991-ea5c82e286e4\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"User Access Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage user access to Azure resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Authorization/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:12.6807454Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/18d7d88d-d35e-4fb5-a5c3-7773c20a72d9\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"18d7d88d-d35e-4fb5-a5c3-7773c20a72d9\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Virtual Machine User Login\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"View Virtual Machines in the portal and login as a regular user.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Network/publicIPAddresses/read\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/loadBalancers/read\",\r\n \"Microsoft.Network/networkInterfaces/read\",\r\n \"Microsoft.Compute/virtualMachines/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Compute/virtualMachines/login/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-02-09T18:36:13.3315744Z\",\r\n \"updatedOn\": \"2018-05-09T22:18:52.2780979Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/fb879df8-f326-4884-b1cf-06f3ad86be52\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fb879df8-f326-4884-b1cf-06f3ad86be52\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Virtual Machine Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage virtual machines, but not access to them, and not the virtual network or storage account they're connected to.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Compute/availabilitySets/*\",\r\n \"Microsoft.Compute/locations/*\",\r\n \"Microsoft.Compute/virtualMachines/*\",\r\n \"Microsoft.Compute/virtualMachineScaleSets/*\",\r\n \"Microsoft.Compute/disks/write\",\r\n \"Microsoft.Compute/disks/read\",\r\n \"Microsoft.Compute/disks/delete\",\r\n \"Microsoft.DevTestLab/schedules/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/applicationGateways/backendAddressPools/join/action\",\r\n \"Microsoft.Network/loadBalancers/backendAddressPools/join/action\",\r\n \"Microsoft.Network/loadBalancers/inboundNatPools/join/action\",\r\n \"Microsoft.Network/loadBalancers/inboundNatRules/join/action\",\r\n \"Microsoft.Network/loadBalancers/probes/join/action\",\r\n \"Microsoft.Network/loadBalancers/read\",\r\n \"Microsoft.Network/locations/*\",\r\n \"Microsoft.Network/networkInterfaces/*\",\r\n \"Microsoft.Network/networkSecurityGroups/join/action\",\r\n \"Microsoft.Network/networkSecurityGroups/read\",\r\n \"Microsoft.Network/publicIPAddresses/join/action\",\r\n \"Microsoft.Network/publicIPAddresses/read\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/join/action\",\r\n \"Microsoft.RecoveryServices/locations/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/*/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/write\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.RecoveryServices/Vaults/write\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.SqlVirtualMachine/*\",\r\n \"Microsoft.Storage/storageAccounts/listKeys/action\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-02T00:18:27.3542698Z\",\r\n \"updatedOn\": \"2020-02-03T19:38:21.2170228Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Web Plan Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage the web plans for websites, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Web/serverFarms/*\",\r\n \"Microsoft.Web/hostingEnvironments/Join/Action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-03-26T18:17:34.5018645Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/2cc479cb-7b4d-49a8-b449-8c00fd0f0a4b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"2cc479cb-7b4d-49a8-b449-8c00fd0f0a4b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Website Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage websites (not web plans), but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/components/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Web/certificates/*\",\r\n \"Microsoft.Web/listSitesAssignedToHostName/read\",\r\n \"Microsoft.Web/serverFarms/join/action\",\r\n \"Microsoft.Web/serverFarms/read\",\r\n \"Microsoft.Web/sites/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-05-12T23:10:23.6193952Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:46.9407288Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/de139f84-1756-47ae-9be6-808fbbe84772\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"de139f84-1756-47ae-9be6-808fbbe84772\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Service Bus Data Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for full access to Azure Service Bus resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ServiceBus/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ServiceBus/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-16T21:33:36.7445745Z\",\r\n \"updatedOn\": \"2019-08-21T22:47:11.3982905Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/090c5cfd-751d-490a-894a-3ce6f1109419\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"090c5cfd-751d-490a-894a-3ce6f1109419\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Event Hubs Data Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for full access to Azure Event Hubs resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.EventHub/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.EventHub/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-16T21:34:29.8656362Z\",\r\n \"updatedOn\": \"2019-08-21T22:58:57.7584645Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/f526a384-b230-433a-b45c-95f59c4a2dec\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f526a384-b230-433a-b45c-95f59c4a2dec\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Attestation Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read write or delete the attestation provider instance\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Attestation/attestationProviders/attestation/read\",\r\n \"Microsoft.Attestation/attestationProviders/attestation/write\",\r\n \"Microsoft.Attestation/attestationProviders/attestation/delete\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-19T00:24:09.3354177Z\",\r\n \"updatedOn\": \"2019-05-10T17:59:06.3448436Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/bbf86eb8-f7b4-4cce-96e4-18cddf81d86e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"bbf86eb8-f7b4-4cce-96e4-18cddf81d86e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"HDInsight Cluster Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read and modify HDInsight cluster configurations.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.HDInsight/*/read\",\r\n \"Microsoft.HDInsight/clusters/getGatewaySettings/action\",\r\n \"Microsoft.HDInsight/clusters/updateGatewaySettings/action\",\r\n \"Microsoft.HDInsight/clusters/configurations/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-20T00:03:01.7110732Z\",\r\n \"updatedOn\": \"2019-04-28T02:34:17.4679314Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/61ed4efc-fab3-44fd-b111-e24485cc132a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"61ed4efc-fab3-44fd-b111-e24485cc132a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cosmos DB Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Azure Cosmos DB accounts, but not access data in them. Prevents access to account keys and connection strings.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.DocumentDb/databaseAccounts/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.DocumentDB/databaseAccounts/readonlyKeys/*\",\r\n \"Microsoft.DocumentDB/databaseAccounts/regenerateKey/*\",\r\n \"Microsoft.DocumentDB/databaseAccounts/listKeys/*\",\r\n \"Microsoft.DocumentDB/databaseAccounts/listConnectionStrings/*\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-26T17:01:17.0169383Z\",\r\n \"updatedOn\": \"2019-11-21T01:34:13.3746345Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/230815da-be43-4aae-9cb4-875f7bd000aa\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"230815da-be43-4aae-9cb4-875f7bd000aa\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Hybrid Server Resource Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read, write, delete, and re-onboard Hybrid servers to the Hybrid Resource Provider.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.HybridCompute/machines/*\",\r\n \"Microsoft.HybridCompute/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-29T21:39:32.3132923Z\",\r\n \"updatedOn\": \"2019-05-06T20:08:25.3180258Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/48b40c6e-82e0-4eb3-90d5-19e40f49b624\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"48b40c6e-82e0-4eb3-90d5-19e40f49b624\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Hybrid Server Onboarding\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can onboard new Hybrid servers to the Hybrid Resource Provider.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.HybridCompute/machines/read\",\r\n \"Microsoft.HybridCompute/machines/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-29T22:36:28.1873756Z\",\r\n \"updatedOn\": \"2019-05-06T20:09:17.9364269Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5d1e5ee4-7c68-4a71-ac8b-0739630a3dfb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5d1e5ee4-7c68-4a71-ac8b-0739630a3dfb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Event Hubs Data Receiver\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows receive access to Azure Event Hubs resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.EventHub/*/eventhubs/consumergroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.EventHub/*/receive/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-05-10T06:25:21.1056666Z\",\r\n \"updatedOn\": \"2019-08-21T23:00:32.6225396Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/a638d3c7-ab3a-418d-83e6-5f17a39d4fde\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a638d3c7-ab3a-418d-83e6-5f17a39d4fde\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Event Hubs Data Sender\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows send access to Azure Event Hubs resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.EventHub/*/eventhubs/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.EventHub/*/send/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-05-10T06:26:12.4673714Z\",\r\n \"updatedOn\": \"2019-08-21T23:02:26.6155679Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/2b629674-e913-4c01-ae53-ef4638d8f975\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"2b629674-e913-4c01-ae53-ef4638d8f975\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Service Bus Data Receiver\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for receive access to Azure Service Bus resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ServiceBus/*/queues/read\",\r\n \"Microsoft.ServiceBus/*/topics/read\",\r\n \"Microsoft.ServiceBus/*/topics/subscriptions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ServiceBus/*/receive/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-05-10T06:43:01.6343849Z\",\r\n \"updatedOn\": \"2019-08-21T22:55:24.3423558Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/4f6d3b9b-027b-4f4c-9142-0e5a2a2247e0\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4f6d3b9b-027b-4f4c-9142-0e5a2a2247e0\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Service Bus Data Sender\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for send access to Azure Service Bus resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ServiceBus/*/queues/read\",\r\n \"Microsoft.ServiceBus/*/topics/read\",\r\n \"Microsoft.ServiceBus/*/topics/subscriptions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ServiceBus/*/send/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-05-10T06:43:46.7046934Z\",\r\n \"updatedOn\": \"2019-08-21T22:57:12.2555683Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/69a216fc-b8fb-44d8-bc22-1f3c2cd27a39\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"69a216fc-b8fb-44d8-bc22-1f3c2cd27a39\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage File Data SMB Share Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read access to Azure File Share over SMB\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-07-01T20:19:31.8620471Z\",\r\n \"updatedOn\": \"2019-08-07T01:00:41.9223409Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/aba4ae5f-2193-4029-9191-0cb91df5e314\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"aba4ae5f-2193-4029-9191-0cb91df5e314\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage File Data SMB Share Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read, write, and delete access in Azure Storage file shares over SMB\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read\",\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/write\",\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/delete\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-07-01T20:54:35.483431Z\",\r\n \"updatedOn\": \"2019-08-07T01:05:24.4309872Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/0c867c2a-1d8c-454a-a3db-ab2ea1bdc8bb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0c867c2a-1d8c-454a-a3db-ab2ea1bdc8bb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Private DNS Zone Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage private DNS zone resources, but not the virtual networks they are linked to.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Network/privateDnsZones/*\",\r\n \"Microsoft.Network/privateDnsOperationResults/*\",\r\n \"Microsoft.Network/privateDnsOperationStatuses/*\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/virtualNetworks/join/action\",\r\n \"Microsoft.Authorization/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-07-10T19:31:15.5645518Z\",\r\n \"updatedOn\": \"2019-07-11T21:12:01.7260648Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b12aa53e-6015-4669-85d0-8515ebb3ae7f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b12aa53e-6015-4669-85d0-8515ebb3ae7f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Blob Delegator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for generation of a user delegation key which can be used to sign SAS tokens\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-07-23T00:51:16.3376761Z\",\r\n \"updatedOn\": \"2019-07-23T01:14:31.8778475Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/db58b8e5-c6ad-4a2a-8342-4190687cbf4a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"db58b8e5-c6ad-4a2a-8342-4190687cbf4a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Desktop Virtualization User\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows user to use the applications in an application group.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.DesktopVirtualization/applicationGroups/useApplications/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-07T00:29:03.8727621Z\",\r\n \"updatedOn\": \"2019-08-07T00:29:03.8727621Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/1d18fff3-a72a-46b5-b4a9-0b38a3cd7e63\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"1d18fff3-a72a-46b5-b4a9-0b38a3cd7e63\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage File Data SMB Share Elevated Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read, write, delete and modify NTFS permission access in Azure Storage file shares over SMB\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read\",\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/write\",\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/delete\",\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/modifypermissions/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-07T01:35:36.9935457Z\",\r\n \"updatedOn\": \"2019-08-07T01:35:36.9935457Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/a7264617-510b-434b-a828-9731dc254ea7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a7264617-510b-434b-a828-9731dc254ea7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Blueprint Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage blueprint definitions, but not assign them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Blueprint/blueprints/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-14T21:55:16.9683949Z\",\r\n \"updatedOn\": \"2019-08-17T00:10:55.7494677Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/41077137-e803-4205-871c-5a86e6a753b4\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"41077137-e803-4205-871c-5a86e6a753b4\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Blueprint Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can assign existing published blueprints, but cannot create new blueprints. NOTE: this only works if the assignment is done with a user-assigned managed identity.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Blueprint/blueprintAssignments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-14T21:56:48.7897875Z\",\r\n \"updatedOn\": \"2019-08-17T00:06:02.6509737Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/437d2ced-4a38-4302-8479-ed2bcb43d090\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"437d2ced-4a38-4302-8479-ed2bcb43d090\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Sentinel Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Azure Sentinel Contributor\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.SecurityInsights/*\",\r\n \"Microsoft.OperationalInsights/workspaces/analytics/query/action\",\r\n \"Microsoft.OperationalInsights/workspaces/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/savedSearches/*\",\r\n \"Microsoft.OperationsManagement/solutions/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/dataSources/read\",\r\n \"Microsoft.Insights/workbooks/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-28T16:39:03.8725173Z\",\r\n \"updatedOn\": \"2020-03-11T15:20:51.6768533Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/ab8e14d6-4a74-4a29-9ba8-549422addade\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ab8e14d6-4a74-4a29-9ba8-549422addade\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Sentinel Responder\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Azure Sentinel Responder\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.SecurityInsights/*/read\",\r\n \"Microsoft.SecurityInsights/dataConnectorsCheckRequirements/action\",\r\n \"Microsoft.SecurityInsights/cases/*\",\r\n \"Microsoft.SecurityInsights/incidents/*\",\r\n \"Microsoft.OperationalInsights/workspaces/analytics/query/action\",\r\n \"Microsoft.OperationalInsights/workspaces/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/dataSources/read\",\r\n \"Microsoft.OperationalInsights/workspaces/savedSearches/read\",\r\n \"Microsoft.OperationsManagement/solutions/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/dataSources/read\",\r\n \"Microsoft.Insights/workbooks/read\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-28T16:54:07.6467264Z\",\r\n \"updatedOn\": \"2020-04-02T08:42:10.2864085Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/3e150937-b8fe-4cfb-8069-0eaf05ecd056\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3e150937-b8fe-4cfb-8069-0eaf05ecd056\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Sentinel Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Azure Sentinel Reader\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.SecurityInsights/*/read\",\r\n \"Microsoft.SecurityInsights/dataConnectorsCheckRequirements/action\",\r\n \"Microsoft.OperationalInsights/workspaces/analytics/query/action\",\r\n \"Microsoft.OperationalInsights/workspaces/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/LinkedServices/read\",\r\n \"Microsoft.OperationalInsights/workspaces/savedSearches/read\",\r\n \"Microsoft.OperationsManagement/solutions/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/dataSources/read\",\r\n \"Microsoft.Insights/workbooks/read\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-28T16:58:50.1132117Z\",\r\n \"updatedOn\": \"2020-04-02T08:34:51.7222706Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8d289c81-5878-46d4-8554-54e1e3d8b5cb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8d289c81-5878-46d4-8554-54e1e3d8b5cb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Workbook Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read workbooks.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"microsoft.insights/workbooks/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-28T20:56:17.680814Z\",\r\n \"updatedOn\": \"2019-08-28T21:43:05.0202124Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b279062a-9be3-42a0-92ae-8b3cf002ec4d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b279062a-9be3-42a0-92ae-8b3cf002ec4d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Workbook Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can save shared workbooks.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Insights/workbooks/write\",\r\n \"Microsoft.Insights/workbooks/delete\",\r\n \"Microsoft.Insights/workbooks/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-28T20:59:42.4820277Z\",\r\n \"updatedOn\": \"2020-01-22T00:05:20.938721Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/e8ddcd69-c73f-4f9f-9844-4100522f16ad\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e8ddcd69-c73f-4f9f-9844-4100522f16ad\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Policy Insights Data Writer (Preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows read access to resource policies and write access to resource component policy events.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/policyassignments/read\",\r\n \"Microsoft.Authorization/policydefinitions/read\",\r\n \"Microsoft.Authorization/policysetdefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.PolicyInsights/checkDataPolicyCompliance/action\",\r\n \"Microsoft.PolicyInsights/policyEvents/logDataEvents/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-09-19T19:35:20.9504127Z\",\r\n \"updatedOn\": \"2019-09-19T19:37:02.5331596Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/66bb4e9e-b016-4a94-8249-4c0511c2be84\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"66bb4e9e-b016-4a94-8249-4c0511c2be84\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SignalR AccessKey Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read SignalR Service Access Keys\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.SignalRService/*/read\",\r\n \"Microsoft.SignalRService/SignalR/listkeys/action\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-09-20T09:33:19.6236874Z\",\r\n \"updatedOn\": \"2019-09-20T09:33:19.6236874Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/04165923-9d83-45d5-8227-78b77b0a687e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"04165923-9d83-45d5-8227-78b77b0a687e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SignalR Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Create, Read, Update, and Delete SignalR service resources\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.SignalRService/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-09-20T09:58:09.0009662Z\",\r\n \"updatedOn\": \"2019-09-20T09:58:09.0009662Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Connected Machine Onboarding\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can onboard Azure Connected Machines.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.HybridCompute/machines/read\",\r\n \"Microsoft.HybridCompute/machines/write\",\r\n \"Microsoft.GuestConfiguration/guestConfigurationAssignments/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-10-23T20:15:07.137287Z\",\r\n \"updatedOn\": \"2019-11-03T18:26:59.2060282Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b64e21ea-ac4e-4cdf-9dc9-5b892992bee7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b64e21ea-ac4e-4cdf-9dc9-5b892992bee7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Connected Machine Resource Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read, write, delete and re-onboard Azure Connected Machines.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.HybridCompute/machines/read\",\r\n \"Microsoft.HybridCompute/machines/write\",\r\n \"Microsoft.HybridCompute/machines/delete\",\r\n \"Microsoft.HybridCompute/machines/reconnect/action\",\r\n \"Microsoft.HybridCompute/machines/extensions/write\",\r\n \"Microsoft.HybridCompute/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-10-23T20:24:59.1474607Z\",\r\n \"updatedOn\": \"2020-03-19T22:39:54.1226122Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/cd570a14-e51a-42ad-bac8-bafd67325302\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"cd570a14-e51a-42ad-bac8-bafd67325302\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Services Registration assignment Delete Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Managed Services Registration Assignment Delete Role allows the managing tenant users to delete the registration assignment assigned to their tenant.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ManagedServices/registrationAssignments/read\",\r\n \"Microsoft.ManagedServices/registrationAssignments/delete\",\r\n \"Microsoft.ManagedServices/operationStatuses/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-10-23T22:33:33.1183469Z\",\r\n \"updatedOn\": \"2019-10-24T21:49:09.3875276Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/91c1777a-f3dc-4fae-b103-61d183457e46\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"91c1777a-f3dc-4fae-b103-61d183457e46\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"App Configuration Data Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows full access to App Configuration data.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.AppConfiguration/configurationStores/*/read\",\r\n \"Microsoft.AppConfiguration/configurationStores/*/write\",\r\n \"Microsoft.AppConfiguration/configurationStores/*/delete\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-10-25T18:41:40.1185063Z\",\r\n \"updatedOn\": \"2019-10-25T18:41:40.1185063Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5ae67dd6-50cb-40e7-96ff-dc2bfa4b606b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5ae67dd6-50cb-40e7-96ff-dc2bfa4b606b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"App Configuration Data Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows read access to App Configuration data.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.AppConfiguration/configurationStores/*/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-10-25T18:45:33.7975332Z\",\r\n \"updatedOn\": \"2019-10-25T18:45:33.7975332Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/516239f1-63e1-4d78-a4de-a74fb236a071\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"516239f1-63e1-4d78-a4de-a74fb236a071\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Kubernetes Cluster - Azure Arc Onboarding\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Role definition to authorize any user/service to create connectedClusters resource\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Kubernetes/connectedClusters/Write\",\r\n \"Microsoft.Kubernetes/connectedClusters/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-11-18T17:00:02.2087147Z\",\r\n \"updatedOn\": \"2020-02-10T22:40:48.3317559Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/34e09817-6cbe-4d01-b1a2-e0eac5743d41\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"34e09817-6cbe-4d01-b1a2-e0eac5743d41\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Experimentation Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Experimentation Contributor\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/read\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/experiment/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/emergencystop/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/read\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/write\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/delete\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-12-13T00:08:08.6679591Z\",\r\n \"updatedOn\": \"2020-07-07T20:17:06.8223079Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/7f646f1b-fa08-80eb-a22b-edd6ce5c915c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7f646f1b-fa08-80eb-a22b-edd6ce5c915c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services QnA Maker Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Let’s you read and test a KB only.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\",\r\n \"Microsoft.Authorization/roleAssignments/read\",\r\n \"Microsoft.Authorization/roleDefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-12-17T18:26:12.3329439Z\",\r\n \"updatedOn\": \"2020-05-08T12:03:46.9266538Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/466ccd10-b268-4a11-b098-b4849f024126\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"466ccd10-b268-4a11-b098-b4849f024126\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services QnA Maker Editor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Let’s you create, edit, import and export a KB. You cannot publish or delete a KB.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\",\r\n \"Microsoft.Authorization/roleAssignments/read\",\r\n \"Microsoft.Authorization/roleDefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/create/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/train/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/alterations/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/refreshkeys/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/operations/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/create/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/train/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/refreshkeys/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/operations/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-12-17T18:27:30.6434556Z\",\r\n \"updatedOn\": \"2020-05-08T12:02:34.0065552Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/f4cc2bf9-21be-47a1-bdf1-5c5804381025\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f4cc2bf9-21be-47a1-bdf1-5c5804381025\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Experimentation Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Experimentation Administrator\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/admin/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/read\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/write\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/delete\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/experimentadmin/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/experiment/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/emergencystop/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/read\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/write\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/delete\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/admin/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-12-18T22:46:33.1116612Z\",\r\n \"updatedOn\": \"2020-04-22T20:10:20.1216929Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/7f646f1b-fa08-80eb-a33b-edd6ce5c915c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7f646f1b-fa08-80eb-a33b-edd6ce5c915c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Remote Rendering Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Provides user with conversion, manage session, rendering and diagnostics capabilities for Azure Remote Rendering\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/convert/action\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/convert/read\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/convert/delete\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/read\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/action\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/delete\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/render/read\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/diagnostic/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-01-23T18:15:31.3450348Z\",\r\n \"updatedOn\": \"2020-01-23T18:15:31.3450348Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/3df8b902-2a6f-47c7-8cc5-360e9b272a7e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3df8b902-2a6f-47c7-8cc5-360e9b272a7e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Remote Rendering Client\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Provides user with manage session, rendering and diagnostics capabilities for Azure Remote Rendering.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/read\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/action\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/delete\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/render/read\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/diagnostic/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-01-23T18:32:52.7069824Z\",\r\n \"updatedOn\": \"2020-01-23T18:32:52.7069824Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/d39065c4-c120-43c9-ab0a-63eed9795f0a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"d39065c4-c120-43c9-ab0a-63eed9795f0a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Application Contributor Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for creating managed application resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Solutions/applications/*\",\r\n \"Microsoft.Solutions/register/action\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/*\",\r\n \"Microsoft.Resources/deployments/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-08T03:39:11.8933879Z\",\r\n \"updatedOn\": \"2020-03-23T02:12:30.0853051Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/641177b8-a67a-45b9-a033-47bc880bb21e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"641177b8-a67a-45b9-a033-47bc880bb21e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Security Assessment Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you push assessments to Security Center\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Security/assessments/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-13T08:23:47.7656161Z\",\r\n \"updatedOn\": \"2020-02-13T08:23:47.7656161Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/612c2aa1-cb24-443b-ac28-3ab7272de6f5\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"612c2aa1-cb24-443b-ac28-3ab7272de6f5\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Tag Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage tags on entities, without providing access to the entities themselves.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/resources/read\",\r\n \"Microsoft.Resources/subscriptions/resources/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Resources/tags/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-18T23:19:19.2977644Z\",\r\n \"updatedOn\": \"2020-02-19T00:04:58.9214962Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/4a9ae827-6dc8-4573-8ac7-8239d42aa03f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4a9ae827-6dc8-4573-8ac7-8239d42aa03f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Integration Service Environment Developer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows developers to create and update workflows, integration accounts and API connections in integration service environments.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Logic/integrationServiceEnvironments/read\",\r\n \"Microsoft.Logic/integrationServiceEnvironments/join/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-20T21:09:00.5627875Z\",\r\n \"updatedOn\": \"2020-02-20T21:36:24.619073Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/c7aa55d3-1abb-444a-a5ca-5e51e485d6ec\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c7aa55d3-1abb-444a-a5ca-5e51e485d6ec\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Integration Service Environment Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage integration service environments, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Logic/integrationServiceEnvironments/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-20T21:10:44.4008319Z\",\r\n \"updatedOn\": \"2020-02-20T21:41:56.7983599Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/a41e2c5b-bd99-4a07-88f4-9bf657a760b8\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a41e2c5b-bd99-4a07-88f4-9bf657a760b8\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Marketplace Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Administrator of marketplace resource provider\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Marketplace/privateStores/write\",\r\n \"Microsoft.Marketplace/privateStores/action\",\r\n \"Microsoft.Marketplace/privateStores/delete\",\r\n \"Microsoft.Marketplace/privateStores/offers/write\",\r\n \"Microsoft.Marketplace/privateStores/offers/action\",\r\n \"Microsoft.Marketplace/privateStores/offers/delete\",\r\n \"Microsoft.Authorization/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-26T14:19:50.9681015Z\",\r\n \"updatedOn\": \"2020-06-23T05:54:42.8370671Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/dd920d6d-f481-47f1-b461-f338c46b2d9f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"dd920d6d-f481-47f1-b461-f338c46b2d9f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service Contributor Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Grants access to read and write Azure Kubernetes Service clusters\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerService/managedClusters/read\",\r\n \"Microsoft.ContainerService/managedClusters/write\",\r\n \"Microsoft.Resources/deployments/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-27T19:27:15.073997Z\",\r\n \"updatedOn\": \"2020-02-28T02:34:14.5162305Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/ed7f3fbd-7b88-4dd4-9017-9adb7ce333f8\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ed7f3fbd-7b88-4dd4-9017-9adb7ce333f8\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Digital Twins Reader (Preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read-only role for Digital Twins data-plane properties\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.DigitalTwins/digitaltwins/read\",\r\n \"Microsoft.DigitalTwins/digitaltwins/relationships/read\",\r\n \"Microsoft.DigitalTwins/eventroutes/read\",\r\n \"Microsoft.DigitalTwins/models/read\",\r\n \"Microsoft.DigitalTwins/query/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-10T23:48:14.7057381Z\",\r\n \"updatedOn\": \"2020-07-01T17:50:50.2393244Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/d57506d4-4c8d-48b1-8587-93c323f6a5a3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"d57506d4-4c8d-48b1-8587-93c323f6a5a3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Digital Twins Owner (Preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Full access role for Digital Twins data-plane\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.DigitalTwins/eventroutes/*\",\r\n \"Microsoft.DigitalTwins/digitaltwins/*\",\r\n \"Microsoft.DigitalTwins/digitaltwins/commands/*\",\r\n \"Microsoft.DigitalTwins/digitaltwins/relationships/*\",\r\n \"Microsoft.DigitalTwins/models/*\",\r\n \"Microsoft.DigitalTwins/query/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-10T23:49:33.782193Z\",\r\n \"updatedOn\": \"2020-03-10T23:49:33.782193Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/bcd981a7-7f74-457b-83e1-cceb9e632ffe\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"bcd981a7-7f74-457b-83e1-cceb9e632ffe\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Hierarchy Settings Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows users to edit and delete Hierarchy Settings\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Management/managementGroups/settings/write\",\r\n \"Microsoft.Management/managementGroups/settings/delete\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-13T23:55:11.0212387Z\",\r\n \"updatedOn\": \"2020-03-13T23:58:46.9249866Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/350f8d15-c687-4448-8ae1-157740a3936d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"350f8d15-c687-4448-8ae1-157740a3936d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"FHIR Data Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Role allows user or principal full access to FHIR Data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.HealthcareApis/services/fhir/resources/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-17T18:35:04.4949547Z\",\r\n \"updatedOn\": \"2020-03-17T18:35:04.4949547Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5a1fc7df-4bf1-4951-a576-89034ee01acd\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5a1fc7df-4bf1-4951-a576-89034ee01acd\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"FHIR Data Exporter\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Role allows user or principal to read and export FHIR Data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.HealthcareApis/services/fhir/resources/read\",\r\n \"Microsoft.HealthcareApis/services/fhir/resources/export/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-17T18:45:01.9764073Z\",\r\n \"updatedOn\": \"2020-03-19T20:29:56.9958536Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/3db33094-8700-4567-8da5-1501d4e7e843\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3db33094-8700-4567-8da5-1501d4e7e843\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"FHIR Data Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Role allows user or principal to read FHIR Data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.HealthcareApis/services/fhir/resources/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-17T18:49:04.8353499Z\",\r\n \"updatedOn\": \"2020-03-17T18:49:04.8353499Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/4c8d0bbc-75d3-4935-991f-5f3c56d81508\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4c8d0bbc-75d3-4935-991f-5f3c56d81508\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"FHIR Data Writer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Role allows user or principal to read and write FHIR Data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.HealthcareApis/services/fhir/resources/*\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.HealthcareApis/services/fhir/resources/hardDelete/action\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-17T18:55:35.2413335Z\",\r\n \"updatedOn\": \"2020-03-17T18:55:35.2413335Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/3f88fce4-5892-4214-ae73-ba5294559913\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3f88fce4-5892-4214-ae73-ba5294559913\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Experimentation Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Experimentation Reader\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Experimentation/experimentWorkspaces/read\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-25T18:05:14.8375678Z\",\r\n \"updatedOn\": \"2020-04-22T21:20:46.2737555Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/49632ef5-d9ac-41f4-b8e7-bbe587fa74a1\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"49632ef5-d9ac-41f4-b8e7-bbe587fa74a1\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Object Understanding Account Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Provides user with ingestion capabilities for Azure Object Understanding.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/ObjectUnderstandingAccounts/ingest/action\",\r\n \"Microsoft.MixedReality/ObjectUnderstandingAccounts/ingest/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-04-22T19:15:09.0697923Z\",\r\n \"updatedOn\": \"2020-04-22T19:15:09.0697923Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/4dd61c23-6743-42fe-a388-d8bdd41cb745\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4dd61c23-6743-42fe-a388-d8bdd41cb745\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Maps Data Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Grants access to read, write, and delete access to map related data from an Azure maps account.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Maps/accounts/*/read\",\r\n \"Microsoft.Maps/accounts/*/write\",\r\n \"Microsoft.Maps/accounts/*/delete\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-07T20:55:05.064541Z\",\r\n \"updatedOn\": \"2020-05-07T20:55:05.064541Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8f5e0ce6-4f7b-4dcf-bddf-e6f48634a204\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8f5e0ce6-4f7b-4dcf-bddf-e6f48634a204\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Custom Vision Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Full access to the project, including the ability to view, create, edit, or delete projects.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-08T23:47:07.0779345Z\",\r\n \"updatedOn\": \"2020-05-08T23:47:07.0779345Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/c1ff6cc2-c111-46fe-8896-e0ef812ad9f3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c1ff6cc2-c111-46fe-8896-e0ef812ad9f3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Custom Vision Deployment\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Publish, unpublish or export models. Deployment can view the project but can’t update.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/*/read\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/publish/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/export/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/quicktest/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/classify/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/detect/*\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-09T01:31:05.952862Z\",\r\n \"updatedOn\": \"2020-05-09T01:31:05.952862Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5c4089e1-6d96-4d2f-b296-c1bc7137275f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5c4089e1-6d96-4d2f-b296-c1bc7137275f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Custom Vision Labeler\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"View, edit training images and create, add, remove, or delete the image tags. Labelers can view the project but can’t update anything other than training images and tags.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/*/read\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/images/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/tags/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/images/suggested/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/tagsandregions/suggestions/action\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-09T01:33:20.8278896Z\",\r\n \"updatedOn\": \"2020-05-09T01:33:20.8278896Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/88424f51-ebe7-446f-bc41-7fa16989e96c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"88424f51-ebe7-446f-bc41-7fa16989e96c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Custom Vision Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read-only actions in the project. Readers can’t create or update the project.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/*/read\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-09T01:34:18.5328818Z\",\r\n \"updatedOn\": \"2020-05-09T01:34:18.5328818Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/93586559-c37d-4a6b-ba08-b9f0940c2d73\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"93586559-c37d-4a6b-ba08-b9f0940c2d73\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Custom Vision Trainer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"View, edit projects and train the models, including the ability to publish, unpublish, export the models. Trainers can’t create or delete the project.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/*\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/action\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/delete\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/import/action\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-09T01:35:13.8147804Z\",\r\n \"updatedOn\": \"2020-05-09T01:35:13.8147804Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/0a5ae4ab-0d65-4eeb-be61-29fc9b54394b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0a5ae4ab-0d65-4eeb-be61-29fc9b54394b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Administrator (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can perform any action on certificates, keys and secrets of a key vault, except manage permissions.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.KeyVault/checkNameAvailability/read\",\r\n \"Microsoft.KeyVault/deletedVaults/read\",\r\n \"Microsoft.KeyVault/locations/*/read\",\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:46.2349235Z\",\r\n \"updatedOn\": \"2020-05-20T19:40:18.9511304Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/00482a5a-887f-4fb3-b363-3b7fe8e74483\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"00482a5a-887f-4fb3-b363-3b7fe8e74483\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Crypto Officer (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can perform any action on the keys of a key vault, except manage permissions.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.KeyVault/checkNameAvailability/read\",\r\n \"Microsoft.KeyVault/deletedVaults/read\",\r\n \"Microsoft.KeyVault/locations/*/read\",\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/keys/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.0099249Z\",\r\n \"updatedOn\": \"2020-05-20T19:44:51.5886988Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/14b46e9e-c2b7-41b4-b07b-48a6ebf60603\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"14b46e9e-c2b7-41b4-b07b-48a6ebf60603\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Crypto User (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can perform cryptographic operations on keys and certificates.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/keys/read\",\r\n \"Microsoft.KeyVault/vaults/keys/update/action\",\r\n \"Microsoft.KeyVault/vaults/keys/backup/action\",\r\n \"Microsoft.KeyVault/vaults/keys/encrypt/action\",\r\n \"Microsoft.KeyVault/vaults/keys/decrypt/action\",\r\n \"Microsoft.KeyVault/vaults/keys/wrap/action\",\r\n \"Microsoft.KeyVault/vaults/keys/unwrap/action\",\r\n \"Microsoft.KeyVault/vaults/keys/sign/action\",\r\n \"Microsoft.KeyVault/vaults/keys/verify/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.0699268Z\",\r\n \"updatedOn\": \"2020-05-20T19:48:54.8672037Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/12338af0-0e69-4776-bea7-57ae8d297424\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"12338af0-0e69-4776-bea7-57ae8d297424\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Secrets Officer (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can perform any action on the secrets of a key vault, except manage permissions.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.KeyVault/checkNameAvailability/read\",\r\n \"Microsoft.KeyVault/deletedVaults/read\",\r\n \"Microsoft.KeyVault/locations/*/read\",\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/secrets/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.1449242Z\",\r\n \"updatedOn\": \"2020-05-20T19:51:40.033812Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b86a8fe4-44ce-4948-aee5-eccb2c155cd7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b86a8fe4-44ce-4948-aee5-eccb2c155cd7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Secrets User (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read secret contents.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/secrets/getSecret/action\",\r\n \"Microsoft.KeyVault/vaults/secrets/readMetadata/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.2049241Z\",\r\n \"updatedOn\": \"2020-05-20T19:53:53.9617292Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/4633458b-17de-408a-b874-0445c86b69e6\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4633458b-17de-408a-b874-0445c86b69e6\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Certificates Officer (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can perform any action on the certificates of a key vault, except manage permissions.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.KeyVault/checkNameAvailability/read\",\r\n \"Microsoft.KeyVault/deletedVaults/read\",\r\n \"Microsoft.KeyVault/locations/*/read\",\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/certificatecas/*\",\r\n \"Microsoft.KeyVault/vaults/certificates/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.2499247Z\",\r\n \"updatedOn\": \"2020-05-20T19:56:22.0363761Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/a4417e6f-fecd-4de8-b567-7b0420556985\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a4417e6f-fecd-4de8-b567-7b0420556985\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Reader (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read metadata of key vaults and its certificates, keys and secrets. Cannot read sensitive values such as secret contents or key material.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.KeyVault/checkNameAvailability/read\",\r\n \"Microsoft.KeyVault/deletedVaults/read\",\r\n \"Microsoft.KeyVault/locations/*/read\",\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/vaults/secrets/readMetadata/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.2949294Z\",\r\n \"updatedOn\": \"2020-05-20T19:58:55.0084184Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/21090545-7ca7-4776-b22c-e363652d74d2\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"21090545-7ca7-4776-b22c-e363652d74d2\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Crypto Service Encryption (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read metadata of keys and perform wrap/unwrap operations.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/keys/read\",\r\n \"Microsoft.KeyVault/vaults/keys/wrap/action\",\r\n \"Microsoft.KeyVault/vaults/keys/unwrap/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-20T20:55:19.239847Z\",\r\n \"updatedOn\": \"2020-05-20T20:55:19.239847Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/e147488a-f6f5-4113-8e2d-b22465e65bf6\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e147488a-f6f5-4113-8e2d-b22465e65bf6\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Arc Kubernetes Viewer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you view all resources in cluster/namespace, except secrets.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/*/read\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/secrets/read\",\r\n \"Microsoft.Kubernetes/connectedClusters/clusterconfig.azure.com/azureclusteridentityrequests/read\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-12T20:51:12.8801199Z\",\r\n \"updatedOn\": \"2020-06-12T20:51:12.8801199Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/63f0a09d-1495-4db4-a681-037d84835eb4\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"63f0a09d-1495-4db4-a681-037d84835eb4\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Arc Kubernetes Writer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you update everything in cluster/namespace, except (cluster)roles and (cluster)role bindings.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/*/read\",\r\n \"Microsoft.Kubernetes/connectedClusters/*/write\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/rbac.authorization.k8s.io/*/read\",\r\n \"Microsoft.Kubernetes/connectedClusters/rbac.authorization.k8s.io/*/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/namespaces/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/resourcequotas/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/certificates.k8s.io/certificatesigningrequests/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/policy/podsecuritypolicies/write\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-12T20:53:50.6749823Z\",\r\n \"updatedOn\": \"2020-06-12T20:53:50.6749823Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5b999177-9696-4545-85c7-50de3797e5a1\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5b999177-9696-4545-85c7-50de3797e5a1\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Arc Kubernetes Cluster Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage all resources in the cluster.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-12T20:55:30.9910462Z\",\r\n \"updatedOn\": \"2020-06-12T20:55:30.9910462Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8393591c-06b9-48a2-a542-1bd6b377f6a2\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8393591c-06b9-48a2-a542-1bd6b377f6a2\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Arc Kubernetes Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage all resources under cluster/namespace, except update or delete resource quotas and namespaces.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/*\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/resourcequotas/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/resourcequotas/delete\",\r\n \"Microsoft.Kubernetes/connectedClusters/namespaces/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/namespaces/delete\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-12T20:57:06.0391177Z\",\r\n \"updatedOn\": \"2020-06-12T20:57:06.0391177Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/dffb1e0c-446f-4dde-a09f-99eb5cc68b96\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"dffb1e0c-446f-4dde-a09f-99eb5cc68b96\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service RBAC Cluster Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage all resources in the cluster.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.ContainerService/managedClusters/listClusterUserCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-02T17:47:24.4071415Z\",\r\n \"updatedOn\": \"2020-07-02T17:47:24.4071415Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b1ff04bb-8a4e-4dc4-8eb5-8693973ce19b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b1ff04bb-8a4e-4dc4-8eb5-8693973ce19b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service RBAC Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage all resources under cluster/namespace, except update or delete resource quotas and namespaces.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.ContainerService/managedClusters/listClusterUserCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/*\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/resourcequotas/write\",\r\n \"Microsoft.ContainerService/managedClusters/resourcequotas/delete\",\r\n \"Microsoft.ContainerService/managedClusters/namespaces/write\",\r\n \"Microsoft.ContainerService/managedClusters/namespaces/delete\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-02T17:50:30.4020311Z\",\r\n \"updatedOn\": \"2020-07-02T17:50:30.4020311Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/3498e952-d568-435e-9b2c-8d77e338d7f7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3498e952-d568-435e-9b2c-8d77e338d7f7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service RBAC Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you view all resources in cluster/namespace, except secrets.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.ContainerService/managedClusters/listClusterUserCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/*/read\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/rbac.authorization.k8s.io/*/read\",\r\n \"Microsoft.ContainerService/managedClusters/rbac.authorization.k8s.io/*/write\",\r\n \"Microsoft.ContainerService/managedClusters/secrets/*\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-02T17:53:05.5728294Z\",\r\n \"updatedOn\": \"2020-07-07T16:40:37.2744607Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/7f6c6a51-bcf8-42ba-9220-52d62157d7db\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7f6c6a51-bcf8-42ba-9220-52d62157d7db\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service RBAC Writer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you update everything in cluster/namespace, except resource quotas, namespaces, pod security policies, certificate signing requests, (cluster)roles and (cluster)role bindings.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.ContainerService/managedClusters/listClusterUserCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/*/read\",\r\n \"Microsoft.ContainerService/managedClusters/*/write\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/rbac.authorization.k8s.io/*/read\",\r\n \"Microsoft.ContainerService/managedClusters/rbac.authorization.k8s.io/*/write\",\r\n \"Microsoft.ContainerService/managedClusters/namespaces/write\",\r\n \"Microsoft.ContainerService/managedClusters/resourcequotas/write\",\r\n \"Microsoft.ContainerService/managedClusters/certificates.k8s.io/certificatesigningrequests/write\",\r\n \"Microsoft.ContainerService/managedClusters/policy/podsecuritypolicies/write\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-02T17:54:51.9644983Z\",\r\n \"updatedOn\": \"2020-07-02T17:54:51.9644983Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/a7ffa36f-339b-4b5c-8bdf-e2c188b2c0eb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a7ffa36f-339b-4b5c-8bdf-e2c188b2c0eb\"\r\n }\r\n ]\r\n}", + "StatusCode": 200 + }, + { + "RequestUri": "//subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments/734de5f5-c680-41c0-8beb-67b98c3539d1?api-version=2020-04-01-preview", + "EncodedRequestUri": "Ly9zdWJzY3JpcHRpb25zLzQwMDRhOWZkLWQ1OGUtNDhkYy1hZWIyLTRhNGFlYzU4NjA2Zi9yZXNvdXJjZUdyb3Vwcy9kYW9yb3pjb19idWdfcmVwcm8vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3JvbGVBc3NpZ25tZW50cy83MzRkZTVmNS1jNjgwLTQxYzAtOGJlYi02N2I5OGMzNTM5ZDE/YXBpLXZlcnNpb249MjAyMC0wNC0wMS1wcmV2aWV3", + "RequestMethod": "DELETE", + "RequestBody": "", + "RequestHeaders": { + "x-ms-client-request-id": [ + "2a430ff5-158f-42c4-b3d7-e9f0b81dd641" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.28928.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.12.0.0" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-request-id": [ + "eb2a3abb-5a94-483d-b34b-dbe8bf4aafd9" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Set-Cookie": [ + "x-ms-gateway-slice=Production; path=/; secure; HttpOnly; SameSite=None" + ], + "x-ms-ratelimit-remaining-subscription-deletes": [ + "14999" + ], + "x-ms-correlation-request-id": [ + "cc3dc399-d9fb-4897-bd29-90c5fa0c59bc" + ], + "x-ms-routing-request-id": [ + "WESTUS:20200709T230033Z:cc3dc399-d9fb-4897-bd29-90c5fa0c59bc" + ], + "Date": [ + "Thu, 09 Jul 2020 23:00:32 GMT" + ], + "Content-Length": [ + "1084" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"properties\": {\r\n \"roleDefinitionId\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"principalId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"principalType\": \"User\",\r\n \"scope\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg\",\r\n \"condition\": \"@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container'\",\r\n \"conditionVersion\": \"1.0\",\r\n \"createdOn\": \"2020-07-09T23:00:30.4997866Z\",\r\n \"updatedOn\": \"2020-07-09T23:00:30.4997866Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"canDelegate\": false,\r\n \"delegatedManagedIdentityResourceId\": null,\r\n \"description\": \"This test should not fail\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments/734de5f5-c680-41c0-8beb-67b98c3539d1\",\r\n \"type\": \"Microsoft.Authorization/roleAssignments\",\r\n \"name\": \"734de5f5-c680-41c0-8beb-67b98c3539d1\"\r\n}", + "StatusCode": 200 + } + ], + "Names": {}, + "Variables": { + "SubscriptionId": "4e5329a6-39ce-4e13-b12e-11b30f015986" + } +} \ No newline at end of file diff --git a/src/Resources/Resources.Test/SessionRecords/Microsoft.Azure.Commands.Resources.Test.ScenarioTests.RoleAssignmentTests/RaWithV2ConditionVersionOnly.json b/src/Resources/Resources.Test/SessionRecords/Microsoft.Azure.Commands.Resources.Test.ScenarioTests.RoleAssignmentTests/RaWithV2ConditionVersionOnly.json new file mode 100644 index 000000000000..33d895cb40da --- /dev/null +++ b/src/Resources/Resources.Test/SessionRecords/Microsoft.Azure.Commands.Resources.Test.ScenarioTests.RoleAssignmentTests/RaWithV2ConditionVersionOnly.json @@ -0,0 +1,518 @@ +{ + "Entries": [ + { + "RequestUri": "//subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments/734de5f5-c680-41c0-8beb-67b98c3539d1?api-version=2020-04-01-preview", + "EncodedRequestUri": "Ly9zdWJzY3JpcHRpb25zLzQwMDRhOWZkLWQ1OGUtNDhkYy1hZWIyLTRhNGFlYzU4NjA2Zi9yZXNvdXJjZUdyb3Vwcy9kYW9yb3pjb19idWdfcmVwcm8vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3JvbGVBc3NpZ25tZW50cy83MzRkZTVmNS1jNjgwLTQxYzAtOGJlYi02N2I5OGMzNTM5ZDE/YXBpLXZlcnNpb249MjAyMC0wNC0wMS1wcmV2aWV3", + "RequestMethod": "PUT", + "RequestBody": "{\r\n \"properties\": {\r\n \"roleDefinitionId\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"principalId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"canDelegate\": false,\r\n \"description\": \"This test should not fail\",\r\n \"condition\": \"@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container'\",\r\n \"conditionVersion\": \"1.0\"\r\n }\r\n}", + "RequestHeaders": { + "x-ms-client-request-id": [ + "b5c311e5-d703-451f-a7b7-6c181b6f341e" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.28928.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.12.0.0" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Content-Length": [ + "547" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-request-id": [ + "59de6b34-8b25-4720-933c-503a47b487ae" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Set-Cookie": [ + "x-ms-gateway-slice=Production; path=/; SameSite=None; secure; HttpOnly" + ], + "x-ms-ratelimit-remaining-subscription-writes": [ + "1199" + ], + "x-ms-correlation-request-id": [ + "496febc6-c217-47ef-b246-408671fd16f6" + ], + "x-ms-routing-request-id": [ + "WESTUS:20200709T230031Z:496febc6-c217-47ef-b246-408671fd16f6" + ], + "Date": [ + "Thu, 09 Jul 2020 23:00:31 GMT" + ], + "Content-Length": [ + "1050" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"properties\": {\r\n \"roleDefinitionId\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"principalId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"principalType\": \"User\",\r\n \"scope\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg\",\r\n \"condition\": \"@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container'\",\r\n \"conditionVersion\": \"1.0\",\r\n \"createdOn\": \"2020-07-09T23:00:30.2997885Z\",\r\n \"updatedOn\": \"2020-07-09T23:00:30.2997885Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"canDelegate\": false,\r\n \"delegatedManagedIdentityResourceId\": null,\r\n \"description\": \"This test should not fail\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments/734de5f5-c680-41c0-8beb-67b98c3539d1\",\r\n \"type\": \"Microsoft.Authorization/roleAssignments\",\r\n \"name\": \"734de5f5-c680-41c0-8beb-67b98c3539d1\"\r\n}", + "StatusCode": 201 + }, + { + "RequestUri": "//subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7?api-version=2018-01-01-preview", + "EncodedRequestUri": "Ly9zdWJzY3JpcHRpb25zLzQwMDRhOWZkLWQ1OGUtNDhkYy1hZWIyLTRhNGFlYzU4NjA2Zi9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcm9sZURlZmluaXRpb25zL2FjZGQ3MmE3LTMzODUtNDhlZi1iZDQyLWY2MDZmYmE4MWFlNz9hcGktdmVyc2lvbj0yMDE4LTAxLTAxLXByZXZpZXc=", + "RequestMethod": "GET", + "RequestBody": "", + "RequestHeaders": { + "x-ms-client-request-id": [ + "f847702a-2031-49fe-a8d4-b72b04a96481" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.28928.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.12.0.0" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-request-id": [ + "7ac679cc-da8f-4b12-afa1-3e589d6d8719" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Set-Cookie": [ + "x-ms-gateway-slice=Production; path=/; secure; HttpOnly; SameSite=None" + ], + "x-ms-ratelimit-remaining-subscription-reads": [ + "11999" + ], + "x-ms-correlation-request-id": [ + "b26cbe8c-da0c-4a36-8792-a2d3c3028bc1" + ], + "x-ms-routing-request-id": [ + "WESTUS:20200709T230031Z:b26cbe8c-da0c-4a36-8792-a2d3c3028bc1" + ], + "Date": [ + "Thu, 09 Jul 2020 23:00:31 GMT" + ], + "Content-Length": [ + "603" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"properties\": {\r\n \"roleName\": \"Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you view everything, but not make any changes.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:35.7424745Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"acdd72a7-3385-48ef-bd42-f606fba81ae7\"\r\n}", + "StatusCode": 200 + }, + { + "RequestUri": "/395544B0-BF41-429D-921F-E1CA2252FCF4/getObjectsByObjectIds?api-version=1.6", + "EncodedRequestUri": "LzEyNzNhZGVmLTAwYTMtNDA4Ni1hNTFhLWRiY2NlMTg1N2QzNi9nZXRPYmplY3RzQnlPYmplY3RJZHM/YXBpLXZlcnNpb249MS42", + "RequestMethod": "POST", + "RequestBody": "{\r\n \"objectIds\": [\r\n \"01072e9b-c4a1-4246-a756-031b529bbf66\"\r\n ],\r\n \"includeDirectoryObjectReferences\": true\r\n}", + "RequestHeaders": { + "x-ms-client-request-id": [ + "26494229-be6d-4932-bccb-f3f2549af2fe" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.28928.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Graph.RBAC.GraphRbacManagementClient/3.5.0.0" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Content-Length": [ + "116" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "ocp-aad-diagnostics-server-name": [ + "a9mmah5e/Em6iyx6j5zM82NNZhbYYB8EG3Lr9YKbAhU=" + ], + "request-id": [ + "4fb4daf1-df73-4fd5-ac12-4ceb8ce9b2d3" + ], + "client-request-id": [ + "26494229-be6d-4932-bccb-f3f2549af2fe" + ], + "x-ms-dirapi-data-contract-version": [ + "1.6" + ], + "ocp-aad-session-key": [ + "p63jtIjENpcyijIiOIxNCP1yPg2snfkMpbJW0UQ_i4zOrUpJrywLKZr0FkjlHGkeU6yH-z1e19j-kJr-05qAUNaWch3Z5RxLYEC-YPL-Sy6MNy5vcPch0VBBtskaMGL4.5b-I7qbld4WHI9HmC-mo66Q0Zt4LE0HpjMgeZITbXHY" + ], + "x-aad-resource-unit": [ + "3" + ], + "DataServiceVersion": [ + "3.0;" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Access-Control-Allow-Origin": [ + "*" + ], + "X-AspNet-Version": [ + "4.0.30319" + ], + "X-Powered-By": [ + "ASP.NET" + ], + "Duration": [ + "727329" + ], + "Date": [ + "Thu, 09 Jul 2020 23:00:30 GMT" + ], + "Content-Type": [ + "application/json; odata=minimalmetadata; streaming=true; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Content-Length": [ + "1511" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"odata.metadata\": \"https://graph.windows.net/1273adef-00a3-4086-a51a-dbcce1857d36/$metadata#directoryObjects\",\r\n \"value\": [\r\n {\r\n \"odata.type\": \"Microsoft.DirectoryServices.User\",\r\n \"objectType\": \"User\",\r\n \"objectId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"deletionTimestamp\": null,\r\n \"accountEnabled\": true,\r\n \"ageGroup\": null,\r\n \"assignedLicenses\": [],\r\n \"assignedPlans\": [],\r\n \"city\": null,\r\n \"companyName\": null,\r\n \"consentProvidedForMinor\": null,\r\n \"country\": null,\r\n \"createdDateTime\": \"2020-07-06T23:49:47Z\",\r\n \"creationType\": null,\r\n \"department\": null,\r\n \"dirSyncEnabled\": null,\r\n \"displayName\": \"ddd\",\r\n \"employeeId\": null,\r\n \"facsimileTelephoneNumber\": null,\r\n \"givenName\": null,\r\n \"immutableId\": null,\r\n \"isCompromised\": null,\r\n \"jobTitle\": null,\r\n \"lastDirSyncTime\": null,\r\n \"legalAgeGroupClassification\": null,\r\n \"mail\": null,\r\n \"mailNickname\": \"dagoroz-bug-repro\",\r\n \"mobile\": null,\r\n \"onPremisesDistinguishedName\": null,\r\n \"onPremisesSecurityIdentifier\": null,\r\n \"otherMails\": [],\r\n \"passwordPolicies\": null,\r\n \"passwordProfile\": {\r\n \"password\": null,\r\n \"forceChangePasswordNextLogin\": true,\r\n \"enforceChangePasswordPolicy\": false\r\n },\r\n \"physicalDeliveryOfficeName\": null,\r\n \"postalCode\": null,\r\n \"preferredLanguage\": null,\r\n \"provisionedPlans\": [],\r\n \"provisioningErrors\": [],\r\n \"proxyAddresses\": [],\r\n \"refreshTokensValidFromDateTime\": \"2020-07-06T23:49:47Z\",\r\n \"showInAddressList\": null,\r\n \"signInNames\": [],\r\n \"sipProxyAddress\": null,\r\n \"state\": null,\r\n \"streetAddress\": null,\r\n \"surname\": null,\r\n \"telephoneNumber\": null,\r\n \"usageLocation\": null,\r\n \"userIdentities\": [],\r\n \"userPrincipalName\": \"dagoroz-bug-repro@rbacclitest.onmicrosoft.com\",\r\n \"userState\": null,\r\n \"userStateChangedOn\": null,\r\n \"userType\": \"Member\"\r\n }\r\n ]\r\n}", + "StatusCode": 200 + }, + { + "RequestUri": "/395544B0-BF41-429D-921F-E1CA2252FCF4/getObjectsByObjectIds?api-version=1.6", + "EncodedRequestUri": "LzEyNzNhZGVmLTAwYTMtNDA4Ni1hNTFhLWRiY2NlMTg1N2QzNi9nZXRPYmplY3RzQnlPYmplY3RJZHM/YXBpLXZlcnNpb249MS42", + "RequestMethod": "POST", + "RequestBody": "{\r\n \"objectIds\": [\r\n \"01072e9b-c4a1-4246-a756-031b529bbf66\"\r\n ],\r\n \"includeDirectoryObjectReferences\": true\r\n}", + "RequestHeaders": { + "x-ms-client-request-id": [ + "e5e4c510-a698-4f60-8cca-9a285e7bc731" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.28928.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Graph.RBAC.GraphRbacManagementClient/3.5.0.0" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Content-Length": [ + "116" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "ocp-aad-diagnostics-server-name": [ + "Jyamh40I/riKJflXwk3LHmaI3Lsq6osSe+/rd7Qerq0=" + ], + "request-id": [ + "317d9513-fb17-4e28-bdf8-67dd13306c22" + ], + "client-request-id": [ + "e5e4c510-a698-4f60-8cca-9a285e7bc731" + ], + "x-ms-dirapi-data-contract-version": [ + "1.6" + ], + "ocp-aad-session-key": [ + "lN2aNUDadUPUeAODLRUiL7a8_Owj3OwGEKFMQNaWy9OUEUJdTuKJV2gR2JqWzrS6PifMCCg8ZQ8Iqkl9KYoLTEyGtMpO-G2DgluTp--hl-LTO6uZKqq1mo0_76T_kNCk.fGJ-MXwJop6Flnh-LJbk6Z9H_EvZZCuN7WtM0p7bVuc" + ], + "x-aad-resource-unit": [ + "3" + ], + "DataServiceVersion": [ + "3.0;" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Access-Control-Allow-Origin": [ + "*" + ], + "X-AspNet-Version": [ + "4.0.30319" + ], + "X-Powered-By": [ + "ASP.NET" + ], + "Duration": [ + "740529" + ], + "Date": [ + "Thu, 09 Jul 2020 23:00:31 GMT" + ], + "Content-Type": [ + "application/json; odata=minimalmetadata; streaming=true; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Content-Length": [ + "1511" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"odata.metadata\": \"https://graph.windows.net/1273adef-00a3-4086-a51a-dbcce1857d36/$metadata#directoryObjects\",\r\n \"value\": [\r\n {\r\n \"odata.type\": \"Microsoft.DirectoryServices.User\",\r\n \"objectType\": \"User\",\r\n \"objectId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"deletionTimestamp\": null,\r\n \"accountEnabled\": true,\r\n \"ageGroup\": null,\r\n \"assignedLicenses\": [],\r\n \"assignedPlans\": [],\r\n \"city\": null,\r\n \"companyName\": null,\r\n \"consentProvidedForMinor\": null,\r\n \"country\": null,\r\n \"createdDateTime\": \"2020-07-06T23:49:47Z\",\r\n \"creationType\": null,\r\n \"department\": null,\r\n \"dirSyncEnabled\": null,\r\n \"displayName\": \"ddd\",\r\n \"employeeId\": null,\r\n \"facsimileTelephoneNumber\": null,\r\n \"givenName\": null,\r\n \"immutableId\": null,\r\n \"isCompromised\": null,\r\n \"jobTitle\": null,\r\n \"lastDirSyncTime\": null,\r\n \"legalAgeGroupClassification\": null,\r\n \"mail\": null,\r\n \"mailNickname\": \"dagoroz-bug-repro\",\r\n \"mobile\": null,\r\n \"onPremisesDistinguishedName\": null,\r\n \"onPremisesSecurityIdentifier\": null,\r\n \"otherMails\": [],\r\n \"passwordPolicies\": null,\r\n \"passwordProfile\": {\r\n \"password\": null,\r\n \"forceChangePasswordNextLogin\": true,\r\n \"enforceChangePasswordPolicy\": false\r\n },\r\n \"physicalDeliveryOfficeName\": null,\r\n \"postalCode\": null,\r\n \"preferredLanguage\": null,\r\n \"provisionedPlans\": [],\r\n \"provisioningErrors\": [],\r\n \"proxyAddresses\": [],\r\n \"refreshTokensValidFromDateTime\": \"2020-07-06T23:49:47Z\",\r\n \"showInAddressList\": null,\r\n \"signInNames\": [],\r\n \"sipProxyAddress\": null,\r\n \"state\": null,\r\n \"streetAddress\": null,\r\n \"surname\": null,\r\n \"telephoneNumber\": null,\r\n \"usageLocation\": null,\r\n \"userIdentities\": [],\r\n \"userPrincipalName\": \"dagoroz-bug-repro@rbacclitest.onmicrosoft.com\",\r\n \"userState\": null,\r\n \"userStateChangedOn\": null,\r\n \"userType\": \"Member\"\r\n }\r\n ]\r\n}", + "StatusCode": 200 + }, + { + "RequestUri": "//subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments?$filter=principalId%20eq%20'01072e9b-c4a1-4246-a756-031b529bbf66'&api-version=2020-04-01-preview", + "EncodedRequestUri": "Ly9zdWJzY3JpcHRpb25zLzQwMDRhOWZkLWQ1OGUtNDhkYy1hZWIyLTRhNGFlYzU4NjA2Zi9yZXNvdXJjZUdyb3Vwcy9kYW9yb3pjb19idWdfcmVwcm8vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3JvbGVBc3NpZ25tZW50cz8kZmlsdGVyPXByaW5jaXBhbElkJTIwZXElMjAnZTk1ZmE2MDgtM2Q0OS00NDM4LTlmNjAtMzVkODVkODRjYTE2JyZhcGktdmVyc2lvbj0yMDIwLTA0LTAxLXByZXZpZXc=", + "RequestMethod": "GET", + "RequestBody": "", + "RequestHeaders": { + "x-ms-client-request-id": [ + "10c67b81-ce54-4aa9-937e-5aa1d7667498" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.28928.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.12.0.0" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-request-id": [ + "e7a30428-c47d-4eb2-9ab7-85e93cfafa29" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Set-Cookie": [ + "x-ms-gateway-slice=Production; path=/; SameSite=None; secure; HttpOnly" + ], + "x-ms-ratelimit-remaining-subscription-reads": [ + "11999" + ], + "x-ms-correlation-request-id": [ + "12c38987-af64-4eef-ad9c-a2ad32108370" + ], + "x-ms-routing-request-id": [ + "WESTUS:20200709T230031Z:12c38987-af64-4eef-ad9c-a2ad32108370" + ], + "Date": [ + "Thu, 09 Jul 2020 23:00:31 GMT" + ], + "Content-Length": [ + "1096" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"properties\": {\r\n \"roleDefinitionId\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"principalId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"principalType\": \"User\",\r\n \"scope\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg\",\r\n \"condition\": \"@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container'\",\r\n \"conditionVersion\": \"1.0\",\r\n \"createdOn\": \"2020-07-09T23:00:30.4997866Z\",\r\n \"updatedOn\": \"2020-07-09T23:00:30.4997866Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"canDelegate\": false,\r\n \"delegatedManagedIdentityResourceId\": null,\r\n \"description\": \"This test should not fail\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments/734de5f5-c680-41c0-8beb-67b98c3539d1\",\r\n \"type\": \"Microsoft.Authorization/roleAssignments\",\r\n \"name\": \"734de5f5-c680-41c0-8beb-67b98c3539d1\"\r\n }\r\n ]\r\n}", + "StatusCode": 200 + }, + { + "RequestUri": "//subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleDefinitions?api-version=2018-01-01-preview", + "EncodedRequestUri": "Ly9zdWJzY3JpcHRpb25zLzQwMDRhOWZkLWQ1OGUtNDhkYy1hZWIyLTRhNGFlYzU4NjA2Zi9yZXNvdXJjZUdyb3Vwcy9kYW9yb3pjb19idWdfcmVwcm8vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3JvbGVEZWZpbml0aW9ucz9hcGktdmVyc2lvbj0yMDE4LTAxLTAxLXByZXZpZXc=", + "RequestMethod": "GET", + "RequestBody": "", + "RequestHeaders": { + "x-ms-client-request-id": [ + "8d5e5db6-cc81-40cc-ac01-3bc0118d9183" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.28928.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.12.0.0" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-request-id": [ + "05b9fd3a-b8a6-4504-8a3e-094a6b7938e3" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Set-Cookie": [ + "x-ms-gateway-slice=Production; path=/; secure; HttpOnly; SameSite=None" + ], + "x-ms-ratelimit-remaining-subscription-reads": [ + "11998" + ], + "x-ms-correlation-request-id": [ + "2888c327-01b4-4741-9331-de67276b428b" + ], + "x-ms-routing-request-id": [ + "WESTUS:20200709T230032Z:2888c327-01b4-4741-9331-de67276b428b" + ], + "Date": [ + "Thu, 09 Jul 2020 23:00:31 GMT" + ], + "Content-Length": [ + "244004" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Custom Reader Test Properties\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Read, monitor and restart virtual machines\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Authorization/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.ClassicCompute/virtualMachines/restart/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-13T18:17:20.8584392Z\",\r\n \"updatedOn\": \"2018-03-13T18:18:37.0952708Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/171d2453-29dc-42b4-84fc-3fd259eeaec3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"171d2453-29dc-42b4-84fc-3fd259eeaec3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"OnCommand Cloud Manager Operator\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"OnCommand Cloud Manager Permissions\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Compute/disks/delete\",\r\n \"Microsoft.Compute/disks/read\",\r\n \"Microsoft.Compute/disks/write\",\r\n \"Microsoft.Compute/locations/operations/read\",\r\n \"Microsoft.Compute/locations/vmSizes/read\",\r\n \"Microsoft.Compute/operations/read\",\r\n \"Microsoft.Compute/virtualMachines/instanceView/read\",\r\n \"Microsoft.Compute/virtualMachines/powerOff/action\",\r\n \"Microsoft.Compute/virtualMachines/read\",\r\n \"Microsoft.Compute/virtualMachines/restart/action\",\r\n \"Microsoft.Compute/virtualMachines/start/action\",\r\n \"Microsoft.Compute/virtualMachines/deallocate/action\",\r\n \"Microsoft.Compute/virtualMachines/vmSizes/read\",\r\n \"Microsoft.Compute/virtualMachines/write\",\r\n \"Microsoft.Network/locations/operationResults/read\",\r\n \"Microsoft.Network/locations/operations/read\",\r\n \"Microsoft.Network/networkInterfaces/read\",\r\n \"Microsoft.Network/networkInterfaces/write\",\r\n \"Microsoft.Network/networkInterfaces/join/action\",\r\n \"Microsoft.Network/networkSecurityGroups/read\",\r\n \"Microsoft.Network/networkSecurityGroups/write\",\r\n \"Microsoft.Network/networkSecurityGroups/join/action\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/virtualNetworks/checkIpAddressAvailability/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/virtualMachines/read\",\r\n \"Microsoft.Network/virtualNetworks/virtualMachines/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/join/action\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Resources/deployments/read\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/resources/read\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/delete\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/subscriptions/resourcegroups/resources/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/write\",\r\n \"Microsoft.Storage/checknameavailability/read\",\r\n \"Microsoft.Storage/operations/read\",\r\n \"Microsoft.Storage/storageAccounts/listkeys/action\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.Storage/storageAccounts/regeneratekey/action\",\r\n \"Microsoft.Storage/storageAccounts/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-03-29T21:56:07.9054892Z\",\r\n \"updatedOn\": \"2017-03-29T21:56:07.9054892Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/9acd117c-1527-4461-ab19-031c2329aa9b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"9acd117c-1527-4461-ab19-031c2329aa9b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Support Custom Role\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Support Custom Role\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-02-02T02:17:43.627696Z\",\r\n \"updatedOn\": \"2017-04-20T22:55:02.9860347Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/ee2d57e0-fda3-436d-8174-f3c9684efb46\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ee2d57e0-fda3-436d-8174-f3c9684efb46\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Test Administrator\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test Role to manage Azure environment\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ADHybridHealthService/configuration/read\",\r\n \"Microsoft.ADHybridHealthService/services/read\",\r\n \"Microsoft.ADHybridHealthService/services/servicemembers/read\",\r\n \"Microsoft.ADHybridHealthService/services/servicemembers/alerts/read\",\r\n \"Microsoft.ADHybridHealthService/services/alerts/read\",\r\n \"Microsoft.Advisor/register/action\",\r\n \"Microsoft.Advisor/recommendations/read\",\r\n \"Microsoft.Authorization/classicAdministrators/read\",\r\n \"Microsoft.Authorization/locks/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-25T23:19:00.1735084Z\",\r\n \"updatedOn\": \"2017-05-25T23:19:00.1735084Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/239cd0e7-5e27-4872-a1d0-0ff3c4cec6b6\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"239cd0e7-5e27-4872-a1d0-0ff3c4cec6b6\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Test Administrator for testing\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test Role to manage Azure environment\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/roleAssignments/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-10-31T23:40:34.3971201Z\",\r\n \"updatedOn\": \"2017-10-31T23:40:34.3971201Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/7db62a6c-edd9-42bb-b30e-31fc063ce154\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7db62a6c-edd9-42bb-b30e-31fc063ce154\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Test definiton\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Can monitor compute, network and storage, and restart virtual machines\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/ResourceGroups/rbacproda\",\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/ResourceGroups\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-06-30T20:29:54.258388Z\",\r\n \"updatedOn\": \"2017-06-30T20:29:54.258388Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/574857fa-2e5b-4029-ada2-7d042637cbfb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"574857fa-2e5b-4029-ada2-7d042637cbfb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Test RD\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test RDDD\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Compute/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-04-17T18:39:35.636177Z\",\r\n \"updatedOn\": \"2018-04-17T18:39:35.636177Z\",\r\n \"createdBy\": \"76102c29-afb3-4704-a4b7-683bd5b14934\",\r\n \"updatedBy\": \"76102c29-afb3-4704-a4b7-683bd5b14934\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/98b036c8-8bf1-4f4a-8f50-a0a6dde0e734\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"98b036c8-8bf1-4f4a-8f50-a0a6dde0e734\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"test role and another testrole\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test role\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-22T23:58:52.7462995Z\",\r\n \"updatedOn\": \"2018-04-11T20:49:59.3331071Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/a997608d-3f63-4eeb-b01b-1b3ae270cd6d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a997608d-3f63-4eeb-b01b-1b3ae270cd6d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Test definiton2\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Can monitor compute, network and storage, and restart virtual machines\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/ResourceGroups/rbacproda\",\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/ResourceGroups\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-06-30T20:32:19.4246182Z\",\r\n \"updatedOn\": \"2017-06-30T20:32:19.4246182Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/0b98a570-beae-486e-aa44-7cb035aa126d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0b98a570-beae-486e-aa44-7cb035aa126d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testrole132\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Custom Role Test Desc\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-05-30T23:13:47.7513317Z\",\r\n \"updatedOn\": \"2018-05-30T23:13:47.7513317Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/3e66a0a6-a18a-4afc-a5cc-ec19e06012ae\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3e66a0a6-a18a-4afc-a5cc-ec19e06012ae\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testrole-novm\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets Fuse Developers access select objects they need.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Resources/subscriptions/resourceGroups/*/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/*/read\",\r\n \"Microsoft.Storage/storageAccounts/*/read\",\r\n \"Microsoft.Web/sites/*/read\",\r\n \"Microsoft.ServiceBus/namespaces/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/*/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-09-20T00:19:06.4239042Z\",\r\n \"updatedOn\": \"2018-09-20T00:19:06.4239042Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/ef4af617-2f0e-412b-b30a-b7c848aa9098\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ef4af617-2f0e-412b-b30a-b7c848aa9098\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"TestRole_1c581fde-9c61-41fe-b0fa-9f113f09280d\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Custom Role Test Desc\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/rbactest\",\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-03-11T00:43:21.0606467Z\",\r\n \"updatedOn\": \"2017-04-21T18:07:28.8010892Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/41c81219-e0b7-4d81-96db-5ac27ff234be\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"41c81219-e0b7-4d81-96db-5ac27ff234be\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"TestRole_6d13263a-d237-4d4d-9227-a9e055757887\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Custom Role Test Desc\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-06-29T23:20:59.9048046Z\",\r\n \"updatedOn\": \"2017-06-29T23:20:59.9048046Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/7749b7c9-67a5-4d9c-9e58-58c811859c1a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7749b7c9-67a5-4d9c-9e58-58c811859c1a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"TestContributor\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you manage everything except access to resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/*/Delete\",\r\n \"Microsoft.Authorization/*/Write\",\r\n \"Microsoft.Authorization/elevateAccess/Action\",\r\n \"Microsoft.Blueprint/blueprintAssignments/write\",\r\n \"Microsoft.Blueprint/blueprintAssignments/delete\",\r\n \"Microsoft.Storage/storageAccounts/write\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-03-06T00:36:20.4923118Z\",\r\n \"updatedOn\": \"2019-04-10T19:14:27.67508Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/c24988ac-6180-42a0-ab88-20f7382dd24c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CustomRole Tests Role\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test role\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-21T18:24:29.0508834Z\",\r\n \"updatedOn\": \"2019-08-21T18:32:39.5641976Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8d7dd69e-9ae2-44a1-94d8-f7bc8e12645e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8d7dd69e-9ae2-44a1-94d8-f7bc8e12645e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testbatchcontributor\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Batch/batchAccounts/read\",\r\n \"Microsoft.Batch/batchAccounts/*/read\",\r\n \"Microsoft.Batch/batchAccounts/applications/*\",\r\n \"Microsoft.Batch/batchAccounts/listkeys/action\",\r\n \"Microsoft.Batch/batchAccounts/pools/write\",\r\n \"Microsoft.Batch/batchAccounts/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-09-10T16:44:02.3947885Z\",\r\n \"updatedOn\": \"2019-09-10T16:44:02.3947885Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/e2ab292b-812a-4306-9c73-df992f61649b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e2ab292b-812a-4306-9c73-df992f61649b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"No RD WRITE\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you manage everything, including access to resources.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/roleDefinitions/write\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-01-28T00:57:45.1574464Z\",\r\n \"updatedOn\": \"2020-01-28T00:57:45.1574464Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/d8bae860-743b-407c-8cf0-3aa1cbb8788c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"d8bae860-743b-407c-8cf0-3aa1cbb8788c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"No RD READ\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you manage everything, including access to resources.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/roleDefinitions/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-01-29T00:27:29.0693475Z\",\r\n \"updatedOn\": \"2020-01-29T00:27:29.0693475Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/724dd060-7e51-4f7b-a749-cd927f345b68\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"724dd060-7e51-4f7b-a749-cd927f345b68\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"asd\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Synapse/register/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-19T20:09:21.8617073Z\",\r\n \"updatedOn\": \"2020-02-19T20:09:21.8617073Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/254d9483-0229-40a3-a457-f6cbb5449be6\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"254d9483-0229-40a3-a457-f6cbb5449be6\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"teste\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"setesrt\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"microsoft.operationalinsights/register/action\",\r\n \"microsoft.operationalinsights/unregister/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-27T01:22:58.9649766Z\",\r\n \"updatedOn\": \"2020-02-27T01:22:58.9649766Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/7da825e5-3464-48e4-8646-fab69f7de46c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7da825e5-3464-48e4-8646-fab69f7de46c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"asda\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"asdasd\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Synapse/checkNameAvailability/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-27T19:33:25.1899025Z\",\r\n \"updatedOn\": \"2020-02-27T19:33:25.1899025Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/7cab0ec5-99cb-466f-937e-26806c98f0fb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7cab0ec5-99cb-466f-937e-26806c98f0fb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CloneIt\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-17T03:08:21.1526749Z\",\r\n \"updatedOn\": \"2020-03-17T03:08:21.1526749Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/acfb9fda-b179-4290-8d82-609ddb722ca0\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"acfb9fda-b179-4290-8d82-609ddb722ca0\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"RyanTestMG\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you view everything, but not make any changes.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\",\r\n \"/providers/Microsoft.Management/managementGroups/thisdoesntexist\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-18T23:23:29.8420866Z\",\r\n \"updatedOn\": \"2020-03-18T23:23:29.8420866Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/f5fde758-46cb-4388-8e2d-5dfb6f9c5e26\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f5fde758-46cb-4388-8e2d-5dfb6f9c5e26\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"27MarchCR Clone\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [\r\n \"Microsoft.ClassicCompute/virtualMachines/capture/action\",\r\n \"Microsoft.ClassicCompute/virtualMachines/start/action\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-27T03:30:41.2204287Z\",\r\n \"updatedOn\": \"2020-05-25T03:59:50.7212707Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/688cffa8-c3ad-434d-95bf-4feef208c51f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"688cffa8-c3ad-434d-95bf-4feef208c51f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"dfg\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"84codes.CloudAMQP/updateCommunicationPreference/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-04-15T17:01:23.582234Z\",\r\n \"updatedOn\": \"2020-04-15T17:01:23.582234Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/666436ac-d087-4028-8caa-3d56838acc54\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"666436ac-d087-4028-8caa-3d56838acc54\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testest\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"84codes.CloudAMQP/updateCommunicationPreference/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-04-15T17:28:05.771688Z\",\r\n \"updatedOn\": \"2020-04-15T17:28:05.771688Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/778f1528-7abc-42be-a89f-d72860782919\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"778f1528-7abc-42be-a89f-d72860782919\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testewasdasd\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"84codes.CloudAMQP/updateCommunicationPreference/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-04-16T19:16:54.3681577Z\",\r\n \"updatedOn\": \"2020-04-16T19:16:54.3681577Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/351dc63d-3eec-4697-bf6b-ebeb52629640\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"351dc63d-3eec-4697-bf6b-ebeb52629640\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"asdsad\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Synapse/checkNameAvailability/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-04-23T15:27:01.6742334Z\",\r\n \"updatedOn\": \"2020-04-23T15:27:01.6742334Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/2b516d2c-4b58-45d7-8c2b-55f2e936d21a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"2b516d2c-4b58-45d7-8c2b-55f2e936d21a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testrole1234\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T09:19:08.0056403Z\",\r\n \"updatedOn\": \"2020-06-09T09:19:08.0056403Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/f1ae5ae6-80f8-4b6a-9962-96e885ed2fdf\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f1ae5ae6-80f8-4b6a-9962-96e885ed2fdf\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customreader\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T21:33:19.2160171Z\",\r\n \"updatedOn\": \"2020-06-09T21:33:19.2160171Z\",\r\n \"createdBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\",\r\n \"updatedBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/e9bfc956-b9d6-4931-8df6-d8e759dfb7bd\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e9bfc956-b9d6-4931-8df6-d8e759dfb7bd\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customabc\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T21:37:45.502473Z\",\r\n \"updatedOn\": \"2020-06-09T21:37:45.502473Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/1d3c667d-d849-4444-a61e-910a34a5fbc3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"1d3c667d-d849-4444-a61e-910a34a5fbc3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customroletest123\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:01:04.3209554Z\",\r\n \"updatedOn\": \"2020-06-09T22:01:04.3209554Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/0a301507-673a-47b2-a629-7fa8ca72af3f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0a301507-673a-47b2-a629-7fa8ca72af3f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customroleabc\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:09:16.2626975Z\",\r\n \"updatedOn\": \"2020-06-09T22:09:16.2626975Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/bc1ff923-7253-46cd-9120-6ad03ef2d6e6\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"bc1ff923-7253-46cd-9120-6ad03ef2d6e6\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customreader123\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:12:24.0862728Z\",\r\n \"updatedOn\": \"2020-06-09T22:12:24.0862728Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8700af82-f42f-4393-a5f2-eee83964a9aa\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8700af82-f42f-4393-a5f2-eee83964a9aa\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"test123abc\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:14:57.6218091Z\",\r\n \"updatedOn\": \"2020-06-09T22:14:57.6218091Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/eef4fe94-b510-4514-8669-0548903f3495\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"eef4fe94-b510-4514-8669-0548903f3495\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customroleabc123\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:37:36.1262398Z\",\r\n \"updatedOn\": \"2020-06-09T22:37:36.1262398Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/fd01a54f-fd90-46ec-b525-a636a28df51f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fd01a54f-fd90-46ec-b525-a636a28df51f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testcustomroleabc\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:42:30.4994673Z\",\r\n \"updatedOn\": \"2020-06-09T22:42:30.4994673Z\",\r\n \"createdBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\",\r\n \"updatedBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/fecfef36-f4fc-4e4b-93ff-7db5732a444d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fecfef36-f4fc-4e4b-93ff-7db5732a444d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"zzcustomrolezz\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:52:41.6786191Z\",\r\n \"updatedOn\": \"2020-06-09T22:52:41.6786191Z\",\r\n \"createdBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\",\r\n \"updatedBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/dc307f0a-46a2-4260-bbca-66b3a4448a8d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"dc307f0a-46a2-4260-bbca-66b3a4448a8d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testCustomRole\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:55:26.5124865Z\",\r\n \"updatedOn\": \"2020-06-09T22:55:26.5124865Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b768931c-5d00-4572-a731-431c6189f0da\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b768931c-5d00-4572-a731-431c6189f0da\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"bbCustomRole\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T23:42:41.0368856Z\",\r\n \"updatedOn\": \"2020-06-09T23:42:41.0368856Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/ae101df6-14ae-4d66-bbe0-a469a964f90f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ae101df6-14ae-4d66-bbe0-a469a964f90f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"zzCustomRole\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T23:55:14.2992167Z\",\r\n \"updatedOn\": \"2020-06-09T23:55:14.2992167Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/bec73b96-f2cf-436c-8917-d547da43a149\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"bec73b96-f2cf-436c-8917-d547da43a149\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customrole123\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-10T01:13:23.0150344Z\",\r\n \"updatedOn\": \"2020-06-10T01:13:23.0150344Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/32d6d31d-e61a-41ec-8386-5dc64b3bc204\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"32d6d31d-e61a-41ec-8386-5dc64b3bc204\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"No RA READ\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you manage everything, including access to resources.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/roleAssignments/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-17T06:31:33.3927723Z\",\r\n \"updatedOn\": \"2020-06-17T06:31:33.3927723Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/6f2b4c36-69f1-4a45-8cda-7d5a9b690408\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"6f2b4c36-69f1-4a45-8cda-7d5a9b690408\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"No RA WRITE\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you manage everything, including access to resources.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/roleAssignments/write\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-17T06:41:55.5369299Z\",\r\n \"updatedOn\": \"2020-06-17T06:41:55.5369299Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/a43bed91-a7af-418a-8f07-e135d151b5b8\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a43bed91-a7af-418a-8f07-e135d151b5b8\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Another tests role\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test role\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986\",\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/ResourceGroups/rbactest\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-01T23:09:24.5638411Z\",\r\n \"updatedOn\": \"2020-07-01T23:09:24.5638411Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/0a0e83bc-50b9-4c4d-b2c2-3f41e1a8baf2\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0a0e83bc-50b9-4c4d-b2c2-3f41e1a8baf2\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Daoroz-Custom1\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"A role to use when testing various things\\nIt does not grant any real permissions, just the ability to read role definitions\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/roleDefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-08T17:44:15.2525393Z\",\r\n \"updatedOn\": \"2020-07-08T17:44:15.2525393Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/0353ee0a-19ae-4380-ba3d-d54767c75d5b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0353ee0a-19ae-4380-ba3d-d54767c75d5b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Daoroz-Custom2\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"A role to be used when testing various things\\nIt does not grant any real permissions, just the ability to read role definitions\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/roleDefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-08T17:51:15.4187811Z\",\r\n \"updatedOn\": \"2020-07-08T17:51:15.4187811Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/98ee936c-393c-4f03-81a8-6eccfd82d96e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"98ee936c-393c-4f03-81a8-6eccfd82d96e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Custom Reader Role at MG Root\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Custom Role at MG Root\",\r\n \"assignableScopes\": [\r\n \"/providers/Microsoft.Management/managementGroups/1273adef-00a3-4086-a51a-dbcce1857d36\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-07-24T19:26:02.777463Z\",\r\n \"updatedOn\": \"2019-07-24T19:26:02.777463Z\",\r\n \"createdBy\": \"cdab7ada-d740-47da-a823-ec29c9a68482\",\r\n \"updatedBy\": \"cdab7ada-d740-47da-a823-ec29c9a68482\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/fa3bf1c6-5da9-47c7-976e-1007e1bc385a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fa3bf1c6-5da9-47c7-976e-1007e1bc385a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Custom Role Manish reader\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Custom Role Manish reader\",\r\n \"assignableScopes\": [\r\n \"/providers/Microsoft.Management/managementGroups/1273adef-00a3-4086-a51a-dbcce1857d36\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-07T18:53:42.1390099Z\",\r\n \"updatedOn\": \"2020-05-08T01:15:45.1587505Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"e8df956a-9463-408a-a9be-cf5f46d09b37\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/4edfca53-b078-483f-9d0e-c83e4544e854\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4edfca53-b078-483f-9d0e-c83e4544e854\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrPush\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr push\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/pull/read\",\r\n \"Microsoft.ContainerRegistry/registries/push/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-10-29T17:52:32.5201177Z\",\r\n \"updatedOn\": \"2018-11-13T23:26:19.9749249Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8311e382-0749-4cb8-b61a-304f252e45ec\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8311e382-0749-4cb8-b61a-304f252e45ec\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"API Management Service Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage service and the APIs\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ApiManagement/service/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8650193Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:17.7502607Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/312a565d-c81f-4fd8-895a-4e21e48d571c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"312a565d-c81f-4fd8-895a-4e21e48d571c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrPull\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr pull\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/pull/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-10-22T19:01:56.8227182Z\",\r\n \"updatedOn\": \"2018-11-13T23:22:03.2302457Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/7f951dda-4ed3-4680-a7ca-43fe172d538d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7f951dda-4ed3-4680-a7ca-43fe172d538d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrImageSigner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr image signer\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/sign/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-15T23:23:08.4038322Z\",\r\n \"updatedOn\": \"2018-10-29T19:06:24.9004422Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/6cef56e8-d556-48e5-a04f-b8e64114680f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"6cef56e8-d556-48e5-a04f-b8e64114680f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrDelete\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr delete\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/artifacts/delete\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-03-11T20:19:31.6682804Z\",\r\n \"updatedOn\": \"2019-03-11T20:24:38.9845104Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/c2f4ef07-c644-48eb-af81-4b1b4947fb11\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c2f4ef07-c644-48eb-af81-4b1b4947fb11\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrQuarantineReader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr quarantine data reader\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/quarantine/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-16T00:27:39.9596835Z\",\r\n \"updatedOn\": \"2019-10-22T00:12:39.702093Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/cdda3590-29a3-44f6-95f2-9f980659eb04\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"cdda3590-29a3-44f6-95f2-9f980659eb04\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrQuarantineWriter\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr quarantine data writer\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/quarantine/read\",\r\n \"Microsoft.ContainerRegistry/registries/quarantine/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-16T00:26:37.587182Z\",\r\n \"updatedOn\": \"2019-10-22T00:10:29.8202164Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/c8d4ff99-41c3-41a8-9f60-21dfdad59608\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c8d4ff99-41c3-41a8-9f60-21dfdad59608\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"API Management Service Operator Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage service but not the APIs\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ApiManagement/service/*/read\",\r\n \"Microsoft.ApiManagement/service/backup/action\",\r\n \"Microsoft.ApiManagement/service/delete\",\r\n \"Microsoft.ApiManagement/service/managedeployments/action\",\r\n \"Microsoft.ApiManagement/service/read\",\r\n \"Microsoft.ApiManagement/service/restore/action\",\r\n \"Microsoft.ApiManagement/service/updatecertificate/action\",\r\n \"Microsoft.ApiManagement/service/updatehostname/action\",\r\n \"Microsoft.ApiManagement/service/write\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.ApiManagement/service/users/keys/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-11-09T00:03:42.1194019Z\",\r\n \"updatedOn\": \"2016-11-18T23:56:25.4682649Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/e022efe7-f5ba-4159-bbe4-b44f577e9b61\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e022efe7-f5ba-4159-bbe4-b44f577e9b61\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"API Management Service Reader Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read-only access to service and APIs\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ApiManagement/service/*/read\",\r\n \"Microsoft.ApiManagement/service/read\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.ApiManagement/service/users/keys/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-11-09T00:26:45.1540473Z\",\r\n \"updatedOn\": \"2017-01-23T23:10:34.8876776Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/71522526-b88f-4d52-b57f-d31fc3546d0d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"71522526-b88f-4d52-b57f-d31fc3546d0d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Application Insights Component Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage Application Insights components\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/metricAlerts/*\",\r\n \"Microsoft.Insights/components/*\",\r\n \"Microsoft.Insights/webtests/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2020-02-12T12:45:46.9200472Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/ae349356-3a1b-4a5e-921d-050484c6347e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ae349356-3a1b-4a5e-921d-050484c6347e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Application Insights Snapshot Debugger\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Gives user permission to use Application Insights Snapshot Debugger features\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/components/*/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-19T21:25:12.3728747Z\",\r\n \"updatedOn\": \"2017-04-19T23:34:59.9511581Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/08954f03-6346-4c2e-81c0-ec3a5cfae23b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"08954f03-6346-4c2e-81c0-ec3a5cfae23b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Attestation Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read the attestation provider properties\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Attestation/attestationProviders/attestation/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-03-25T19:42:59.157671Z\",\r\n \"updatedOn\": \"2019-05-10T17:52:38.9036953Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": \"SYSTEM\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/fd1bd22b-8476-40bc-a0bc-69b95687b9f3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fd1bd22b-8476-40bc-a0bc-69b95687b9f3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Automation Job Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Create and Manage Jobs using Automation Runbooks.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Automation/automationAccounts/hybridRunbookWorkerGroups/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/resume/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/stop/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/streams/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/suspend/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/write\",\r\n \"Microsoft.Automation/automationAccounts/jobs/output/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-19T20:52:41.0020018Z\",\r\n \"updatedOn\": \"2018-08-14T22:08:48.1147327Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/4fe576fe-1146-4730-92eb-48519fa6bf9f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4fe576fe-1146-4730-92eb-48519fa6bf9f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Automation Runbook Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read Runbook properties - to be able to create Jobs of the runbook.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Automation/automationAccounts/runbooks/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-19T20:47:49.5640674Z\",\r\n \"updatedOn\": \"2017-04-25T01:00:45.6444999Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5fb5aef8-1081-4b8e-bb16-9d5d0385bab5\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5fb5aef8-1081-4b8e-bb16-9d5d0385bab5\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Automation Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Automation Operators are able to start, stop, suspend, and resume jobs\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Automation/automationAccounts/hybridRunbookWorkerGroups/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/resume/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/stop/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/streams/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/suspend/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/write\",\r\n \"Microsoft.Automation/automationAccounts/jobSchedules/read\",\r\n \"Microsoft.Automation/automationAccounts/jobSchedules/write\",\r\n \"Microsoft.Automation/automationAccounts/linkedWorkspace/read\",\r\n \"Microsoft.Automation/automationAccounts/read\",\r\n \"Microsoft.Automation/automationAccounts/runbooks/read\",\r\n \"Microsoft.Automation/automationAccounts/schedules/read\",\r\n \"Microsoft.Automation/automationAccounts/schedules/write\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Automation/automationAccounts/jobs/output/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-08-18T01:05:03.391613Z\",\r\n \"updatedOn\": \"2018-05-10T20:12:39.69782Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/d3881f73-407a-4167-8283-e981cbba0404\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"d3881f73-407a-4167-8283-e981cbba0404\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Avere Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can create and manage an Avere vFXT cluster.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Compute/*/read\",\r\n \"Microsoft.Compute/availabilitySets/*\",\r\n \"Microsoft.Compute/proximityPlacementGroups/*\",\r\n \"Microsoft.Compute/virtualMachines/*\",\r\n \"Microsoft.Compute/disks/*\",\r\n \"Microsoft.Network/*/read\",\r\n \"Microsoft.Network/networkInterfaces/*\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/join/action\",\r\n \"Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action\",\r\n \"Microsoft.Network/networkSecurityGroups/join/action\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/*/read\",\r\n \"Microsoft.Storage/storageAccounts/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/resources/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-03-18T20:00:58.9207889Z\",\r\n \"updatedOn\": \"2020-05-27T06:48:54.4896867Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/4f8fab4f-1852-4a58-a46a-8eaf358af14a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4f8fab4f-1852-4a58-a46a-8eaf358af14a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Avere Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Used by the Avere vFXT cluster to manage the cluster\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Compute/virtualMachines/read\",\r\n \"Microsoft.Network/networkInterfaces/read\",\r\n \"Microsoft.Network/networkInterfaces/write\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/join/action\",\r\n \"Microsoft.Network/networkSecurityGroups/join/action\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/delete\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-03-18T20:02:38.3399857Z\",\r\n \"updatedOn\": \"2019-03-29T00:26:37.9205875Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/c025889f-8102-4ebf-b32c-fc0c6f0c6bd9\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c025889f-8102-4ebf-b32c-fc0c6f0c6bd9\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service Cluster Admin Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"List cluster admin credential action.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerService/managedClusters/listClusterAdminCredential/action\",\r\n \"Microsoft.ContainerService/managedClusters/accessProfiles/listCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-08-15T21:38:18.5953853Z\",\r\n \"updatedOn\": \"2020-02-07T02:49:24.9715273Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/0ab0b1a8-8aac-4efd-b8c2-3ee1fb270be8\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0ab0b1a8-8aac-4efd-b8c2-3ee1fb270be8\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service Cluster User Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"List cluster user credential action.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerService/managedClusters/listClusterUserCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-08-15T22:04:53.4037241Z\",\r\n \"updatedOn\": \"2020-02-11T23:37:03.589924Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/4abbcc35-e782-43d8-92c5-2d3f1bd2253f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4abbcc35-e782-43d8-92c5-2d3f1bd2253f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Maps Data Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Grants access to read map related data from an Azure maps account.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Maps/accounts/*/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-10-05T19:47:03.472307Z\",\r\n \"updatedOn\": \"2020-04-28T22:33:41.7780319Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/423170ca-a8f6-4b0f-8487-9e4eb8f49bfa\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"423170ca-a8f6-4b0f-8487-9e4eb8f49bfa\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Stack Registration Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Azure Stack registrations.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.AzureStack/edgeSubscriptions/read\",\r\n \"Microsoft.AzureStack/registrations/products/*/action\",\r\n \"Microsoft.AzureStack/registrations/products/read\",\r\n \"Microsoft.AzureStack/registrations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-11-13T23:42:06.2161827Z\",\r\n \"updatedOn\": \"2020-06-29T22:11:17.0759529Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/6f12a6df-dd06-4f3e-bcb1-ce8be600526a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"6f12a6df-dd06-4f3e-bcb1-ce8be600526a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Backup Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage backup service,but can't create vaults and give access to others\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.RecoveryServices/locations/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/refreshContainers/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobs/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobsExport/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperationResults/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectableItems/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectedItems/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionContainers/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupSecurityPIN/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read\",\r\n \"Microsoft.RecoveryServices/Vaults/certificates/*\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/*\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/*\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/*\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupstorageconfig/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupconfig/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupValidateOperation/action\",\r\n \"Microsoft.RecoveryServices/Vaults/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperations/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupEngines/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectableContainers/read\",\r\n \"Microsoft.RecoveryServices/locations/backupStatus/action\",\r\n \"Microsoft.RecoveryServices/locations/backupPreValidateProtection/action\",\r\n \"Microsoft.RecoveryServices/locations/backupValidateFeatures/action\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/write\",\r\n \"Microsoft.RecoveryServices/operations/read\",\r\n \"Microsoft.RecoveryServices/locations/operationStatus/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-01-03T13:12:15.7321344Z\",\r\n \"updatedOn\": \"2019-12-17T10:44:35.8361149Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5e467623-bb1f-42f4-a55d-6e525e11384b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Billing Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows read access to billing data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Billing/*/read\",\r\n \"Microsoft.Commerce/*/read\",\r\n \"Microsoft.Consumption/*/read\",\r\n \"Microsoft.Management/managementGroups/read\",\r\n \"Microsoft.CostManagement/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-25T02:13:38.9054151Z\",\r\n \"updatedOn\": \"2018-09-26T17:45:09.2227236Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/fa23ad8b-c56e-40d8-ac0c-ce449e1d2c64\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fa23ad8b-c56e-40d8-ac0c-ce449e1d2c64\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Backup Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage backup services, except removal of backup, vault creation and giving access to others\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/backup/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationsStatus/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/provisionInstantItemRecovery/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/restore/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/revokeInstantItemRecovery/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/refreshContainers/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobs/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobsExport/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperationResults/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectableItems/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectedItems/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read\",\r\n \"Microsoft.RecoveryServices/Vaults/certificates/write\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/read\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/write\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/*\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/write\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupstorageconfig/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupValidateOperation/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperations/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/operations/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/inquire/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupEngines/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectableContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/items/read\",\r\n \"Microsoft.RecoveryServices/locations/backupStatus/action\",\r\n \"Microsoft.RecoveryServices/locations/backupPreValidateProtection/action\",\r\n \"Microsoft.RecoveryServices/locations/backupValidateFeatures/action\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/write\",\r\n \"Microsoft.RecoveryServices/operations/read\",\r\n \"Microsoft.RecoveryServices/locations/operationStatus/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-01-03T13:21:11.894764Z\",\r\n \"updatedOn\": \"2019-12-17T11:02:43.9998686Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/00c29273-979b-4161-815c-10b084fb9324\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"00c29273-979b-4161-815c-10b084fb9324\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Backup Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can view backup services, but can't make changes\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.RecoveryServices/locations/allocatedStamp/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationsStatus/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobs/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobs/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobsExport/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectedItems/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupstorageconfig/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupconfig/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperations/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/operations/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupEngines/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/items/read\",\r\n \"Microsoft.RecoveryServices/locations/backupStatus/action\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/*\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/write\",\r\n \"Microsoft.RecoveryServices/operations/read\",\r\n \"Microsoft.RecoveryServices/locations/operationStatus/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.RecoveryServices/locations/backupValidateFeatures/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-01-03T13:18:41.3893065Z\",\r\n \"updatedOn\": \"2020-03-04T12:12:04.321311Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/a795c7a0-d4a2-40c1-ae25-d81f01202912\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a795c7a0-d4a2-40c1-ae25-d81f01202912\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Blockchain Member Node Access (Preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for access to Blockchain Member nodes\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Blockchain/blockchainMembers/transactionNodes/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Blockchain/blockchainMembers/transactionNodes/connect/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-21T10:33:01.9604839Z\",\r\n \"updatedOn\": \"2018-12-21T10:33:58.0042162Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/31a002a1-acaf-453e-8a5b-297c9ca1ea24\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"31a002a1-acaf-453e-8a5b-297c9ca1ea24\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"BizTalk Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage BizTalk services, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.BizTalkServices/BizTalk/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:42:18.897821Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5e3c6656-6cfa-4708-81fe-0de47ac73342\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5e3c6656-6cfa-4708-81fe-0de47ac73342\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CDN Endpoint Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage CDN endpoints, but can’t grant access to other users.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Cdn/edgenodes/read\",\r\n \"Microsoft.Cdn/operationresults/*\",\r\n \"Microsoft.Cdn/profiles/endpoints/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-01-23T02:48:46.4996252Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:52.6231539Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/426e0c7f-0c7e-4658-b36f-ff54d6c29b45\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"426e0c7f-0c7e-4658-b36f-ff54d6c29b45\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CDN Endpoint Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can view CDN endpoints, but can’t make changes.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Cdn/edgenodes/read\",\r\n \"Microsoft.Cdn/operationresults/*\",\r\n \"Microsoft.Cdn/profiles/endpoints/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-01-23T02:48:46.4996252Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:53.1585846Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/871e35f6-b5c1-49cc-a043-bde969a0f2cd\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"871e35f6-b5c1-49cc-a043-bde969a0f2cd\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CDN Profile Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage CDN profiles and their endpoints, but can’t grant access to other users.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Cdn/edgenodes/read\",\r\n \"Microsoft.Cdn/operationresults/*\",\r\n \"Microsoft.Cdn/profiles/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-01-23T02:48:46.4996252Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:53.7051278Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/ec156ff8-a8d1-4d15-830c-5b80698ca432\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ec156ff8-a8d1-4d15-830c-5b80698ca432\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CDN Profile Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can view CDN profiles and their endpoints, but can’t make changes.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Cdn/edgenodes/read\",\r\n \"Microsoft.Cdn/operationresults/*\",\r\n \"Microsoft.Cdn/profiles/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-01-23T02:48:46.4996252Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:54.2283001Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8f96442b-4075-438f-813d-ad51ab4019af\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8f96442b-4075-438f-813d-ad51ab4019af\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Classic Network Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage classic networks, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ClassicNetwork/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:39.7576926Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b34d265f-36f7-4a0d-a4d4-e158ca92e90f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b34d265f-36f7-4a0d-a4d4-e158ca92e90f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Classic Storage Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage classic storage accounts, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ClassicStorage/storageAccounts/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:30.8964641Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/86e8f5dc-a6e9-4c67-9d15-de283e8eac25\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"86e8f5dc-a6e9-4c67-9d15-de283e8eac25\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Classic Storage Account Key Operator Service Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Classic Storage Account Key Operators are allowed to list and regenerate keys on Classic Storage Accounts\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ClassicStorage/storageAccounts/listkeys/action\",\r\n \"Microsoft.ClassicStorage/storageAccounts/regeneratekey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-13T18:22:52.14611Z\",\r\n \"updatedOn\": \"2017-04-13T20:54:03.0505986Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/985d6b00-f706-48f5-a6fe-d0ca12fb668d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"985d6b00-f706-48f5-a6fe-d0ca12fb668d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"ClearDB MySQL DB Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage ClearDB MySQL databases, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"successbricks.cleardb/databases/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:42:23.2893077Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/9106cda0-8a86-4e81-b686-29a22c54effe\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"9106cda0-8a86-4e81-b686-29a22c54effe\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Classic Virtual Machine Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage classic virtual machines, but not access to them, and not the virtual network or storage account they’re connected to.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ClassicCompute/domainNames/*\",\r\n \"Microsoft.ClassicCompute/virtualMachines/*\",\r\n \"Microsoft.ClassicNetwork/networkSecurityGroups/join/action\",\r\n \"Microsoft.ClassicNetwork/reservedIps/link/action\",\r\n \"Microsoft.ClassicNetwork/reservedIps/read\",\r\n \"Microsoft.ClassicNetwork/virtualNetworks/join/action\",\r\n \"Microsoft.ClassicNetwork/virtualNetworks/read\",\r\n \"Microsoft.ClassicStorage/storageAccounts/disks/read\",\r\n \"Microsoft.ClassicStorage/storageAccounts/images/read\",\r\n \"Microsoft.ClassicStorage/storageAccounts/listKeys/action\",\r\n \"Microsoft.ClassicStorage/storageAccounts/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-04-25T00:37:56.5416086Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:43.0770473Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/d73bb868-a0df-4d4d-bd69-98a00b01fccb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"d73bb868-a0df-4d4d-bd69-98a00b01fccb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services User\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read and list keys of Cognitive Services.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\",\r\n \"Microsoft.CognitiveServices/accounts/listkeys/action\",\r\n \"Microsoft.Insights/alertRules/read\",\r\n \"Microsoft.Insights/diagnosticSettings/read\",\r\n \"Microsoft.Insights/logDefinitions/read\",\r\n \"Microsoft.Insights/metricdefinitions/read\",\r\n \"Microsoft.Insights/metrics/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-08-08T23:23:43.7701274Z\",\r\n \"updatedOn\": \"2019-02-13T19:53:56.7209248Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/a97b65f3-24c7-4388-baec-2e87135dc908\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a97b65f3-24c7-4388-baec-2e87135dc908\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Data Reader (Preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read Cognitive Services data.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-02-13T20:02:12.6849986Z\",\r\n \"updatedOn\": \"2019-02-13T22:53:55.167529Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b59867f0-fa02-499b-be73-45a86b5b3e1c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b59867f0-fa02-499b-be73-45a86b5b3e1c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you create, read, update, delete and manage keys of Cognitive Services.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.CognitiveServices/*\",\r\n \"Microsoft.Features/features/read\",\r\n \"Microsoft.Features/providers/features/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/diagnosticSettings/*\",\r\n \"Microsoft.Insights/logDefinitions/read\",\r\n \"Microsoft.Insights/metricdefinitions/read\",\r\n \"Microsoft.Insights/metrics/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourcegroups/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-08-08T23:18:39.2257848Z\",\r\n \"updatedOn\": \"2018-09-14T00:53:37.7546808Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CosmosBackupOperator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can submit restore request for a Cosmos DB database or a container for an account\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.DocumentDB/databaseAccounts/backup/action\",\r\n \"Microsoft.DocumentDB/databaseAccounts/restore/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-07T19:47:14.965156Z\",\r\n \"updatedOn\": \"2018-12-07T19:52:21.9969834Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/db7b14f2-5adf-42da-9f96-f2ee17bab5cb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"db7b14f2-5adf-42da-9f96-f2ee17bab5cb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage everything except access to resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/*/Delete\",\r\n \"Microsoft.Authorization/*/Write\",\r\n \"Microsoft.Authorization/elevateAccess/Action\",\r\n \"Microsoft.Blueprint/blueprintAssignments/write\",\r\n \"Microsoft.Blueprint/blueprintAssignments/delete\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:38.458061Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cosmos DB Account Reader Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read Azure Cosmos DB Accounts data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.DocumentDB/*/read\",\r\n \"Microsoft.DocumentDB/databaseAccounts/readonlykeys/action\",\r\n \"Microsoft.Insights/MetricDefinitions/read\",\r\n \"Microsoft.Insights/Metrics/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-10-30T17:53:54.6005577Z\",\r\n \"updatedOn\": \"2018-02-21T01:36:59.6186231Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/fbdf93bf-df7d-467e-a4d2-9458aa1360c8\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fbdf93bf-df7d-467e-a4d2-9458aa1360c8\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cost Management Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can view costs and manage cost configuration (e.g. budgets, exports)\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Consumption/*\",\r\n \"Microsoft.CostManagement/*\",\r\n \"Microsoft.Billing/billingPeriods/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Advisor/configurations/read\",\r\n \"Microsoft.Advisor/recommendations/read\",\r\n \"Microsoft.Management/managementGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-14T16:09:22.8834827Z\",\r\n \"updatedOn\": \"2019-06-25T21:25:06.8686379Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/434105ed-43f6-45c7-a02f-909b2ba83430\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"434105ed-43f6-45c7-a02f-909b2ba83430\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cost Management Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can view cost data and configuration (e.g. budgets, exports)\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Consumption/*/read\",\r\n \"Microsoft.CostManagement/*/read\",\r\n \"Microsoft.Billing/billingPeriods/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Advisor/configurations/read\",\r\n \"Microsoft.Advisor/recommendations/read\",\r\n \"Microsoft.Management/managementGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-14T16:09:22.8834827Z\",\r\n \"updatedOn\": \"2019-06-25T20:59:11.5762937Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/72fafb9e-0641-4937-9268-a91bfd8191a3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"72fafb9e-0641-4937-9268-a91bfd8191a3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Data Box Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage everything under Data Box Service except giving access to others.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Databox/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-07-27T08:28:42.714021Z\",\r\n \"updatedOn\": \"2018-07-27T08:36:56.3827309Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/add466c9-e687-43fc-8d98-dfcf8d720be5\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"add466c9-e687-43fc-8d98-dfcf8d720be5\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Data Box Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Data Box Service except creating order or editing order details and giving access to others.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Databox/*/read\",\r\n \"Microsoft.Databox/jobs/listsecrets/action\",\r\n \"Microsoft.Databox/jobs/listcredentials/action\",\r\n \"Microsoft.Databox/locations/availableSkus/action\",\r\n \"Microsoft.Databox/locations/validateInputs/action\",\r\n \"Microsoft.Databox/locations/regionConfiguration/action\",\r\n \"Microsoft.Databox/locations/validateAddress/action\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-07-27T08:26:21.9284772Z\",\r\n \"updatedOn\": \"2020-01-24T05:39:52.6143537Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/028f4ed7-e2a9-465e-a8f4-9c0ffdfdc027\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"028f4ed7-e2a9-465e-a8f4-9c0ffdfdc027\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Data Factory Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Create and manage data factories, as well as child resources within them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.DataFactory/dataFactories/*\",\r\n \"Microsoft.DataFactory/factories/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.EventGrid/eventSubscriptions/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2020-02-14T19:49:21.5789216Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"673868aa-7521-48a0-acc6-0f60742d39f5\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Data Purger\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can purge analytics data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Insights/components/*/read\",\r\n \"Microsoft.Insights/components/purge/action\",\r\n \"Microsoft.OperationalInsights/workspaces/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/purge/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-04-30T22:39:49.61677Z\",\r\n \"updatedOn\": \"2018-04-30T22:44:15.1171162Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/150f5e0c-0603-4f03-8c7f-cf70034c4e90\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"150f5e0c-0603-4f03-8c7f-cf70034c4e90\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Data Lake Analytics Developer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you submit, monitor, and manage your own jobs but not create or delete Data Lake Analytics accounts.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.BigAnalytics/accounts/*\",\r\n \"Microsoft.DataLakeAnalytics/accounts/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.BigAnalytics/accounts/Delete\",\r\n \"Microsoft.BigAnalytics/accounts/TakeOwnership/action\",\r\n \"Microsoft.BigAnalytics/accounts/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/Delete\",\r\n \"Microsoft.DataLakeAnalytics/accounts/TakeOwnership/action\",\r\n \"Microsoft.DataLakeAnalytics/accounts/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/dataLakeStoreAccounts/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/dataLakeStoreAccounts/Delete\",\r\n \"Microsoft.DataLakeAnalytics/accounts/storageAccounts/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/storageAccounts/Delete\",\r\n \"Microsoft.DataLakeAnalytics/accounts/firewallRules/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/firewallRules/Delete\",\r\n \"Microsoft.DataLakeAnalytics/accounts/computePolicies/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/computePolicies/Delete\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-10-20T00:33:29.3115234Z\",\r\n \"updatedOn\": \"2017-08-18T00:00:17.0411642Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/47b7735b-770e-4598-a7da-8b91488b4c88\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"47b7735b-770e-4598-a7da-8b91488b4c88\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"DevTest Labs User\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you connect, start, restart, and shutdown your virtual machines in your Azure DevTest Labs.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Compute/availabilitySets/read\",\r\n \"Microsoft.Compute/virtualMachines/*/read\",\r\n \"Microsoft.Compute/virtualMachines/deallocate/action\",\r\n \"Microsoft.Compute/virtualMachines/read\",\r\n \"Microsoft.Compute/virtualMachines/restart/action\",\r\n \"Microsoft.Compute/virtualMachines/start/action\",\r\n \"Microsoft.DevTestLab/*/read\",\r\n \"Microsoft.DevTestLab/labs/claimAnyVm/action\",\r\n \"Microsoft.DevTestLab/labs/createEnvironment/action\",\r\n \"Microsoft.DevTestLab/labs/ensureCurrentUserProfile/action\",\r\n \"Microsoft.DevTestLab/labs/formulas/delete\",\r\n \"Microsoft.DevTestLab/labs/formulas/read\",\r\n \"Microsoft.DevTestLab/labs/formulas/write\",\r\n \"Microsoft.DevTestLab/labs/policySets/evaluatePolicies/action\",\r\n \"Microsoft.DevTestLab/labs/virtualMachines/claim/action\",\r\n \"Microsoft.DevTestLab/labs/virtualmachines/listApplicableSchedules/action\",\r\n \"Microsoft.DevTestLab/labs/virtualMachines/getRdpFileContents/action\",\r\n \"Microsoft.Network/loadBalancers/backendAddressPools/join/action\",\r\n \"Microsoft.Network/loadBalancers/inboundNatRules/join/action\",\r\n \"Microsoft.Network/networkInterfaces/*/read\",\r\n \"Microsoft.Network/networkInterfaces/join/action\",\r\n \"Microsoft.Network/networkInterfaces/read\",\r\n \"Microsoft.Network/networkInterfaces/write\",\r\n \"Microsoft.Network/publicIPAddresses/*/read\",\r\n \"Microsoft.Network/publicIPAddresses/join/action\",\r\n \"Microsoft.Network/publicIPAddresses/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/join/action\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Resources/deployments/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/listKeys/action\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Compute/virtualMachines/vmSizes/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-08T21:52:45.0657582Z\",\r\n \"updatedOn\": \"2019-05-08T11:27:34.8855476Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/76283e04-6283-4c54-8f91-bcf1374a3c64\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"76283e04-6283-4c54-8f91-bcf1374a3c64\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"DocumentDB Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage DocumentDB accounts, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.DocumentDb/databaseAccounts/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-11-21T01:38:32.0948484Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5bd9cd88-fe45-4216-938b-f97437e15450\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"DNS Zone Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage DNS zones and record sets in Azure DNS, but does not let you control who has access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/dnsZones/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-10-15T23:33:25.9730842Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:40.3710365Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/befefa01-2a29-4197-83a8-272ff33ce314\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"befefa01-2a29-4197-83a8-272ff33ce314\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"EventGrid EventSubscription Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage EventGrid event subscription operations.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.EventGrid/eventSubscriptions/*\",\r\n \"Microsoft.EventGrid/topicTypes/eventSubscriptions/read\",\r\n \"Microsoft.EventGrid/locations/eventSubscriptions/read\",\r\n \"Microsoft.EventGrid/locations/topicTypes/eventSubscriptions/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-10-08T23:27:28.3130743Z\",\r\n \"updatedOn\": \"2019-01-08T00:06:34.3543171Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/428e0ff0-5e57-4d9c-a221-2c70d0e0a443\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"428e0ff0-5e57-4d9c-a221-2c70d0e0a443\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"EventGrid EventSubscription Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read EventGrid event subscriptions.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.EventGrid/eventSubscriptions/read\",\r\n \"Microsoft.EventGrid/topicTypes/eventSubscriptions/read\",\r\n \"Microsoft.EventGrid/locations/eventSubscriptions/read\",\r\n \"Microsoft.EventGrid/locations/topicTypes/eventSubscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-10-09T17:29:28.1417894Z\",\r\n \"updatedOn\": \"2019-01-08T00:05:40.2884365Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/2414bbcf-6497-4faf-8c65-045460748405\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"2414bbcf-6497-4faf-8c65-045460748405\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Graph Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Create and manage all aspects of the Enterprise Graph - Ontology, Schema mapping, Conflation and Conversational AI and Ingestions\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/conflation/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/conflation/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/sourceschema/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/sourceschema/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/knowledge/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/knowledge/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/intentclassification/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/intentclassification/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/ingestion/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/ingestion/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/ontology/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/ontology/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/delete\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-02-23T21:07:22.5844236Z\",\r\n \"updatedOn\": \"2019-02-28T20:21:18.9318073Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b60367af-1334-4454-b71e-769d9a4f83d9\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b60367af-1334-4454-b71e-769d9a4f83d9\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"HDInsight Domain Services Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can Read, Create, Modify and Delete Domain Services related operations needed for HDInsight Enterprise Security Package\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.AAD/*/read\",\r\n \"Microsoft.AAD/domainServices/*/read\",\r\n \"Microsoft.AAD/domainServices/oucontainer/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-09-12T22:42:51.7451109Z\",\r\n \"updatedOn\": \"2018-09-12T23:06:45.7641599Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8d8d5a11-05d3-4bda-a417-a08778121c7c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8d8d5a11-05d3-4bda-a417-a08778121c7c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Intelligent Systems Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Intelligent Systems accounts, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.IntelligentSystems/accounts/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:32:00.9996357Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/03a6d094-3444-4b3d-88af-7477090a9e5e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"03a6d094-3444-4b3d-88af-7477090a9e5e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage key vaults, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.KeyVault/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.KeyVault/locations/deletedVaults/purge/action\",\r\n \"Microsoft.KeyVault/hsmPools/*\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-02-25T17:08:28.5184971Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:49.5373075Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/f25e0fa2-a7c8-4377-a976-54943a77a395\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f25e0fa2-a7c8-4377-a976-54943a77a395\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Knowledge Consumer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Knowledge Read permission to consume Enterprise Graph Knowledge using entity search and graph query\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/knowledge/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-02-23T21:23:31.4037552Z\",\r\n \"updatedOn\": \"2019-02-28T20:25:00.7369384Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/ee361c5d-f7b5-4119-b4b6-892157c8f64c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ee361c5d-f7b5-4119-b4b6-892157c8f64c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Lab Creator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you create, manage, delete your managed labs under your Azure Lab Accounts.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.LabServices/labAccounts/*/read\",\r\n \"Microsoft.LabServices/labAccounts/createLab/action\",\r\n \"Microsoft.LabServices/labAccounts/sizes/getRegionalAvailability/action\",\r\n \"Microsoft.LabServices/labAccounts/getRegionalAvailability/action\",\r\n \"Microsoft.LabServices/labAccounts/getPricingAndAvailability/action\",\r\n \"Microsoft.LabServices/labAccounts/getRestrictionsAndUsage/action\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-01-18T23:38:58.1036141Z\",\r\n \"updatedOn\": \"2020-02-12T23:54:21.0840302Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b97fb8bc-a8b2-4522-a38b-dd33c7e65ead\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b97fb8bc-a8b2-4522-a38b-dd33c7e65ead\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Log Analytics Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Log Analytics Reader can view and search all monitoring data as well as and view monitoring settings, including viewing the configuration of Azure diagnostics on all Azure resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/analytics/query/action\",\r\n \"Microsoft.OperationalInsights/workspaces/search/action\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.OperationalInsights/workspaces/sharedKeys/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-02T00:20:28.1449012Z\",\r\n \"updatedOn\": \"2018-01-30T18:08:26.0438523Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/73c42c96-874c-492b-b04d-ab87d138a893\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"73c42c96-874c-492b-b04d-ab87d138a893\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Log Analytics Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Log Analytics Contributor can read all monitoring data and edit monitoring settings. Editing monitoring settings includes adding the VM extension to VMs; reading storage account keys to be able to configure collection of logs from Azure Storage; creating and configuring Automation accounts; adding solutions; and configuring Azure diagnostics on all Azure resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Automation/automationAccounts/*\",\r\n \"Microsoft.ClassicCompute/virtualMachines/extensions/*\",\r\n \"Microsoft.ClassicStorage/storageAccounts/listKeys/action\",\r\n \"Microsoft.Compute/virtualMachines/extensions/*\",\r\n \"Microsoft.HybridCompute/machines/extensions/write\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/diagnosticSettings/*\",\r\n \"Microsoft.OperationalInsights/*\",\r\n \"Microsoft.OperationsManagement/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourcegroups/deployments/*\",\r\n \"Microsoft.Storage/storageAccounts/listKeys/action\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-25T21:51:45.3174711Z\",\r\n \"updatedOn\": \"2020-03-26T22:57:55.366783Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Logic App Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read, enable and disable logic app.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*/read\",\r\n \"Microsoft.Insights/metricAlerts/*/read\",\r\n \"Microsoft.Insights/diagnosticSettings/*/read\",\r\n \"Microsoft.Insights/metricDefinitions/*/read\",\r\n \"Microsoft.Logic/*/read\",\r\n \"Microsoft.Logic/workflows/disable/action\",\r\n \"Microsoft.Logic/workflows/enable/action\",\r\n \"Microsoft.Logic/workflows/validate/action\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Web/connectionGateways/*/read\",\r\n \"Microsoft.Web/connections/*/read\",\r\n \"Microsoft.Web/customApis/*/read\",\r\n \"Microsoft.Web/serverFarms/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-04-28T21:33:30.4656007Z\",\r\n \"updatedOn\": \"2019-10-15T04:28:56.3265986Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/515c2055-d9d4-4321-b1b9-bd0c9a0f79fe\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"515c2055-d9d4-4321-b1b9-bd0c9a0f79fe\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Logic App Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage logic app, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ClassicStorage/storageAccounts/listKeys/action\",\r\n \"Microsoft.ClassicStorage/storageAccounts/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/metricAlerts/*\",\r\n \"Microsoft.Insights/diagnosticSettings/*\",\r\n \"Microsoft.Insights/logdefinitions/*\",\r\n \"Microsoft.Insights/metricDefinitions/*\",\r\n \"Microsoft.Logic/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/listkeys/action\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Web/connectionGateways/*\",\r\n \"Microsoft.Web/connections/*\",\r\n \"Microsoft.Web/customApis/*\",\r\n \"Microsoft.Web/serverFarms/join/action\",\r\n \"Microsoft.Web/serverFarms/read\",\r\n \"Microsoft.Web/sites/functions/listSecrets/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-04-28T21:33:30.4656007Z\",\r\n \"updatedOn\": \"2019-10-15T04:31:27.7685427Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/87a39d53-fc1b-424a-814c-f7e04687dc9e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"87a39d53-fc1b-424a-814c-f7e04687dc9e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Application Operator Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read and perform actions on Managed Application resources\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Solutions/applications/read\",\r\n \"Microsoft.Solutions/*/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-07-27T00:59:33.7988813Z\",\r\n \"updatedOn\": \"2019-02-20T01:09:55.1593079Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/c7393b34-138c-406f-901b-d8cf2b17e6ae\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c7393b34-138c-406f-901b-d8cf2b17e6ae\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Applications Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read resources in a managed app and request JIT access.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Solutions/jitRequests/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-09-06T00:33:58.3651522Z\",\r\n \"updatedOn\": \"2018-09-06T00:33:58.3651522Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b9331d33-8a36-4f8c-b097-4f54124fdb44\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b9331d33-8a36-4f8c-b097-4f54124fdb44\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Identity Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read and Assign User Assigned Identity\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ManagedIdentity/userAssignedIdentities/*/read\",\r\n \"Microsoft.ManagedIdentity/userAssignedIdentities/*/assign/action\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-14T19:52:04.3924594Z\",\r\n \"updatedOn\": \"2017-12-14T22:16:00.1483256Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/f1a07417-d97a-45cb-824c-7a7467783830\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f1a07417-d97a-45cb-824c-7a7467783830\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Identity Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Create, Read, Update, and Delete User Assigned Identity\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ManagedIdentity/userAssignedIdentities/read\",\r\n \"Microsoft.ManagedIdentity/userAssignedIdentities/write\",\r\n \"Microsoft.ManagedIdentity/userAssignedIdentities/delete\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-14T19:53:42.8804692Z\",\r\n \"updatedOn\": \"2019-06-20T21:51:27.0850433Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/e40ec5ca-96e0-45a2-b4ff-59039f2c2b59\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e40ec5ca-96e0-45a2-b4ff-59039f2c2b59\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Management Group Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Management Group Contributor Role\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Management/managementGroups/delete\",\r\n \"Microsoft.Management/managementGroups/read\",\r\n \"Microsoft.Management/managementGroups/subscriptions/delete\",\r\n \"Microsoft.Management/managementGroups/subscriptions/write\",\r\n \"Microsoft.Management/managementGroups/write\",\r\n \"Microsoft.Management/managementGroups/subscriptions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-06-22T00:28:29.0523964Z\",\r\n \"updatedOn\": \"2020-07-06T18:13:34.9045672Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5d58bcaf-24a5-4b20-bdb6-eed9f69fbe4c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5d58bcaf-24a5-4b20-bdb6-eed9f69fbe4c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Management Group Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Management Group Reader Role\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Management/managementGroups/read\",\r\n \"Microsoft.Management/managementGroups/subscriptions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-06-22T00:31:03.4295347Z\",\r\n \"updatedOn\": \"2020-07-06T18:09:27.1441705Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/ac63b705-f282-497d-ac71-919bf39d939d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ac63b705-f282-497d-ac71-919bf39d939d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Monitoring Metrics Publisher\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Enables publishing metrics against Azure resources\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Insights/Register/Action\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Insights/Metrics/Write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-08-14T00:36:16.5610279Z\",\r\n \"updatedOn\": \"2018-08-14T00:37:18.1465065Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/3913510d-42f4-4e42-8a64-420c390055eb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3913510d-42f4-4e42-8a64-420c390055eb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Monitoring Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read all monitoring data.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/search/action\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-09-21T19:19:52.4939376Z\",\r\n \"updatedOn\": \"2018-01-30T18:08:27.262625Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/43d0d8ad-25c7-4714-9337-8ba259a9fe05\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"43d0d8ad-25c7-4714-9337-8ba259a9fe05\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Network Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage networks, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-02T00:18:27.3542698Z\",\r\n \"updatedOn\": \"2016-05-31T23:14:00.3326359Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4d97b98b-1d4f-4787-a291-c67834d212e7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Monitoring Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read all monitoring data and update monitoring settings.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.AlertsManagement/alerts/*\",\r\n \"Microsoft.AlertsManagement/alertsSummary/*\",\r\n \"Microsoft.Insights/actiongroups/*\",\r\n \"Microsoft.Insights/activityLogAlerts/*\",\r\n \"Microsoft.Insights/AlertRules/*\",\r\n \"Microsoft.Insights/components/*\",\r\n \"Microsoft.Insights/DiagnosticSettings/*\",\r\n \"Microsoft.Insights/eventtypes/*\",\r\n \"Microsoft.Insights/LogDefinitions/*\",\r\n \"Microsoft.Insights/metricalerts/*\",\r\n \"Microsoft.Insights/MetricDefinitions/*\",\r\n \"Microsoft.Insights/Metrics/*\",\r\n \"Microsoft.Insights/Register/Action\",\r\n \"Microsoft.Insights/scheduledqueryrules/*\",\r\n \"Microsoft.Insights/webtests/*\",\r\n \"Microsoft.Insights/workbooks/*\",\r\n \"Microsoft.Insights/privateLinkScopes/*\",\r\n \"Microsoft.Insights/privateLinkScopeOperationStatuses/*\",\r\n \"Microsoft.OperationalInsights/workspaces/write\",\r\n \"Microsoft.OperationalInsights/workspaces/intelligencepacks/*\",\r\n \"Microsoft.OperationalInsights/workspaces/savedSearches/*\",\r\n \"Microsoft.OperationalInsights/workspaces/search/action\",\r\n \"Microsoft.OperationalInsights/workspaces/sharedKeys/action\",\r\n \"Microsoft.OperationalInsights/workspaces/storageinsightconfigs/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.WorkloadMonitor/monitors/*\",\r\n \"Microsoft.WorkloadMonitor/notificationSettings/*\",\r\n \"Microsoft.AlertsManagement/smartDetectorAlertRules/*\",\r\n \"Microsoft.AlertsManagement/actionRules/*\",\r\n \"Microsoft.AlertsManagement/smartGroups/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-09-21T19:21:08.4345976Z\",\r\n \"updatedOn\": \"2020-04-19T16:03:16.7692305Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"749f88d5-cbae-40b8-bcfc-e573ddc772fa\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"New Relic APM Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage New Relic Application Performance Management accounts and applications, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"NewRelic.APM/accounts/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:42:16.2033878Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5d28c62d-5b37-4476-8438-e587778df237\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5d28c62d-5b37-4476-8438-e587778df237\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage everything, including access to resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:32.2101122Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8e3af657-a8ff-443c-a75c-2fe8c4bcb635\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8e3af657-a8ff-443c-a75c-2fe8c4bcb635\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you view everything, but not make any changes.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:35.7424745Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"acdd72a7-3385-48ef-bd42-f606fba81ae7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Redis Cache Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Redis caches, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Cache/redis/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:48.2353169Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/e0f68234-74aa-48ed-b826-c38b57376e17\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e0f68234-74aa-48ed-b826-c38b57376e17\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Reader and Data Access\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you view everything but will not let you delete or create a storage account or contained resource. It will also allow read/write access to all data contained in a storage account via access to storage account keys.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/listKeys/action\",\r\n \"Microsoft.Storage/storageAccounts/ListAccountSas/action\",\r\n \"Microsoft.Storage/storageAccounts/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-27T23:20:46.1498906Z\",\r\n \"updatedOn\": \"2019-04-04T23:41:26.1056261Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/c12c1c16-33a1-487b-954d-41c89c60f349\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c12c1c16-33a1-487b-954d-41c89c60f349\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Resource Policy Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Users with rights to create/modify resource policy, create support ticket and read resources/hierarchy.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Authorization/policyassignments/*\",\r\n \"Microsoft.Authorization/policydefinitions/*\",\r\n \"Microsoft.Authorization/policysetdefinitions/*\",\r\n \"Microsoft.PolicyInsights/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-08-25T19:08:01.3861639Z\",\r\n \"updatedOn\": \"2019-11-20T20:26:12.8811365Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/36243c78-bf99-498c-9df9-86d9f8d28608\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"36243c78-bf99-498c-9df9-86d9f8d28608\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Scheduler Job Collections Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Scheduler job collections, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Scheduler/jobcollections/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:42:24.8360756Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/188a0f2f-5c9e-469b-ae67-2aa5ce574b94\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"188a0f2f-5c9e-469b-ae67-2aa5ce574b94\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Search Service Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Search services, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Search/searchServices/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:42:21.8687229Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/7ca78c08-252a-4471-8644-bb5ff32d4ba0\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7ca78c08-252a-4471-8644-bb5ff32d4ba0\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Security Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Security Admin Role\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Authorization/policyAssignments/*\",\r\n \"Microsoft.Authorization/policyDefinitions/*\",\r\n \"Microsoft.Authorization/policySetDefinitions/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Management/managementGroups/read\",\r\n \"Microsoft.operationalInsights/workspaces/*/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Security/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-03T07:51:23.0917487Z\",\r\n \"updatedOn\": \"2019-03-12T21:12:48.635016Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fb1c8493-542b-48eb-b624-b4c8fea62acd\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Security Manager (Legacy)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"This is a legacy role. Please use Security Administrator instead\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ClassicCompute/*/read\",\r\n \"Microsoft.ClassicCompute/virtualMachines/*/write\",\r\n \"Microsoft.ClassicNetwork/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Security/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-22T17:45:15.8986455Z\",\r\n \"updatedOn\": \"2018-03-08T18:18:48.618362Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/e3d13bf0-dd5a-482e-ba6b-9b8433878d10\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e3d13bf0-dd5a-482e-ba6b-9b8433878d10\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Security Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Security Reader Role\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.operationalInsights/workspaces/*/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Security/*/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Management/managementGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-03T07:48:49.0516559Z\",\r\n \"updatedOn\": \"2018-06-28T17:27:23.106561Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/39bc4728-0917-49c7-9d2c-d95423bc2eb4\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"39bc4728-0917-49c7-9d2c-d95423bc2eb4\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Spatial Anchors Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage spatial anchors in your account, but not delete them\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/create/action\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/query/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-21T17:57:41.1420864Z\",\r\n \"updatedOn\": \"2019-02-13T06:13:39.8686435Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8bbe83f1-e2a6-4df7-8cb4-4e04d4e5c827\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8bbe83f1-e2a6-4df7-8cb4-4e04d4e5c827\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Site Recovery Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Site Recovery service except vault creation and role assignment\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.RecoveryServices/locations/allocatedStamp/read\",\r\n \"Microsoft.RecoveryServices/locations/allocateStamp/action\",\r\n \"Microsoft.RecoveryServices/Vaults/certificates/write\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/*\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/refreshContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationAlertSettings/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationEvents/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationJobs/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationPolicies/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/*\",\r\n \"Microsoft.RecoveryServices/Vaults/storageConfig/*\",\r\n \"Microsoft.RecoveryServices/Vaults/tokenInfo/read\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.RecoveryServices/Vaults/vaultTokens/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/*\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/notificationConfiguration/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationOperationStatus/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-19T13:46:17.4592776Z\",\r\n \"updatedOn\": \"2019-11-07T06:13:49.0760858Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/6670b86e-a3f7-4917-ac9b-5d6ab1be4567\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"6670b86e-a3f7-4917-ac9b-5d6ab1be4567\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Site Recovery Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you failover and failback but not perform other Site Recovery management operations\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.RecoveryServices/locations/allocatedStamp/read\",\r\n \"Microsoft.RecoveryServices/locations/allocateStamp/action\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/read\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/refreshContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationAlertSettings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationEvents/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/checkConsistency/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/reassociateGateway/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/renewcertificate/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/replicationNetworkMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectableItems/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/applyRecoveryPoint/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/failoverCommit/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/plannedFailover/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/recoveryPoints/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/repairReplication/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/reProtect/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/switchprotection/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/testFailover/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/testFailoverCleanup/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/unplannedFailover/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/updateMobilityService/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/refreshProvider/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/replicationStorageClassificationMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationvCenters/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationJobs/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationPolicies/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/failoverCommit/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/plannedFailover/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/reProtect/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/testFailover/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/testFailoverCleanup/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/unplannedFailover/action\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/*\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/notificationConfiguration/read\",\r\n \"Microsoft.RecoveryServices/Vaults/storageConfig/read\",\r\n \"Microsoft.RecoveryServices/Vaults/tokenInfo/read\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.RecoveryServices/Vaults/vaultTokens/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-19T13:47:50.1341148Z\",\r\n \"updatedOn\": \"2019-08-28T12:00:57.4472826Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": \"\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/494ae006-db33-4328-bf46-533a6560a3ca\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"494ae006-db33-4328-bf46-533a6560a3ca\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Spatial Anchors Account Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you locate and read properties of spatial anchors in your account\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/query/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-21T17:57:42.9271004Z\",\r\n \"updatedOn\": \"2019-02-13T06:16:15.3170663Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5d51204f-eb77-4b1c-b86a-2ec626c49413\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5d51204f-eb77-4b1c-b86a-2ec626c49413\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Site Recovery Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you view Site Recovery status but not perform other management operations\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.RecoveryServices/locations/allocatedStamp/read\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/notificationConfiguration/read\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/refreshContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationAlertSettings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationEvents/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/replicationNetworkMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectableItems/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/recoveryPoints/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/replicationStorageClassificationMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationvCenters/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationJobs/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationPolicies/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/read\",\r\n \"Microsoft.RecoveryServices/Vaults/storageConfig/read\",\r\n \"Microsoft.RecoveryServices/Vaults/tokenInfo/read\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.RecoveryServices/Vaults/vaultTokens/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-19T13:35:40.0093634Z\",\r\n \"updatedOn\": \"2017-05-26T19:54:51.393325Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/dbaa88c4-0c30-4179-9fb3-46319faa6149\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"dbaa88c4-0c30-4179-9fb3-46319faa6149\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Spatial Anchors Account Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage spatial anchors in your account, including deleting them\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/create/action\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/delete\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/query/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-21T17:57:43.5489832Z\",\r\n \"updatedOn\": \"2019-02-13T06:15:31.8572222Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/70bbe301-9835-447d-afdd-19eb3167307c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"70bbe301-9835-447d-afdd-19eb3167307c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SQL Managed Instance Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage SQL Managed Instances and required network configuration, but can’t give access to others.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Network/networkSecurityGroups/*\",\r\n \"Microsoft.Network/routeTables/*\",\r\n \"Microsoft.Sql/locations/*/read\",\r\n \"Microsoft.Sql/locations/instanceFailoverGroups/*\",\r\n \"Microsoft.Sql/managedInstances/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Network/virtualNetworks/subnets/*\",\r\n \"Microsoft.Network/virtualNetworks/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/metrics/read\",\r\n \"Microsoft.Insights/metricDefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-10T22:57:14.2937983Z\",\r\n \"updatedOn\": \"2020-06-24T22:56:31.0576055Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/4939a1f6-9ae0-4e48-a1e0-f2cbe897382d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4939a1f6-9ae0-4e48-a1e0-f2cbe897382d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SQL DB Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage SQL databases, but not access to them. Also, you can't manage their security-related policies or their parent SQL servers.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Sql/locations/*/read\",\r\n \"Microsoft.Sql/servers/databases/*\",\r\n \"Microsoft.Sql/servers/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Insights/metrics/read\",\r\n \"Microsoft.Insights/metricDefinitions/read\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Sql/managedInstances/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/managedInstances/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/databases/auditingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/auditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/auditRecords/read\",\r\n \"Microsoft.Sql/servers/databases/connectionPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/dataMaskingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/extendedAuditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/securityMetrics/*\",\r\n \"Microsoft.Sql/servers/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentScans/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentSettings/*\",\r\n \"Microsoft.Sql/servers/vulnerabilityAssessments/*\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-28T22:44:35.864967Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/9b7fa17d-e63e-47b0-bb0a-15c516ac86ec\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"9b7fa17d-e63e-47b0-bb0a-15c516ac86ec\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SQL Security Manager\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage the security-related policies of SQL servers and databases, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Sql/managedInstances/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/managedInstances/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/databases/transparentDataEncryption/*\",\r\n \"Microsoft.Sql/managedInstances/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/auditingPolicies/*\",\r\n \"Microsoft.Sql/servers/auditingSettings/*\",\r\n \"Microsoft.Sql/servers/extendedAuditingSettings/read\",\r\n \"Microsoft.Sql/servers/databases/auditingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/auditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/auditRecords/read\",\r\n \"Microsoft.Sql/servers/databases/connectionPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/dataMaskingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/extendedAuditingSettings/read\",\r\n \"Microsoft.Sql/servers/databases/read\",\r\n \"Microsoft.Sql/servers/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/schemas/read\",\r\n \"Microsoft.Sql/servers/databases/schemas/tables/columns/read\",\r\n \"Microsoft.Sql/servers/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/schemas/tables/read\",\r\n \"Microsoft.Sql/servers/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/securityMetrics/*\",\r\n \"Microsoft.Sql/servers/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/transparentDataEncryption/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentScans/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentSettings/*\",\r\n \"Microsoft.Sql/servers/firewallRules/*\",\r\n \"Microsoft.Sql/servers/read\",\r\n \"Microsoft.Sql/servers/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/servers/vulnerabilityAssessments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-16T18:44:40.4607572Z\",\r\n \"updatedOn\": \"2019-08-08T22:58:22.2532171Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": \"yaiyun\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"056cd41c-7e88-42e1-933e-88ba6a50c9c3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage storage accounts, including accessing storage account keys which provide full access to storage account data.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/diagnosticSettings/*\",\r\n \"Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-02T00:18:27.3542698Z\",\r\n \"updatedOn\": \"2019-05-29T20:56:33.9582501Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"17d1049b-9a84-46fb-8f53-869881c3d3ab\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SQL Server Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage SQL servers and databases, but not access to them, and not their security -related policies.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Sql/locations/*/read\",\r\n \"Microsoft.Sql/servers/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Insights/metrics/read\",\r\n \"Microsoft.Insights/metricDefinitions/read\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Sql/managedInstances/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/managedInstances/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/auditingPolicies/*\",\r\n \"Microsoft.Sql/servers/auditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/auditingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/auditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/auditRecords/read\",\r\n \"Microsoft.Sql/servers/databases/connectionPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/dataMaskingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/extendedAuditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/securityMetrics/*\",\r\n \"Microsoft.Sql/servers/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentScans/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentSettings/*\",\r\n \"Microsoft.Sql/servers/extendedAuditingSettings/*\",\r\n \"Microsoft.Sql/servers/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/servers/vulnerabilityAssessments/*\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-28T22:44:36.5466043Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Account Key Operator Service Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Storage Account Key Operators are allowed to list and regenerate keys on Storage Accounts\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/listkeys/action\",\r\n \"Microsoft.Storage/storageAccounts/regeneratekey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-13T18:26:11.577057Z\",\r\n \"updatedOn\": \"2017-04-13T20:57:14.5990198Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/81a9662b-bebf-436f-a333-f67b29880f12\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"81a9662b-bebf-436f-a333-f67b29880f12\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Blob Data Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read, write and delete access to Azure Storage blob containers and data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/delete\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/write\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/move/action\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-21T00:01:24.7972312Z\",\r\n \"updatedOn\": \"2020-03-30T22:49:07.866942Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/ba92f5b4-2d11-453d-a403-e96b0029c9fe\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ba92f5b4-2d11-453d-a403-e96b0029c9fe\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Blob Data Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for full access to Azure Storage blob containers and data, including assigning POSIX access control.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/*\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-04T07:02:58.2775257Z\",\r\n \"updatedOn\": \"2019-07-16T21:30:33.7002563Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b7e6dc6d-f1e8-4753-8033-0f276bb0955b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b7e6dc6d-f1e8-4753-8033-0f276bb0955b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Blob Data Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read access to Azure Storage blob containers and data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-21T00:01:24.7972312Z\",\r\n \"updatedOn\": \"2019-07-15T22:01:25.5409721Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/2a2b9908-6ea1-4ae2-8e65-a410df84e7d1\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"2a2b9908-6ea1-4ae2-8e65-a410df84e7d1\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Queue Data Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read, write, and delete access to Azure Storage queues and queue messages\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/delete\",\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/read\",\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/delete\",\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/read\",\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-21T00:01:24.7972312Z\",\r\n \"updatedOn\": \"2019-03-05T21:58:02.7367128Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/974c5e8b-45b9-4653-ba55-5f855dd0fb88\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"974c5e8b-45b9-4653-ba55-5f855dd0fb88\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Queue Data Message Processor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for peek, receive, and delete access to Azure Storage queue messages\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/read\",\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/process/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-01-28T22:27:04.8947111Z\",\r\n \"updatedOn\": \"2019-03-05T22:05:46.1259125Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8a0f0c08-91a1-4084-bc3d-661d67233fed\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8a0f0c08-91a1-4084-bc3d-661d67233fed\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Queue Data Message Sender\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for sending of Azure Storage queue messages\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/add/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-01-28T22:28:34.7459724Z\",\r\n \"updatedOn\": \"2019-03-05T22:11:49.6383892Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/c6a89b2d-59bc-44d0-9896-0f6e12d7b80a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c6a89b2d-59bc-44d0-9896-0f6e12d7b80a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Queue Data Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read access to Azure Storage queues and queue messages\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-21T00:01:24.7972312Z\",\r\n \"updatedOn\": \"2019-03-05T22:17:32.1779262Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/19e7f393-937e-4f77-808e-94535e297925\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"19e7f393-937e-4f77-808e-94535e297925\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Support Request Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you create and manage Support requests\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-06-22T22:25:37.8053068Z\",\r\n \"updatedOn\": \"2017-06-23T01:06:24.2399631Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/cfd33db0-3dd1-45e3-aa9d-cdbdf3b6f24e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"cfd33db0-3dd1-45e3-aa9d-cdbdf3b6f24e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Traffic Manager Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Traffic Manager profiles, but does not let you control who has access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/trafficManagerProfiles/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-10-15T23:33:25.9730842Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:44.1458854Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/a4b10055-b0c7-44c2-b00f-c7b5b3550cf7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a4b10055-b0c7-44c2-b00f-c7b5b3550cf7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Virtual Machine Administrator Login\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"View Virtual Machines in the portal and login as administrator\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Network/publicIPAddresses/read\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/loadBalancers/read\",\r\n \"Microsoft.Network/networkInterfaces/read\",\r\n \"Microsoft.Compute/virtualMachines/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Compute/virtualMachines/login/action\",\r\n \"Microsoft.Compute/virtualMachines/loginAsAdmin/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-02-09T18:36:13.3315744Z\",\r\n \"updatedOn\": \"2018-05-09T22:17:57.0514548Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/1c0163c0-47e6-4577-8991-ea5c82e286e4\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"1c0163c0-47e6-4577-8991-ea5c82e286e4\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"User Access Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage user access to Azure resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Authorization/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:12.6807454Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/18d7d88d-d35e-4fb5-a5c3-7773c20a72d9\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"18d7d88d-d35e-4fb5-a5c3-7773c20a72d9\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Virtual Machine User Login\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"View Virtual Machines in the portal and login as a regular user.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Network/publicIPAddresses/read\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/loadBalancers/read\",\r\n \"Microsoft.Network/networkInterfaces/read\",\r\n \"Microsoft.Compute/virtualMachines/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Compute/virtualMachines/login/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-02-09T18:36:13.3315744Z\",\r\n \"updatedOn\": \"2018-05-09T22:18:52.2780979Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/fb879df8-f326-4884-b1cf-06f3ad86be52\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fb879df8-f326-4884-b1cf-06f3ad86be52\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Virtual Machine Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage virtual machines, but not access to them, and not the virtual network or storage account they're connected to.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Compute/availabilitySets/*\",\r\n \"Microsoft.Compute/locations/*\",\r\n \"Microsoft.Compute/virtualMachines/*\",\r\n \"Microsoft.Compute/virtualMachineScaleSets/*\",\r\n \"Microsoft.Compute/disks/write\",\r\n \"Microsoft.Compute/disks/read\",\r\n \"Microsoft.Compute/disks/delete\",\r\n \"Microsoft.DevTestLab/schedules/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/applicationGateways/backendAddressPools/join/action\",\r\n \"Microsoft.Network/loadBalancers/backendAddressPools/join/action\",\r\n \"Microsoft.Network/loadBalancers/inboundNatPools/join/action\",\r\n \"Microsoft.Network/loadBalancers/inboundNatRules/join/action\",\r\n \"Microsoft.Network/loadBalancers/probes/join/action\",\r\n \"Microsoft.Network/loadBalancers/read\",\r\n \"Microsoft.Network/locations/*\",\r\n \"Microsoft.Network/networkInterfaces/*\",\r\n \"Microsoft.Network/networkSecurityGroups/join/action\",\r\n \"Microsoft.Network/networkSecurityGroups/read\",\r\n \"Microsoft.Network/publicIPAddresses/join/action\",\r\n \"Microsoft.Network/publicIPAddresses/read\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/join/action\",\r\n \"Microsoft.RecoveryServices/locations/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/*/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/write\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.RecoveryServices/Vaults/write\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.SqlVirtualMachine/*\",\r\n \"Microsoft.Storage/storageAccounts/listKeys/action\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-02T00:18:27.3542698Z\",\r\n \"updatedOn\": \"2020-02-03T19:38:21.2170228Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Web Plan Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage the web plans for websites, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Web/serverFarms/*\",\r\n \"Microsoft.Web/hostingEnvironments/Join/Action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-03-26T18:17:34.5018645Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/2cc479cb-7b4d-49a8-b449-8c00fd0f0a4b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"2cc479cb-7b4d-49a8-b449-8c00fd0f0a4b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Website Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage websites (not web plans), but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/components/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Web/certificates/*\",\r\n \"Microsoft.Web/listSitesAssignedToHostName/read\",\r\n \"Microsoft.Web/serverFarms/join/action\",\r\n \"Microsoft.Web/serverFarms/read\",\r\n \"Microsoft.Web/sites/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-05-12T23:10:23.6193952Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:46.9407288Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/de139f84-1756-47ae-9be6-808fbbe84772\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"de139f84-1756-47ae-9be6-808fbbe84772\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Service Bus Data Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for full access to Azure Service Bus resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ServiceBus/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ServiceBus/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-16T21:33:36.7445745Z\",\r\n \"updatedOn\": \"2019-08-21T22:47:11.3982905Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/090c5cfd-751d-490a-894a-3ce6f1109419\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"090c5cfd-751d-490a-894a-3ce6f1109419\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Event Hubs Data Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for full access to Azure Event Hubs resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.EventHub/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.EventHub/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-16T21:34:29.8656362Z\",\r\n \"updatedOn\": \"2019-08-21T22:58:57.7584645Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/f526a384-b230-433a-b45c-95f59c4a2dec\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f526a384-b230-433a-b45c-95f59c4a2dec\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Attestation Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read write or delete the attestation provider instance\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Attestation/attestationProviders/attestation/read\",\r\n \"Microsoft.Attestation/attestationProviders/attestation/write\",\r\n \"Microsoft.Attestation/attestationProviders/attestation/delete\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-19T00:24:09.3354177Z\",\r\n \"updatedOn\": \"2019-05-10T17:59:06.3448436Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/bbf86eb8-f7b4-4cce-96e4-18cddf81d86e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"bbf86eb8-f7b4-4cce-96e4-18cddf81d86e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"HDInsight Cluster Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read and modify HDInsight cluster configurations.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.HDInsight/*/read\",\r\n \"Microsoft.HDInsight/clusters/getGatewaySettings/action\",\r\n \"Microsoft.HDInsight/clusters/updateGatewaySettings/action\",\r\n \"Microsoft.HDInsight/clusters/configurations/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-20T00:03:01.7110732Z\",\r\n \"updatedOn\": \"2019-04-28T02:34:17.4679314Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/61ed4efc-fab3-44fd-b111-e24485cc132a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"61ed4efc-fab3-44fd-b111-e24485cc132a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cosmos DB Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Azure Cosmos DB accounts, but not access data in them. Prevents access to account keys and connection strings.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.DocumentDb/databaseAccounts/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.DocumentDB/databaseAccounts/readonlyKeys/*\",\r\n \"Microsoft.DocumentDB/databaseAccounts/regenerateKey/*\",\r\n \"Microsoft.DocumentDB/databaseAccounts/listKeys/*\",\r\n \"Microsoft.DocumentDB/databaseAccounts/listConnectionStrings/*\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-26T17:01:17.0169383Z\",\r\n \"updatedOn\": \"2019-11-21T01:34:13.3746345Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/230815da-be43-4aae-9cb4-875f7bd000aa\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"230815da-be43-4aae-9cb4-875f7bd000aa\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Hybrid Server Resource Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read, write, delete, and re-onboard Hybrid servers to the Hybrid Resource Provider.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.HybridCompute/machines/*\",\r\n \"Microsoft.HybridCompute/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-29T21:39:32.3132923Z\",\r\n \"updatedOn\": \"2019-05-06T20:08:25.3180258Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/48b40c6e-82e0-4eb3-90d5-19e40f49b624\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"48b40c6e-82e0-4eb3-90d5-19e40f49b624\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Hybrid Server Onboarding\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can onboard new Hybrid servers to the Hybrid Resource Provider.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.HybridCompute/machines/read\",\r\n \"Microsoft.HybridCompute/machines/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-29T22:36:28.1873756Z\",\r\n \"updatedOn\": \"2019-05-06T20:09:17.9364269Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5d1e5ee4-7c68-4a71-ac8b-0739630a3dfb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5d1e5ee4-7c68-4a71-ac8b-0739630a3dfb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Event Hubs Data Receiver\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows receive access to Azure Event Hubs resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.EventHub/*/eventhubs/consumergroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.EventHub/*/receive/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-05-10T06:25:21.1056666Z\",\r\n \"updatedOn\": \"2019-08-21T23:00:32.6225396Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/a638d3c7-ab3a-418d-83e6-5f17a39d4fde\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a638d3c7-ab3a-418d-83e6-5f17a39d4fde\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Event Hubs Data Sender\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows send access to Azure Event Hubs resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.EventHub/*/eventhubs/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.EventHub/*/send/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-05-10T06:26:12.4673714Z\",\r\n \"updatedOn\": \"2019-08-21T23:02:26.6155679Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/2b629674-e913-4c01-ae53-ef4638d8f975\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"2b629674-e913-4c01-ae53-ef4638d8f975\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Service Bus Data Receiver\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for receive access to Azure Service Bus resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ServiceBus/*/queues/read\",\r\n \"Microsoft.ServiceBus/*/topics/read\",\r\n \"Microsoft.ServiceBus/*/topics/subscriptions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ServiceBus/*/receive/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-05-10T06:43:01.6343849Z\",\r\n \"updatedOn\": \"2019-08-21T22:55:24.3423558Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/4f6d3b9b-027b-4f4c-9142-0e5a2a2247e0\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4f6d3b9b-027b-4f4c-9142-0e5a2a2247e0\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Service Bus Data Sender\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for send access to Azure Service Bus resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ServiceBus/*/queues/read\",\r\n \"Microsoft.ServiceBus/*/topics/read\",\r\n \"Microsoft.ServiceBus/*/topics/subscriptions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ServiceBus/*/send/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-05-10T06:43:46.7046934Z\",\r\n \"updatedOn\": \"2019-08-21T22:57:12.2555683Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/69a216fc-b8fb-44d8-bc22-1f3c2cd27a39\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"69a216fc-b8fb-44d8-bc22-1f3c2cd27a39\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage File Data SMB Share Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read access to Azure File Share over SMB\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-07-01T20:19:31.8620471Z\",\r\n \"updatedOn\": \"2019-08-07T01:00:41.9223409Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/aba4ae5f-2193-4029-9191-0cb91df5e314\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"aba4ae5f-2193-4029-9191-0cb91df5e314\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage File Data SMB Share Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read, write, and delete access in Azure Storage file shares over SMB\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read\",\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/write\",\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/delete\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-07-01T20:54:35.483431Z\",\r\n \"updatedOn\": \"2019-08-07T01:05:24.4309872Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/0c867c2a-1d8c-454a-a3db-ab2ea1bdc8bb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0c867c2a-1d8c-454a-a3db-ab2ea1bdc8bb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Private DNS Zone Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage private DNS zone resources, but not the virtual networks they are linked to.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Network/privateDnsZones/*\",\r\n \"Microsoft.Network/privateDnsOperationResults/*\",\r\n \"Microsoft.Network/privateDnsOperationStatuses/*\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/virtualNetworks/join/action\",\r\n \"Microsoft.Authorization/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-07-10T19:31:15.5645518Z\",\r\n \"updatedOn\": \"2019-07-11T21:12:01.7260648Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b12aa53e-6015-4669-85d0-8515ebb3ae7f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b12aa53e-6015-4669-85d0-8515ebb3ae7f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Blob Delegator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for generation of a user delegation key which can be used to sign SAS tokens\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-07-23T00:51:16.3376761Z\",\r\n \"updatedOn\": \"2019-07-23T01:14:31.8778475Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/db58b8e5-c6ad-4a2a-8342-4190687cbf4a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"db58b8e5-c6ad-4a2a-8342-4190687cbf4a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Desktop Virtualization User\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows user to use the applications in an application group.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.DesktopVirtualization/applicationGroups/useApplications/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-07T00:29:03.8727621Z\",\r\n \"updatedOn\": \"2019-08-07T00:29:03.8727621Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/1d18fff3-a72a-46b5-b4a9-0b38a3cd7e63\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"1d18fff3-a72a-46b5-b4a9-0b38a3cd7e63\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage File Data SMB Share Elevated Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read, write, delete and modify NTFS permission access in Azure Storage file shares over SMB\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read\",\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/write\",\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/delete\",\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/modifypermissions/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-07T01:35:36.9935457Z\",\r\n \"updatedOn\": \"2019-08-07T01:35:36.9935457Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/a7264617-510b-434b-a828-9731dc254ea7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a7264617-510b-434b-a828-9731dc254ea7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Blueprint Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage blueprint definitions, but not assign them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Blueprint/blueprints/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-14T21:55:16.9683949Z\",\r\n \"updatedOn\": \"2019-08-17T00:10:55.7494677Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/41077137-e803-4205-871c-5a86e6a753b4\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"41077137-e803-4205-871c-5a86e6a753b4\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Blueprint Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can assign existing published blueprints, but cannot create new blueprints. NOTE: this only works if the assignment is done with a user-assigned managed identity.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Blueprint/blueprintAssignments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-14T21:56:48.7897875Z\",\r\n \"updatedOn\": \"2019-08-17T00:06:02.6509737Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/437d2ced-4a38-4302-8479-ed2bcb43d090\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"437d2ced-4a38-4302-8479-ed2bcb43d090\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Sentinel Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Azure Sentinel Contributor\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.SecurityInsights/*\",\r\n \"Microsoft.OperationalInsights/workspaces/analytics/query/action\",\r\n \"Microsoft.OperationalInsights/workspaces/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/savedSearches/*\",\r\n \"Microsoft.OperationsManagement/solutions/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/dataSources/read\",\r\n \"Microsoft.Insights/workbooks/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-28T16:39:03.8725173Z\",\r\n \"updatedOn\": \"2020-03-11T15:20:51.6768533Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/ab8e14d6-4a74-4a29-9ba8-549422addade\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ab8e14d6-4a74-4a29-9ba8-549422addade\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Sentinel Responder\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Azure Sentinel Responder\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.SecurityInsights/*/read\",\r\n \"Microsoft.SecurityInsights/dataConnectorsCheckRequirements/action\",\r\n \"Microsoft.SecurityInsights/cases/*\",\r\n \"Microsoft.SecurityInsights/incidents/*\",\r\n \"Microsoft.OperationalInsights/workspaces/analytics/query/action\",\r\n \"Microsoft.OperationalInsights/workspaces/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/dataSources/read\",\r\n \"Microsoft.OperationalInsights/workspaces/savedSearches/read\",\r\n \"Microsoft.OperationsManagement/solutions/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/dataSources/read\",\r\n \"Microsoft.Insights/workbooks/read\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-28T16:54:07.6467264Z\",\r\n \"updatedOn\": \"2020-04-02T08:42:10.2864085Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/3e150937-b8fe-4cfb-8069-0eaf05ecd056\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3e150937-b8fe-4cfb-8069-0eaf05ecd056\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Sentinel Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Azure Sentinel Reader\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.SecurityInsights/*/read\",\r\n \"Microsoft.SecurityInsights/dataConnectorsCheckRequirements/action\",\r\n \"Microsoft.OperationalInsights/workspaces/analytics/query/action\",\r\n \"Microsoft.OperationalInsights/workspaces/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/LinkedServices/read\",\r\n \"Microsoft.OperationalInsights/workspaces/savedSearches/read\",\r\n \"Microsoft.OperationsManagement/solutions/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/dataSources/read\",\r\n \"Microsoft.Insights/workbooks/read\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-28T16:58:50.1132117Z\",\r\n \"updatedOn\": \"2020-04-02T08:34:51.7222706Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8d289c81-5878-46d4-8554-54e1e3d8b5cb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8d289c81-5878-46d4-8554-54e1e3d8b5cb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Workbook Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read workbooks.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"microsoft.insights/workbooks/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-28T20:56:17.680814Z\",\r\n \"updatedOn\": \"2019-08-28T21:43:05.0202124Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b279062a-9be3-42a0-92ae-8b3cf002ec4d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b279062a-9be3-42a0-92ae-8b3cf002ec4d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Workbook Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can save shared workbooks.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Insights/workbooks/write\",\r\n \"Microsoft.Insights/workbooks/delete\",\r\n \"Microsoft.Insights/workbooks/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-28T20:59:42.4820277Z\",\r\n \"updatedOn\": \"2020-01-22T00:05:20.938721Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/e8ddcd69-c73f-4f9f-9844-4100522f16ad\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e8ddcd69-c73f-4f9f-9844-4100522f16ad\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Policy Insights Data Writer (Preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows read access to resource policies and write access to resource component policy events.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/policyassignments/read\",\r\n \"Microsoft.Authorization/policydefinitions/read\",\r\n \"Microsoft.Authorization/policysetdefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.PolicyInsights/checkDataPolicyCompliance/action\",\r\n \"Microsoft.PolicyInsights/policyEvents/logDataEvents/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-09-19T19:35:20.9504127Z\",\r\n \"updatedOn\": \"2019-09-19T19:37:02.5331596Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/66bb4e9e-b016-4a94-8249-4c0511c2be84\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"66bb4e9e-b016-4a94-8249-4c0511c2be84\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SignalR AccessKey Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read SignalR Service Access Keys\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.SignalRService/*/read\",\r\n \"Microsoft.SignalRService/SignalR/listkeys/action\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-09-20T09:33:19.6236874Z\",\r\n \"updatedOn\": \"2019-09-20T09:33:19.6236874Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/04165923-9d83-45d5-8227-78b77b0a687e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"04165923-9d83-45d5-8227-78b77b0a687e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SignalR Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Create, Read, Update, and Delete SignalR service resources\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.SignalRService/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-09-20T09:58:09.0009662Z\",\r\n \"updatedOn\": \"2019-09-20T09:58:09.0009662Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Connected Machine Onboarding\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can onboard Azure Connected Machines.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.HybridCompute/machines/read\",\r\n \"Microsoft.HybridCompute/machines/write\",\r\n \"Microsoft.GuestConfiguration/guestConfigurationAssignments/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-10-23T20:15:07.137287Z\",\r\n \"updatedOn\": \"2019-11-03T18:26:59.2060282Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b64e21ea-ac4e-4cdf-9dc9-5b892992bee7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b64e21ea-ac4e-4cdf-9dc9-5b892992bee7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Connected Machine Resource Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read, write, delete and re-onboard Azure Connected Machines.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.HybridCompute/machines/read\",\r\n \"Microsoft.HybridCompute/machines/write\",\r\n \"Microsoft.HybridCompute/machines/delete\",\r\n \"Microsoft.HybridCompute/machines/reconnect/action\",\r\n \"Microsoft.HybridCompute/machines/extensions/write\",\r\n \"Microsoft.HybridCompute/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-10-23T20:24:59.1474607Z\",\r\n \"updatedOn\": \"2020-03-19T22:39:54.1226122Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/cd570a14-e51a-42ad-bac8-bafd67325302\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"cd570a14-e51a-42ad-bac8-bafd67325302\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Services Registration assignment Delete Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Managed Services Registration Assignment Delete Role allows the managing tenant users to delete the registration assignment assigned to their tenant.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ManagedServices/registrationAssignments/read\",\r\n \"Microsoft.ManagedServices/registrationAssignments/delete\",\r\n \"Microsoft.ManagedServices/operationStatuses/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-10-23T22:33:33.1183469Z\",\r\n \"updatedOn\": \"2019-10-24T21:49:09.3875276Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/91c1777a-f3dc-4fae-b103-61d183457e46\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"91c1777a-f3dc-4fae-b103-61d183457e46\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"App Configuration Data Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows full access to App Configuration data.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.AppConfiguration/configurationStores/*/read\",\r\n \"Microsoft.AppConfiguration/configurationStores/*/write\",\r\n \"Microsoft.AppConfiguration/configurationStores/*/delete\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-10-25T18:41:40.1185063Z\",\r\n \"updatedOn\": \"2019-10-25T18:41:40.1185063Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5ae67dd6-50cb-40e7-96ff-dc2bfa4b606b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5ae67dd6-50cb-40e7-96ff-dc2bfa4b606b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"App Configuration Data Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows read access to App Configuration data.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.AppConfiguration/configurationStores/*/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-10-25T18:45:33.7975332Z\",\r\n \"updatedOn\": \"2019-10-25T18:45:33.7975332Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/516239f1-63e1-4d78-a4de-a74fb236a071\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"516239f1-63e1-4d78-a4de-a74fb236a071\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Kubernetes Cluster - Azure Arc Onboarding\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Role definition to authorize any user/service to create connectedClusters resource\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Kubernetes/connectedClusters/Write\",\r\n \"Microsoft.Kubernetes/connectedClusters/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-11-18T17:00:02.2087147Z\",\r\n \"updatedOn\": \"2020-02-10T22:40:48.3317559Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/34e09817-6cbe-4d01-b1a2-e0eac5743d41\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"34e09817-6cbe-4d01-b1a2-e0eac5743d41\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Experimentation Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Experimentation Contributor\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/read\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/experiment/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/emergencystop/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/read\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/write\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/delete\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-12-13T00:08:08.6679591Z\",\r\n \"updatedOn\": \"2020-07-07T20:17:06.8223079Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/7f646f1b-fa08-80eb-a22b-edd6ce5c915c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7f646f1b-fa08-80eb-a22b-edd6ce5c915c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services QnA Maker Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Let’s you read and test a KB only.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\",\r\n \"Microsoft.Authorization/roleAssignments/read\",\r\n \"Microsoft.Authorization/roleDefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-12-17T18:26:12.3329439Z\",\r\n \"updatedOn\": \"2020-05-08T12:03:46.9266538Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/466ccd10-b268-4a11-b098-b4849f024126\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"466ccd10-b268-4a11-b098-b4849f024126\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services QnA Maker Editor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Let’s you create, edit, import and export a KB. You cannot publish or delete a KB.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\",\r\n \"Microsoft.Authorization/roleAssignments/read\",\r\n \"Microsoft.Authorization/roleDefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/create/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/train/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/alterations/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/refreshkeys/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/operations/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/create/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/train/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/refreshkeys/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/operations/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-12-17T18:27:30.6434556Z\",\r\n \"updatedOn\": \"2020-05-08T12:02:34.0065552Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/f4cc2bf9-21be-47a1-bdf1-5c5804381025\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f4cc2bf9-21be-47a1-bdf1-5c5804381025\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Experimentation Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Experimentation Administrator\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/admin/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/read\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/write\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/delete\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/experimentadmin/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/experiment/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/emergencystop/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/read\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/write\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/delete\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/admin/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-12-18T22:46:33.1116612Z\",\r\n \"updatedOn\": \"2020-04-22T20:10:20.1216929Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/7f646f1b-fa08-80eb-a33b-edd6ce5c915c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7f646f1b-fa08-80eb-a33b-edd6ce5c915c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Remote Rendering Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Provides user with conversion, manage session, rendering and diagnostics capabilities for Azure Remote Rendering\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/convert/action\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/convert/read\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/convert/delete\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/read\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/action\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/delete\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/render/read\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/diagnostic/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-01-23T18:15:31.3450348Z\",\r\n \"updatedOn\": \"2020-01-23T18:15:31.3450348Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/3df8b902-2a6f-47c7-8cc5-360e9b272a7e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3df8b902-2a6f-47c7-8cc5-360e9b272a7e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Remote Rendering Client\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Provides user with manage session, rendering and diagnostics capabilities for Azure Remote Rendering.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/read\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/action\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/delete\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/render/read\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/diagnostic/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-01-23T18:32:52.7069824Z\",\r\n \"updatedOn\": \"2020-01-23T18:32:52.7069824Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/d39065c4-c120-43c9-ab0a-63eed9795f0a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"d39065c4-c120-43c9-ab0a-63eed9795f0a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Application Contributor Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for creating managed application resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Solutions/applications/*\",\r\n \"Microsoft.Solutions/register/action\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/*\",\r\n \"Microsoft.Resources/deployments/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-08T03:39:11.8933879Z\",\r\n \"updatedOn\": \"2020-03-23T02:12:30.0853051Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/641177b8-a67a-45b9-a033-47bc880bb21e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"641177b8-a67a-45b9-a033-47bc880bb21e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Security Assessment Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you push assessments to Security Center\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Security/assessments/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-13T08:23:47.7656161Z\",\r\n \"updatedOn\": \"2020-02-13T08:23:47.7656161Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/612c2aa1-cb24-443b-ac28-3ab7272de6f5\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"612c2aa1-cb24-443b-ac28-3ab7272de6f5\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Tag Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage tags on entities, without providing access to the entities themselves.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/resources/read\",\r\n \"Microsoft.Resources/subscriptions/resources/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Resources/tags/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-18T23:19:19.2977644Z\",\r\n \"updatedOn\": \"2020-02-19T00:04:58.9214962Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/4a9ae827-6dc8-4573-8ac7-8239d42aa03f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4a9ae827-6dc8-4573-8ac7-8239d42aa03f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Integration Service Environment Developer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows developers to create and update workflows, integration accounts and API connections in integration service environments.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Logic/integrationServiceEnvironments/read\",\r\n \"Microsoft.Logic/integrationServiceEnvironments/join/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-20T21:09:00.5627875Z\",\r\n \"updatedOn\": \"2020-02-20T21:36:24.619073Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/c7aa55d3-1abb-444a-a5ca-5e51e485d6ec\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c7aa55d3-1abb-444a-a5ca-5e51e485d6ec\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Integration Service Environment Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage integration service environments, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Logic/integrationServiceEnvironments/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-20T21:10:44.4008319Z\",\r\n \"updatedOn\": \"2020-02-20T21:41:56.7983599Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/a41e2c5b-bd99-4a07-88f4-9bf657a760b8\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a41e2c5b-bd99-4a07-88f4-9bf657a760b8\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Marketplace Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Administrator of marketplace resource provider\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Marketplace/privateStores/write\",\r\n \"Microsoft.Marketplace/privateStores/action\",\r\n \"Microsoft.Marketplace/privateStores/delete\",\r\n \"Microsoft.Marketplace/privateStores/offers/write\",\r\n \"Microsoft.Marketplace/privateStores/offers/action\",\r\n \"Microsoft.Marketplace/privateStores/offers/delete\",\r\n \"Microsoft.Authorization/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-26T14:19:50.9681015Z\",\r\n \"updatedOn\": \"2020-06-23T05:54:42.8370671Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/dd920d6d-f481-47f1-b461-f338c46b2d9f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"dd920d6d-f481-47f1-b461-f338c46b2d9f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service Contributor Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Grants access to read and write Azure Kubernetes Service clusters\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerService/managedClusters/read\",\r\n \"Microsoft.ContainerService/managedClusters/write\",\r\n \"Microsoft.Resources/deployments/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-27T19:27:15.073997Z\",\r\n \"updatedOn\": \"2020-02-28T02:34:14.5162305Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/ed7f3fbd-7b88-4dd4-9017-9adb7ce333f8\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ed7f3fbd-7b88-4dd4-9017-9adb7ce333f8\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Digital Twins Reader (Preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read-only role for Digital Twins data-plane properties\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.DigitalTwins/digitaltwins/read\",\r\n \"Microsoft.DigitalTwins/digitaltwins/relationships/read\",\r\n \"Microsoft.DigitalTwins/eventroutes/read\",\r\n \"Microsoft.DigitalTwins/models/read\",\r\n \"Microsoft.DigitalTwins/query/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-10T23:48:14.7057381Z\",\r\n \"updatedOn\": \"2020-07-01T17:50:50.2393244Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/d57506d4-4c8d-48b1-8587-93c323f6a5a3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"d57506d4-4c8d-48b1-8587-93c323f6a5a3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Digital Twins Owner (Preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Full access role for Digital Twins data-plane\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.DigitalTwins/eventroutes/*\",\r\n \"Microsoft.DigitalTwins/digitaltwins/*\",\r\n \"Microsoft.DigitalTwins/digitaltwins/commands/*\",\r\n \"Microsoft.DigitalTwins/digitaltwins/relationships/*\",\r\n \"Microsoft.DigitalTwins/models/*\",\r\n \"Microsoft.DigitalTwins/query/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-10T23:49:33.782193Z\",\r\n \"updatedOn\": \"2020-03-10T23:49:33.782193Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/bcd981a7-7f74-457b-83e1-cceb9e632ffe\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"bcd981a7-7f74-457b-83e1-cceb9e632ffe\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Hierarchy Settings Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows users to edit and delete Hierarchy Settings\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Management/managementGroups/settings/write\",\r\n \"Microsoft.Management/managementGroups/settings/delete\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-13T23:55:11.0212387Z\",\r\n \"updatedOn\": \"2020-03-13T23:58:46.9249866Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/350f8d15-c687-4448-8ae1-157740a3936d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"350f8d15-c687-4448-8ae1-157740a3936d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"FHIR Data Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Role allows user or principal full access to FHIR Data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.HealthcareApis/services/fhir/resources/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-17T18:35:04.4949547Z\",\r\n \"updatedOn\": \"2020-03-17T18:35:04.4949547Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5a1fc7df-4bf1-4951-a576-89034ee01acd\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5a1fc7df-4bf1-4951-a576-89034ee01acd\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"FHIR Data Exporter\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Role allows user or principal to read and export FHIR Data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.HealthcareApis/services/fhir/resources/read\",\r\n \"Microsoft.HealthcareApis/services/fhir/resources/export/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-17T18:45:01.9764073Z\",\r\n \"updatedOn\": \"2020-03-19T20:29:56.9958536Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/3db33094-8700-4567-8da5-1501d4e7e843\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3db33094-8700-4567-8da5-1501d4e7e843\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"FHIR Data Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Role allows user or principal to read FHIR Data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.HealthcareApis/services/fhir/resources/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-17T18:49:04.8353499Z\",\r\n \"updatedOn\": \"2020-03-17T18:49:04.8353499Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/4c8d0bbc-75d3-4935-991f-5f3c56d81508\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4c8d0bbc-75d3-4935-991f-5f3c56d81508\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"FHIR Data Writer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Role allows user or principal to read and write FHIR Data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.HealthcareApis/services/fhir/resources/*\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.HealthcareApis/services/fhir/resources/hardDelete/action\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-17T18:55:35.2413335Z\",\r\n \"updatedOn\": \"2020-03-17T18:55:35.2413335Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/3f88fce4-5892-4214-ae73-ba5294559913\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3f88fce4-5892-4214-ae73-ba5294559913\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Experimentation Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Experimentation Reader\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Experimentation/experimentWorkspaces/read\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-25T18:05:14.8375678Z\",\r\n \"updatedOn\": \"2020-04-22T21:20:46.2737555Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/49632ef5-d9ac-41f4-b8e7-bbe587fa74a1\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"49632ef5-d9ac-41f4-b8e7-bbe587fa74a1\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Object Understanding Account Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Provides user with ingestion capabilities for Azure Object Understanding.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/ObjectUnderstandingAccounts/ingest/action\",\r\n \"Microsoft.MixedReality/ObjectUnderstandingAccounts/ingest/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-04-22T19:15:09.0697923Z\",\r\n \"updatedOn\": \"2020-04-22T19:15:09.0697923Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/4dd61c23-6743-42fe-a388-d8bdd41cb745\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4dd61c23-6743-42fe-a388-d8bdd41cb745\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Maps Data Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Grants access to read, write, and delete access to map related data from an Azure maps account.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Maps/accounts/*/read\",\r\n \"Microsoft.Maps/accounts/*/write\",\r\n \"Microsoft.Maps/accounts/*/delete\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-07T20:55:05.064541Z\",\r\n \"updatedOn\": \"2020-05-07T20:55:05.064541Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8f5e0ce6-4f7b-4dcf-bddf-e6f48634a204\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8f5e0ce6-4f7b-4dcf-bddf-e6f48634a204\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Custom Vision Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Full access to the project, including the ability to view, create, edit, or delete projects.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-08T23:47:07.0779345Z\",\r\n \"updatedOn\": \"2020-05-08T23:47:07.0779345Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/c1ff6cc2-c111-46fe-8896-e0ef812ad9f3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c1ff6cc2-c111-46fe-8896-e0ef812ad9f3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Custom Vision Deployment\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Publish, unpublish or export models. Deployment can view the project but can’t update.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/*/read\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/publish/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/export/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/quicktest/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/classify/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/detect/*\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-09T01:31:05.952862Z\",\r\n \"updatedOn\": \"2020-05-09T01:31:05.952862Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5c4089e1-6d96-4d2f-b296-c1bc7137275f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5c4089e1-6d96-4d2f-b296-c1bc7137275f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Custom Vision Labeler\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"View, edit training images and create, add, remove, or delete the image tags. Labelers can view the project but can’t update anything other than training images and tags.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/*/read\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/images/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/tags/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/images/suggested/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/tagsandregions/suggestions/action\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-09T01:33:20.8278896Z\",\r\n \"updatedOn\": \"2020-05-09T01:33:20.8278896Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/88424f51-ebe7-446f-bc41-7fa16989e96c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"88424f51-ebe7-446f-bc41-7fa16989e96c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Custom Vision Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read-only actions in the project. Readers can’t create or update the project.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/*/read\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-09T01:34:18.5328818Z\",\r\n \"updatedOn\": \"2020-05-09T01:34:18.5328818Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/93586559-c37d-4a6b-ba08-b9f0940c2d73\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"93586559-c37d-4a6b-ba08-b9f0940c2d73\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Custom Vision Trainer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"View, edit projects and train the models, including the ability to publish, unpublish, export the models. Trainers can’t create or delete the project.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/*\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/action\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/delete\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/import/action\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-09T01:35:13.8147804Z\",\r\n \"updatedOn\": \"2020-05-09T01:35:13.8147804Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/0a5ae4ab-0d65-4eeb-be61-29fc9b54394b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0a5ae4ab-0d65-4eeb-be61-29fc9b54394b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Administrator (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can perform any action on certificates, keys and secrets of a key vault, except manage permissions.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.KeyVault/checkNameAvailability/read\",\r\n \"Microsoft.KeyVault/deletedVaults/read\",\r\n \"Microsoft.KeyVault/locations/*/read\",\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:46.2349235Z\",\r\n \"updatedOn\": \"2020-05-20T19:40:18.9511304Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/00482a5a-887f-4fb3-b363-3b7fe8e74483\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"00482a5a-887f-4fb3-b363-3b7fe8e74483\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Crypto Officer (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can perform any action on the keys of a key vault, except manage permissions.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.KeyVault/checkNameAvailability/read\",\r\n \"Microsoft.KeyVault/deletedVaults/read\",\r\n \"Microsoft.KeyVault/locations/*/read\",\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/keys/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.0099249Z\",\r\n \"updatedOn\": \"2020-05-20T19:44:51.5886988Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/14b46e9e-c2b7-41b4-b07b-48a6ebf60603\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"14b46e9e-c2b7-41b4-b07b-48a6ebf60603\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Crypto User (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can perform cryptographic operations on keys and certificates.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/keys/read\",\r\n \"Microsoft.KeyVault/vaults/keys/update/action\",\r\n \"Microsoft.KeyVault/vaults/keys/backup/action\",\r\n \"Microsoft.KeyVault/vaults/keys/encrypt/action\",\r\n \"Microsoft.KeyVault/vaults/keys/decrypt/action\",\r\n \"Microsoft.KeyVault/vaults/keys/wrap/action\",\r\n \"Microsoft.KeyVault/vaults/keys/unwrap/action\",\r\n \"Microsoft.KeyVault/vaults/keys/sign/action\",\r\n \"Microsoft.KeyVault/vaults/keys/verify/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.0699268Z\",\r\n \"updatedOn\": \"2020-05-20T19:48:54.8672037Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/12338af0-0e69-4776-bea7-57ae8d297424\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"12338af0-0e69-4776-bea7-57ae8d297424\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Secrets Officer (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can perform any action on the secrets of a key vault, except manage permissions.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.KeyVault/checkNameAvailability/read\",\r\n \"Microsoft.KeyVault/deletedVaults/read\",\r\n \"Microsoft.KeyVault/locations/*/read\",\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/secrets/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.1449242Z\",\r\n \"updatedOn\": \"2020-05-20T19:51:40.033812Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b86a8fe4-44ce-4948-aee5-eccb2c155cd7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b86a8fe4-44ce-4948-aee5-eccb2c155cd7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Secrets User (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read secret contents.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/secrets/getSecret/action\",\r\n \"Microsoft.KeyVault/vaults/secrets/readMetadata/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.2049241Z\",\r\n \"updatedOn\": \"2020-05-20T19:53:53.9617292Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/4633458b-17de-408a-b874-0445c86b69e6\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4633458b-17de-408a-b874-0445c86b69e6\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Certificates Officer (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can perform any action on the certificates of a key vault, except manage permissions.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.KeyVault/checkNameAvailability/read\",\r\n \"Microsoft.KeyVault/deletedVaults/read\",\r\n \"Microsoft.KeyVault/locations/*/read\",\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/certificatecas/*\",\r\n \"Microsoft.KeyVault/vaults/certificates/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.2499247Z\",\r\n \"updatedOn\": \"2020-05-20T19:56:22.0363761Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/a4417e6f-fecd-4de8-b567-7b0420556985\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a4417e6f-fecd-4de8-b567-7b0420556985\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Reader (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read metadata of key vaults and its certificates, keys and secrets. Cannot read sensitive values such as secret contents or key material.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.KeyVault/checkNameAvailability/read\",\r\n \"Microsoft.KeyVault/deletedVaults/read\",\r\n \"Microsoft.KeyVault/locations/*/read\",\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/vaults/secrets/readMetadata/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.2949294Z\",\r\n \"updatedOn\": \"2020-05-20T19:58:55.0084184Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/21090545-7ca7-4776-b22c-e363652d74d2\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"21090545-7ca7-4776-b22c-e363652d74d2\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Crypto Service Encryption (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read metadata of keys and perform wrap/unwrap operations.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/keys/read\",\r\n \"Microsoft.KeyVault/vaults/keys/wrap/action\",\r\n \"Microsoft.KeyVault/vaults/keys/unwrap/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-20T20:55:19.239847Z\",\r\n \"updatedOn\": \"2020-05-20T20:55:19.239847Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/e147488a-f6f5-4113-8e2d-b22465e65bf6\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e147488a-f6f5-4113-8e2d-b22465e65bf6\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Arc Kubernetes Viewer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you view all resources in cluster/namespace, except secrets.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/*/read\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/secrets/read\",\r\n \"Microsoft.Kubernetes/connectedClusters/clusterconfig.azure.com/azureclusteridentityrequests/read\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-12T20:51:12.8801199Z\",\r\n \"updatedOn\": \"2020-06-12T20:51:12.8801199Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/63f0a09d-1495-4db4-a681-037d84835eb4\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"63f0a09d-1495-4db4-a681-037d84835eb4\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Arc Kubernetes Writer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you update everything in cluster/namespace, except (cluster)roles and (cluster)role bindings.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/*/read\",\r\n \"Microsoft.Kubernetes/connectedClusters/*/write\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/rbac.authorization.k8s.io/*/read\",\r\n \"Microsoft.Kubernetes/connectedClusters/rbac.authorization.k8s.io/*/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/namespaces/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/resourcequotas/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/certificates.k8s.io/certificatesigningrequests/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/policy/podsecuritypolicies/write\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-12T20:53:50.6749823Z\",\r\n \"updatedOn\": \"2020-06-12T20:53:50.6749823Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/5b999177-9696-4545-85c7-50de3797e5a1\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5b999177-9696-4545-85c7-50de3797e5a1\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Arc Kubernetes Cluster Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage all resources in the cluster.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-12T20:55:30.9910462Z\",\r\n \"updatedOn\": \"2020-06-12T20:55:30.9910462Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/8393591c-06b9-48a2-a542-1bd6b377f6a2\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8393591c-06b9-48a2-a542-1bd6b377f6a2\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Arc Kubernetes Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage all resources under cluster/namespace, except update or delete resource quotas and namespaces.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/*\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/resourcequotas/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/resourcequotas/delete\",\r\n \"Microsoft.Kubernetes/connectedClusters/namespaces/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/namespaces/delete\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-12T20:57:06.0391177Z\",\r\n \"updatedOn\": \"2020-06-12T20:57:06.0391177Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/dffb1e0c-446f-4dde-a09f-99eb5cc68b96\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"dffb1e0c-446f-4dde-a09f-99eb5cc68b96\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service RBAC Cluster Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage all resources in the cluster.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.ContainerService/managedClusters/listClusterUserCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-02T17:47:24.4071415Z\",\r\n \"updatedOn\": \"2020-07-02T17:47:24.4071415Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/b1ff04bb-8a4e-4dc4-8eb5-8693973ce19b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b1ff04bb-8a4e-4dc4-8eb5-8693973ce19b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service RBAC Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage all resources under cluster/namespace, except update or delete resource quotas and namespaces.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.ContainerService/managedClusters/listClusterUserCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/*\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/resourcequotas/write\",\r\n \"Microsoft.ContainerService/managedClusters/resourcequotas/delete\",\r\n \"Microsoft.ContainerService/managedClusters/namespaces/write\",\r\n \"Microsoft.ContainerService/managedClusters/namespaces/delete\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-02T17:50:30.4020311Z\",\r\n \"updatedOn\": \"2020-07-02T17:50:30.4020311Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/3498e952-d568-435e-9b2c-8d77e338d7f7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3498e952-d568-435e-9b2c-8d77e338d7f7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service RBAC Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you view all resources in cluster/namespace, except secrets.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.ContainerService/managedClusters/listClusterUserCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/*/read\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/rbac.authorization.k8s.io/*/read\",\r\n \"Microsoft.ContainerService/managedClusters/rbac.authorization.k8s.io/*/write\",\r\n \"Microsoft.ContainerService/managedClusters/secrets/*\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-02T17:53:05.5728294Z\",\r\n \"updatedOn\": \"2020-07-07T16:40:37.2744607Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/7f6c6a51-bcf8-42ba-9220-52d62157d7db\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7f6c6a51-bcf8-42ba-9220-52d62157d7db\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service RBAC Writer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you update everything in cluster/namespace, except resource quotas, namespaces, pod security policies, certificate signing requests, (cluster)roles and (cluster)role bindings.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.ContainerService/managedClusters/listClusterUserCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/*/read\",\r\n \"Microsoft.ContainerService/managedClusters/*/write\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/rbac.authorization.k8s.io/*/read\",\r\n \"Microsoft.ContainerService/managedClusters/rbac.authorization.k8s.io/*/write\",\r\n \"Microsoft.ContainerService/managedClusters/namespaces/write\",\r\n \"Microsoft.ContainerService/managedClusters/resourcequotas/write\",\r\n \"Microsoft.ContainerService/managedClusters/certificates.k8s.io/certificatesigningrequests/write\",\r\n \"Microsoft.ContainerService/managedClusters/policy/podsecuritypolicies/write\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-02T17:54:51.9644983Z\",\r\n \"updatedOn\": \"2020-07-02T17:54:51.9644983Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/a7ffa36f-339b-4b5c-8bdf-e2c188b2c0eb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a7ffa36f-339b-4b5c-8bdf-e2c188b2c0eb\"\r\n }\r\n ]\r\n}", + "StatusCode": 200 + }, + { + "RequestUri": "//subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments/734de5f5-c680-41c0-8beb-67b98c3539d1?api-version=2020-04-01-preview", + "EncodedRequestUri": "Ly9zdWJzY3JpcHRpb25zLzQwMDRhOWZkLWQ1OGUtNDhkYy1hZWIyLTRhNGFlYzU4NjA2Zi9yZXNvdXJjZUdyb3Vwcy9kYW9yb3pjb19idWdfcmVwcm8vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3JvbGVBc3NpZ25tZW50cy83MzRkZTVmNS1jNjgwLTQxYzAtOGJlYi02N2I5OGMzNTM5ZDE/YXBpLXZlcnNpb249MjAyMC0wNC0wMS1wcmV2aWV3", + "RequestMethod": "DELETE", + "RequestBody": "", + "RequestHeaders": { + "x-ms-client-request-id": [ + "2a430ff5-158f-42c4-b3d7-e9f0b81dd641" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.28928.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.12.0.0" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-request-id": [ + "eb2a3abb-5a94-483d-b34b-dbe8bf4aafd9" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Set-Cookie": [ + "x-ms-gateway-slice=Production; path=/; secure; HttpOnly; SameSite=None" + ], + "x-ms-ratelimit-remaining-subscription-deletes": [ + "14999" + ], + "x-ms-correlation-request-id": [ + "cc3dc399-d9fb-4897-bd29-90c5fa0c59bc" + ], + "x-ms-routing-request-id": [ + "WESTUS:20200709T230033Z:cc3dc399-d9fb-4897-bd29-90c5fa0c59bc" + ], + "Date": [ + "Thu, 09 Jul 2020 23:00:32 GMT" + ], + "Content-Length": [ + "1084" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"properties\": {\r\n \"roleDefinitionId\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"principalId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"principalType\": \"User\",\r\n \"scope\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg\",\r\n \"condition\": \"@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container'\",\r\n \"conditionVersion\": \"1.0\",\r\n \"createdOn\": \"2020-07-09T23:00:30.4997866Z\",\r\n \"updatedOn\": \"2020-07-09T23:00:30.4997866Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"canDelegate\": false,\r\n \"delegatedManagedIdentityResourceId\": null,\r\n \"description\": \"This test should not fail\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments/734de5f5-c680-41c0-8beb-67b98c3539d1\",\r\n \"type\": \"Microsoft.Authorization/roleAssignments\",\r\n \"name\": \"734de5f5-c680-41c0-8beb-67b98c3539d1\"\r\n}", + "StatusCode": 200 + } + ], + "Names": {}, + "Variables": { + "SubscriptionId": "4e5329a6-39ce-4e13-b12e-11b30f015986" + } +} \ No newline at end of file diff --git a/src/Resources/Resources.Test/SessionRecords/Microsoft.Azure.Commands.Resources.Test.ScenarioTests.RoleAssignmentTests/RaWithV2Conditions.json b/src/Resources/Resources.Test/SessionRecords/Microsoft.Azure.Commands.Resources.Test.ScenarioTests.RoleAssignmentTests/RaWithV2Conditions.json new file mode 100644 index 000000000000..9421846bfd5d --- /dev/null +++ b/src/Resources/Resources.Test/SessionRecords/Microsoft.Azure.Commands.Resources.Test.ScenarioTests.RoleAssignmentTests/RaWithV2Conditions.json @@ -0,0 +1,518 @@ +{ + "Entries": [ + { + "RequestUri": "//subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments/734de5f5-c680-41c0-8beb-67b98c3539d2?api-version=2020-04-01-preview", + "EncodedRequestUri": "Ly9zdWJzY3JpcHRpb25zLzQwMDRhOWZkLWQ1OGUtNDhkYy1hZWIyLTRhNGFlYzU4NjA2Zi9yZXNvdXJjZUdyb3Vwcy9kYW9yb3pjb19idWdfcmVwcm8vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3JvbGVBc3NpZ25tZW50cy83MzRkZTVmNS1jNjgwLTQxYzAtOGJlYi02N2I5OGMzNTM5ZDI/YXBpLXZlcnNpb249MjAyMC0wNC0wMS1wcmV2aWV3", + "RequestMethod": "PUT", + "RequestBody": "{\r\n \"properties\": {\r\n \"roleDefinitionId\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"principalId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"canDelegate\": false,\r\n \"description\": \"This test should not fail\",\r\n \"condition\": \"@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:Name] StringEqualsIgnoreCase 'foo_storage_container'\",\r\n \"conditionVersion\": \"2.0\"\r\n }\r\n}", + "RequestHeaders": { + "x-ms-client-request-id": [ + "074d02d5-7d2f-4d8f-8a19-4f41b299f4ff" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.29017.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.12.0.0" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Content-Length": [ + "538" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-request-id": [ + "1725c752-4392-4e53-b9a7-8f81b948329d" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Set-Cookie": [ + "x-ms-gateway-slice=Production; path=/; SameSite=None; secure; HttpOnly" + ], + "x-ms-ratelimit-remaining-subscription-writes": [ + "1199" + ], + "x-ms-correlation-request-id": [ + "9866f579-83dd-49ea-bfdc-6b8d0568a571" + ], + "x-ms-routing-request-id": [ + "WESTUS:20200717T010323Z:9866f579-83dd-49ea-bfdc-6b8d0568a571" + ], + "Date": [ + "Fri, 17 Jul 2020 01:03:23 GMT" + ], + "Content-Length": [ + "1041" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"properties\": {\r\n \"roleDefinitionId\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"principalId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"principalType\": \"User\",\r\n \"scope\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg\",\r\n \"condition\": \"@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:Name] StringEqualsIgnoreCase 'foo_storage_container'\",\r\n \"conditionVersion\": \"2.0\",\r\n \"createdOn\": \"2020-07-17T01:03:22.7603328Z\",\r\n \"updatedOn\": \"2020-07-17T01:03:22.7603328Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"canDelegate\": false,\r\n \"delegatedManagedIdentityResourceId\": null,\r\n \"description\": \"This test should not fail\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments/734de5f5-c680-41c0-8beb-67b98c3539d2\",\r\n \"type\": \"Microsoft.Authorization/roleAssignments\",\r\n \"name\": \"734de5f5-c680-41c0-8beb-67b98c3539d2\"\r\n}", + "StatusCode": 201 + }, + { + "RequestUri": "//subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7?api-version=2018-01-01-preview", + "EncodedRequestUri": "Ly9zdWJzY3JpcHRpb25zLzQwMDRhOWZkLWQ1OGUtNDhkYy1hZWIyLTRhNGFlYzU4NjA2Zi9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcm9sZURlZmluaXRpb25zLzAzNTNlZTBhLTE5YWUtNDM4MC1iYTNkLWQ1NDc2N2M3NWQ1Yj9hcGktdmVyc2lvbj0yMDE4LTAxLTAxLXByZXZpZXc=", + "RequestMethod": "GET", + "RequestBody": "", + "RequestHeaders": { + "x-ms-client-request-id": [ + "7ddf49f5-ae80-42b0-8ad2-9261c3a0991b" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.29017.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.12.0.0" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-request-id": [ + "864abfb6-b157-41b7-8fed-01d0c985437d" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Set-Cookie": [ + "x-ms-gateway-slice=Production; path=/; secure; HttpOnly; SameSite=None" + ], + "x-ms-ratelimit-remaining-subscription-reads": [ + "11999" + ], + "x-ms-correlation-request-id": [ + "8a10a832-17e3-4831-858c-8dcccafbde24" + ], + "x-ms-routing-request-id": [ + "WESTUS:20200717T010323Z:8a10a832-17e3-4831-858c-8dcccafbde24" + ], + "Date": [ + "Fri, 17 Jul 2020 01:03:23 GMT" + ], + "Content-Length": [ + "873" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"properties\": {\r\n \"roleName\": \"Daoroz-Custom1\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"A role to use when testing various things\\nIt does not grant any real permissions, just the ability to read role definitions\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/roleDefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-08T17:44:15.2525393Z\",\r\n \"updatedOn\": \"2020-07-08T17:44:15.2525393Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"acdd72a7-3385-48ef-bd42-f606fba81ae7\"\r\n}", + "StatusCode": 200 + }, + { + "RequestUri": "/395544B0-BF41-429D-921F-E1CA2252FCF4/getObjectsByObjectIds?api-version=1.6", + "EncodedRequestUri": "LzEyNzNhZGVmLTAwYTMtNDA4Ni1hNTFhLWRiY2NlMTg1N2QzNi9nZXRPYmplY3RzQnlPYmplY3RJZHM/YXBpLXZlcnNpb249MS42", + "RequestMethod": "POST", + "RequestBody": "{\r\n \"objectIds\": [\r\n \"01072e9b-c4a1-4246-a756-031b529bbf66\"\r\n ],\r\n \"includeDirectoryObjectReferences\": true\r\n}", + "RequestHeaders": { + "x-ms-client-request-id": [ + "4b8197c0-ecd2-444d-98a1-02fc4905bae4" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.29017.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Graph.RBAC.GraphRbacManagementClient/3.5.0.0" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Content-Length": [ + "116" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "ocp-aad-diagnostics-server-name": [ + "EcjSyd8qeLRzv+zvYNP4NsM1iZg1KfnPtq+UxfEDZwU=" + ], + "request-id": [ + "26d63f6c-d0d7-49ca-9e98-95d6b428e9fc" + ], + "client-request-id": [ + "4b8197c0-ecd2-444d-98a1-02fc4905bae4" + ], + "x-ms-dirapi-data-contract-version": [ + "1.6" + ], + "ocp-aad-session-key": [ + "0-VH5eL2Pkiq2Z17Opabb7IPjM89KkwmTnfRo4w4b8FgvdtaQPYkKucxwL6HmRWTEOAgp5OwDV2-rglQKHdYqd-qPja9bSZYSxN20WzjlTw1-jy2E7SRnhHB9bmH6QLO.uCS_cYyiUukHl47eEtI89-b6SSFO9t6K95HTypRySr8" + ], + "x-aad-resource-unit": [ + "3" + ], + "DataServiceVersion": [ + "3.0;" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Access-Control-Allow-Origin": [ + "*" + ], + "X-AspNet-Version": [ + "4.0.30319" + ], + "X-Powered-By": [ + "ASP.NET" + ], + "Duration": [ + "830023" + ], + "Date": [ + "Fri, 17 Jul 2020 01:03:23 GMT" + ], + "Content-Type": [ + "application/json; odata=minimalmetadata; streaming=true; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Content-Length": [ + "1511" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"odata.metadata\": \"https://graph.windows.net/1273adef-00a3-4086-a51a-dbcce1857d36/$metadata#directoryObjects\",\r\n \"value\": [\r\n {\r\n \"odata.type\": \"Microsoft.DirectoryServices.User\",\r\n \"objectType\": \"User\",\r\n \"objectId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"deletionTimestamp\": null,\r\n \"accountEnabled\": true,\r\n \"ageGroup\": null,\r\n \"assignedLicenses\": [],\r\n \"assignedPlans\": [],\r\n \"city\": null,\r\n \"companyName\": null,\r\n \"consentProvidedForMinor\": null,\r\n \"country\": null,\r\n \"createdDateTime\": \"2020-07-06T23:49:47Z\",\r\n \"creationType\": null,\r\n \"department\": null,\r\n \"dirSyncEnabled\": null,\r\n \"displayName\": \"ddd\",\r\n \"employeeId\": null,\r\n \"facsimileTelephoneNumber\": null,\r\n \"givenName\": null,\r\n \"immutableId\": null,\r\n \"isCompromised\": null,\r\n \"jobTitle\": null,\r\n \"lastDirSyncTime\": null,\r\n \"legalAgeGroupClassification\": null,\r\n \"mail\": null,\r\n \"mailNickname\": \"dagoroz-bug-repro\",\r\n \"mobile\": null,\r\n \"onPremisesDistinguishedName\": null,\r\n \"onPremisesSecurityIdentifier\": null,\r\n \"otherMails\": [],\r\n \"passwordPolicies\": null,\r\n \"passwordProfile\": {\r\n \"password\": null,\r\n \"forceChangePasswordNextLogin\": true,\r\n \"enforceChangePasswordPolicy\": false\r\n },\r\n \"physicalDeliveryOfficeName\": null,\r\n \"postalCode\": null,\r\n \"preferredLanguage\": null,\r\n \"provisionedPlans\": [],\r\n \"provisioningErrors\": [],\r\n \"proxyAddresses\": [],\r\n \"refreshTokensValidFromDateTime\": \"2020-07-06T23:49:47Z\",\r\n \"showInAddressList\": null,\r\n \"signInNames\": [],\r\n \"sipProxyAddress\": null,\r\n \"state\": null,\r\n \"streetAddress\": null,\r\n \"surname\": null,\r\n \"telephoneNumber\": null,\r\n \"usageLocation\": null,\r\n \"userIdentities\": [],\r\n \"userPrincipalName\": \"dagoroz-bug-repro@rbacclitest.onmicrosoft.com\",\r\n \"userState\": null,\r\n \"userStateChangedOn\": null,\r\n \"userType\": \"Member\"\r\n }\r\n ]\r\n}", + "StatusCode": 200 + }, + { + "RequestUri": "/395544B0-BF41-429D-921F-E1CA2252FCF4/getObjectsByObjectIds?api-version=1.6", + "EncodedRequestUri": "LzEyNzNhZGVmLTAwYTMtNDA4Ni1hNTFhLWRiY2NlMTg1N2QzNi9nZXRPYmplY3RzQnlPYmplY3RJZHM/YXBpLXZlcnNpb249MS42", + "RequestMethod": "POST", + "RequestBody": "{\r\n \"objectIds\": [\r\n \"01072e9b-c4a1-4246-a756-031b529bbf66\"\r\n ],\r\n \"includeDirectoryObjectReferences\": true\r\n}", + "RequestHeaders": { + "x-ms-client-request-id": [ + "1c94e1b1-39e4-40ee-8c1a-bd4328b186cf" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.29017.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Graph.RBAC.GraphRbacManagementClient/3.5.0.0" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Content-Length": [ + "116" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "ocp-aad-diagnostics-server-name": [ + "MXtk2KRUe+Pbxfgq6k/d269y526UaR5dGfiehIUvvGs=" + ], + "request-id": [ + "876a2491-05b3-4768-8cfb-6edbf9972c78" + ], + "client-request-id": [ + "1c94e1b1-39e4-40ee-8c1a-bd4328b186cf" + ], + "x-ms-dirapi-data-contract-version": [ + "1.6" + ], + "ocp-aad-session-key": [ + "B9hwi8jT43uKjl_PQ3nWeBLwjlLIGPYWIHr_4hOvE9U0YlLZokL-H7UGSySU6XpH4sZmvjiP-OM4EM4rebFDV_INTz9ahWO4wHUsI4oL_JxWkUXYac5Z1szYEjdcpbWq.w7g2qlYybdquhayfKeistSp7UUU7wjitrW5pwCaR-u8" + ], + "x-aad-resource-unit": [ + "3" + ], + "DataServiceVersion": [ + "3.0;" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Access-Control-Allow-Origin": [ + "*" + ], + "X-AspNet-Version": [ + "4.0.30319" + ], + "X-Powered-By": [ + "ASP.NET" + ], + "Duration": [ + "342918" + ], + "Date": [ + "Fri, 17 Jul 2020 01:03:24 GMT" + ], + "Content-Type": [ + "application/json; odata=minimalmetadata; streaming=true; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Content-Length": [ + "1511" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"odata.metadata\": \"https://graph.windows.net/1273adef-00a3-4086-a51a-dbcce1857d36/$metadata#directoryObjects\",\r\n \"value\": [\r\n {\r\n \"odata.type\": \"Microsoft.DirectoryServices.User\",\r\n \"objectType\": \"User\",\r\n \"objectId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"deletionTimestamp\": null,\r\n \"accountEnabled\": true,\r\n \"ageGroup\": null,\r\n \"assignedLicenses\": [],\r\n \"assignedPlans\": [],\r\n \"city\": null,\r\n \"companyName\": null,\r\n \"consentProvidedForMinor\": null,\r\n \"country\": null,\r\n \"createdDateTime\": \"2020-07-06T23:49:47Z\",\r\n \"creationType\": null,\r\n \"department\": null,\r\n \"dirSyncEnabled\": null,\r\n \"displayName\": \"ddd\",\r\n \"employeeId\": null,\r\n \"facsimileTelephoneNumber\": null,\r\n \"givenName\": null,\r\n \"immutableId\": null,\r\n \"isCompromised\": null,\r\n \"jobTitle\": null,\r\n \"lastDirSyncTime\": null,\r\n \"legalAgeGroupClassification\": null,\r\n \"mail\": null,\r\n \"mailNickname\": \"dagoroz-bug-repro\",\r\n \"mobile\": null,\r\n \"onPremisesDistinguishedName\": null,\r\n \"onPremisesSecurityIdentifier\": null,\r\n \"otherMails\": [],\r\n \"passwordPolicies\": null,\r\n \"passwordProfile\": {\r\n \"password\": null,\r\n \"forceChangePasswordNextLogin\": true,\r\n \"enforceChangePasswordPolicy\": false\r\n },\r\n \"physicalDeliveryOfficeName\": null,\r\n \"postalCode\": null,\r\n \"preferredLanguage\": null,\r\n \"provisionedPlans\": [],\r\n \"provisioningErrors\": [],\r\n \"proxyAddresses\": [],\r\n \"refreshTokensValidFromDateTime\": \"2020-07-06T23:49:47Z\",\r\n \"showInAddressList\": null,\r\n \"signInNames\": [],\r\n \"sipProxyAddress\": null,\r\n \"state\": null,\r\n \"streetAddress\": null,\r\n \"surname\": null,\r\n \"telephoneNumber\": null,\r\n \"usageLocation\": null,\r\n \"userIdentities\": [],\r\n \"userPrincipalName\": \"dagoroz-bug-repro@rbacclitest.onmicrosoft.com\",\r\n \"userState\": null,\r\n \"userStateChangedOn\": null,\r\n \"userType\": \"Member\"\r\n }\r\n ]\r\n}", + "StatusCode": 200 + }, + { + "RequestUri": "//subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments?$filter=principalId%20eq%20'01072e9b-c4a1-4246-a756-031b529bbf66'&api-version=2020-04-01-preview", + "EncodedRequestUri": "Ly9zdWJzY3JpcHRpb25zLzQwMDRhOWZkLWQ1OGUtNDhkYy1hZWIyLTRhNGFlYzU4NjA2Zi9yZXNvdXJjZUdyb3Vwcy9kYW9yb3pjb19idWdfcmVwcm8vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3JvbGVBc3NpZ25tZW50cz8kZmlsdGVyPXByaW5jaXBhbElkJTIwZXElMjAnZTk1ZmE2MDgtM2Q0OS00NDM4LTlmNjAtMzVkODVkODRjYTE2JyZhcGktdmVyc2lvbj0yMDIwLTA0LTAxLXByZXZpZXc=", + "RequestMethod": "GET", + "RequestBody": "", + "RequestHeaders": { + "x-ms-client-request-id": [ + "2312bcda-c54c-4e2e-9367-b00777c0b5f8" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.29017.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.12.0.0" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-request-id": [ + "88da5f20-593c-4d6b-9e4c-76c6bb79f31d" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Set-Cookie": [ + "x-ms-gateway-slice=Production; path=/; SameSite=None; secure; HttpOnly" + ], + "x-ms-ratelimit-remaining-subscription-reads": [ + "11999" + ], + "x-ms-correlation-request-id": [ + "44efe63f-822f-4a7d-8f35-5abce8160a44" + ], + "x-ms-routing-request-id": [ + "WESTUS:20200717T010324Z:44efe63f-822f-4a7d-8f35-5abce8160a44" + ], + "Date": [ + "Fri, 17 Jul 2020 01:03:23 GMT" + ], + "Content-Length": [ + "1087" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"properties\": {\r\n \"roleDefinitionId\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"principalId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"principalType\": \"User\",\r\n \"scope\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg\",\r\n \"condition\": \"@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:Name] StringEqualsIgnoreCase 'foo_storage_container'\",\r\n \"conditionVersion\": \"2.0\",\r\n \"createdOn\": \"2020-07-17T01:03:22.9503355Z\",\r\n \"updatedOn\": \"2020-07-17T01:03:22.9503355Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"canDelegate\": false,\r\n \"delegatedManagedIdentityResourceId\": null,\r\n \"description\": \"This test should not fail\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments/734de5f5-c680-41c0-8beb-67b98c3539d2\",\r\n \"type\": \"Microsoft.Authorization/roleAssignments\",\r\n \"name\": \"734de5f5-c680-41c0-8beb-67b98c3539d2\"\r\n }\r\n ]\r\n}", + "StatusCode": 200 + }, + { + "RequestUri": "//subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleDefinitions?api-version=2018-01-01-preview", + "EncodedRequestUri": "Ly9zdWJzY3JpcHRpb25zLzQwMDRhOWZkLWQ1OGUtNDhkYy1hZWIyLTRhNGFlYzU4NjA2Zi9yZXNvdXJjZUdyb3Vwcy9kYW9yb3pjb19idWdfcmVwcm8vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3JvbGVEZWZpbml0aW9ucz9hcGktdmVyc2lvbj0yMDE4LTAxLTAxLXByZXZpZXc=", + "RequestMethod": "GET", + "RequestBody": "", + "RequestHeaders": { + "x-ms-client-request-id": [ + "0d82081b-aa08-49f5-8c19-d8a6f587bdb6" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.29017.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.12.0.0" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-request-id": [ + "c6ae4906-6383-47da-b645-94a353f24ac5" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Set-Cookie": [ + "x-ms-gateway-slice=Production; path=/; secure; HttpOnly; SameSite=None" + ], + "x-ms-ratelimit-remaining-subscription-reads": [ + "11998" + ], + "x-ms-correlation-request-id": [ + "85c98979-a99d-4e1f-a517-ee157a50067b" + ], + "x-ms-routing-request-id": [ + "WESTUS:20200717T010324Z:85c98979-a99d-4e1f-a517-ee157a50067b" + ], + "Date": [ + "Fri, 17 Jul 2020 01:03:23 GMT" + ], + "Content-Length": [ + "243873" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Custom Reader Test Properties\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Read, monitor and restart virtual machines\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Authorization/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.ClassicCompute/virtualMachines/restart/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-13T18:17:20.8584392Z\",\r\n \"updatedOn\": \"2018-03-13T18:18:37.0952708Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/171d2453-29dc-42b4-84fc-3fd259eeaec3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"171d2453-29dc-42b4-84fc-3fd259eeaec3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"OnCommand Cloud Manager Operator\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"OnCommand Cloud Manager Permissions\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Compute/disks/delete\",\r\n \"Microsoft.Compute/disks/read\",\r\n \"Microsoft.Compute/disks/write\",\r\n \"Microsoft.Compute/locations/operations/read\",\r\n \"Microsoft.Compute/locations/vmSizes/read\",\r\n \"Microsoft.Compute/operations/read\",\r\n \"Microsoft.Compute/virtualMachines/instanceView/read\",\r\n \"Microsoft.Compute/virtualMachines/powerOff/action\",\r\n \"Microsoft.Compute/virtualMachines/read\",\r\n \"Microsoft.Compute/virtualMachines/restart/action\",\r\n \"Microsoft.Compute/virtualMachines/start/action\",\r\n \"Microsoft.Compute/virtualMachines/deallocate/action\",\r\n \"Microsoft.Compute/virtualMachines/vmSizes/read\",\r\n \"Microsoft.Compute/virtualMachines/write\",\r\n \"Microsoft.Network/locations/operationResults/read\",\r\n \"Microsoft.Network/locations/operations/read\",\r\n \"Microsoft.Network/networkInterfaces/read\",\r\n \"Microsoft.Network/networkInterfaces/write\",\r\n \"Microsoft.Network/networkInterfaces/join/action\",\r\n \"Microsoft.Network/networkSecurityGroups/read\",\r\n \"Microsoft.Network/networkSecurityGroups/write\",\r\n \"Microsoft.Network/networkSecurityGroups/join/action\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/virtualNetworks/checkIpAddressAvailability/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/virtualMachines/read\",\r\n \"Microsoft.Network/virtualNetworks/virtualMachines/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/join/action\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Resources/deployments/read\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/resources/read\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/delete\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/subscriptions/resourcegroups/resources/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/write\",\r\n \"Microsoft.Storage/checknameavailability/read\",\r\n \"Microsoft.Storage/operations/read\",\r\n \"Microsoft.Storage/storageAccounts/listkeys/action\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.Storage/storageAccounts/regeneratekey/action\",\r\n \"Microsoft.Storage/storageAccounts/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-03-29T21:56:07.9054892Z\",\r\n \"updatedOn\": \"2017-03-29T21:56:07.9054892Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/9acd117c-1527-4461-ab19-031c2329aa9b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"9acd117c-1527-4461-ab19-031c2329aa9b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Support Custom Role\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Support Custom Role\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-02-02T02:17:43.627696Z\",\r\n \"updatedOn\": \"2017-04-20T22:55:02.9860347Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/ee2d57e0-fda3-436d-8174-f3c9684efb46\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ee2d57e0-fda3-436d-8174-f3c9684efb46\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Test Administrator\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test Role to manage Azure environment\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ADHybridHealthService/configuration/read\",\r\n \"Microsoft.ADHybridHealthService/services/read\",\r\n \"Microsoft.ADHybridHealthService/services/servicemembers/read\",\r\n \"Microsoft.ADHybridHealthService/services/servicemembers/alerts/read\",\r\n \"Microsoft.ADHybridHealthService/services/alerts/read\",\r\n \"Microsoft.Advisor/register/action\",\r\n \"Microsoft.Advisor/recommendations/read\",\r\n \"Microsoft.Authorization/classicAdministrators/read\",\r\n \"Microsoft.Authorization/locks/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-25T23:19:00.1735084Z\",\r\n \"updatedOn\": \"2017-05-25T23:19:00.1735084Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/239cd0e7-5e27-4872-a1d0-0ff3c4cec6b6\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"239cd0e7-5e27-4872-a1d0-0ff3c4cec6b6\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Test Administrator for testing\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test Role to manage Azure environment\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/roleAssignments/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-10-31T23:40:34.3971201Z\",\r\n \"updatedOn\": \"2017-10-31T23:40:34.3971201Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/7db62a6c-edd9-42bb-b30e-31fc063ce154\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7db62a6c-edd9-42bb-b30e-31fc063ce154\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Test definiton\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Can monitor compute, network and storage, and restart virtual machines\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/ResourceGroups/rbacproda\",\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/ResourceGroups\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-06-30T20:29:54.258388Z\",\r\n \"updatedOn\": \"2017-06-30T20:29:54.258388Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/574857fa-2e5b-4029-ada2-7d042637cbfb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"574857fa-2e5b-4029-ada2-7d042637cbfb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Test RD\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test RDDD\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Compute/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-04-17T18:39:35.636177Z\",\r\n \"updatedOn\": \"2018-04-17T18:39:35.636177Z\",\r\n \"createdBy\": \"76102c29-afb3-4704-a4b7-683bd5b14934\",\r\n \"updatedBy\": \"76102c29-afb3-4704-a4b7-683bd5b14934\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/98b036c8-8bf1-4f4a-8f50-a0a6dde0e734\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"98b036c8-8bf1-4f4a-8f50-a0a6dde0e734\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"test role and another testrole\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test role\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-22T23:58:52.7462995Z\",\r\n \"updatedOn\": \"2018-04-11T20:49:59.3331071Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/a997608d-3f63-4eeb-b01b-1b3ae270cd6d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a997608d-3f63-4eeb-b01b-1b3ae270cd6d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Test definiton2\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Can monitor compute, network and storage, and restart virtual machines\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/ResourceGroups/rbacproda\",\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/ResourceGroups\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-06-30T20:32:19.4246182Z\",\r\n \"updatedOn\": \"2017-06-30T20:32:19.4246182Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/0b98a570-beae-486e-aa44-7cb035aa126d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0b98a570-beae-486e-aa44-7cb035aa126d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testrole132\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Custom Role Test Desc\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-05-30T23:13:47.7513317Z\",\r\n \"updatedOn\": \"2018-05-30T23:13:47.7513317Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/3e66a0a6-a18a-4afc-a5cc-ec19e06012ae\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3e66a0a6-a18a-4afc-a5cc-ec19e06012ae\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testrole-novm\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets Fuse Developers access select objects they need.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Resources/subscriptions/resourceGroups/*/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/*/read\",\r\n \"Microsoft.Storage/storageAccounts/*/read\",\r\n \"Microsoft.Web/sites/*/read\",\r\n \"Microsoft.ServiceBus/namespaces/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/*/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-09-20T00:19:06.4239042Z\",\r\n \"updatedOn\": \"2018-09-20T00:19:06.4239042Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/ef4af617-2f0e-412b-b30a-b7c848aa9098\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ef4af617-2f0e-412b-b30a-b7c848aa9098\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"TestRole_1c581fde-9c61-41fe-b0fa-9f113f09280d\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Custom Role Test Desc\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/resourceGroups/rbactest\",\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-03-11T00:43:21.0606467Z\",\r\n \"updatedOn\": \"2017-04-21T18:07:28.8010892Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/41c81219-e0b7-4d81-96db-5ac27ff234be\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"41c81219-e0b7-4d81-96db-5ac27ff234be\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"TestRole_6d13263a-d237-4d4d-9227-a9e055757887\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Custom Role Test Desc\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-06-29T23:20:59.9048046Z\",\r\n \"updatedOn\": \"2017-06-29T23:20:59.9048046Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/7749b7c9-67a5-4d9c-9e58-58c811859c1a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7749b7c9-67a5-4d9c-9e58-58c811859c1a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"TestContributor\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you manage everything except access to resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/*/Delete\",\r\n \"Microsoft.Authorization/*/Write\",\r\n \"Microsoft.Authorization/elevateAccess/Action\",\r\n \"Microsoft.Blueprint/blueprintAssignments/write\",\r\n \"Microsoft.Blueprint/blueprintAssignments/delete\",\r\n \"Microsoft.Storage/storageAccounts/write\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-03-06T00:36:20.4923118Z\",\r\n \"updatedOn\": \"2019-04-10T19:14:27.67508Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/c24988ac-6180-42a0-ab88-20f7382dd24c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CustomRole Tests Role\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test role\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-21T18:24:29.0508834Z\",\r\n \"updatedOn\": \"2019-08-21T18:32:39.5641976Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8d7dd69e-9ae2-44a1-94d8-f7bc8e12645e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8d7dd69e-9ae2-44a1-94d8-f7bc8e12645e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testbatchcontributor\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Batch/batchAccounts/read\",\r\n \"Microsoft.Batch/batchAccounts/*/read\",\r\n \"Microsoft.Batch/batchAccounts/applications/*\",\r\n \"Microsoft.Batch/batchAccounts/listkeys/action\",\r\n \"Microsoft.Batch/batchAccounts/pools/write\",\r\n \"Microsoft.Batch/batchAccounts/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-09-10T16:44:02.3947885Z\",\r\n \"updatedOn\": \"2019-09-10T16:44:02.3947885Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/e2ab292b-812a-4306-9c73-df992f61649b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e2ab292b-812a-4306-9c73-df992f61649b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"No RD WRITE\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you manage everything, including access to resources.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/roleDefinitions/write\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-01-28T00:57:45.1574464Z\",\r\n \"updatedOn\": \"2020-01-28T00:57:45.1574464Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/d8bae860-743b-407c-8cf0-3aa1cbb8788c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"d8bae860-743b-407c-8cf0-3aa1cbb8788c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"No RD READ\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you manage everything, including access to resources.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/roleDefinitions/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-01-29T00:27:29.0693475Z\",\r\n \"updatedOn\": \"2020-01-29T00:27:29.0693475Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/724dd060-7e51-4f7b-a749-cd927f345b68\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"724dd060-7e51-4f7b-a749-cd927f345b68\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"asd\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Synapse/register/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-19T20:09:21.8617073Z\",\r\n \"updatedOn\": \"2020-02-19T20:09:21.8617073Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/254d9483-0229-40a3-a457-f6cbb5449be6\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"254d9483-0229-40a3-a457-f6cbb5449be6\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"teste\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"setesrt\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"microsoft.operationalinsights/register/action\",\r\n \"microsoft.operationalinsights/unregister/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-27T01:22:58.9649766Z\",\r\n \"updatedOn\": \"2020-02-27T01:22:58.9649766Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/7da825e5-3464-48e4-8646-fab69f7de46c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7da825e5-3464-48e4-8646-fab69f7de46c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"asda\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"asdasd\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Synapse/checkNameAvailability/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-27T19:33:25.1899025Z\",\r\n \"updatedOn\": \"2020-02-27T19:33:25.1899025Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/7cab0ec5-99cb-466f-937e-26806c98f0fb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7cab0ec5-99cb-466f-937e-26806c98f0fb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CloneIt\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-17T03:08:21.1526749Z\",\r\n \"updatedOn\": \"2020-03-17T03:08:21.1526749Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/acfb9fda-b179-4290-8d82-609ddb722ca0\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"acfb9fda-b179-4290-8d82-609ddb722ca0\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"RyanTestMG\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you view everything, but not make any changes.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\",\r\n \"/providers/Microsoft.Management/managementGroups/thisdoesntexist\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-18T23:23:29.8420866Z\",\r\n \"updatedOn\": \"2020-03-18T23:23:29.8420866Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/f5fde758-46cb-4388-8e2d-5dfb6f9c5e26\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f5fde758-46cb-4388-8e2d-5dfb6f9c5e26\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"27MarchCR Clone\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [\r\n \"Microsoft.ClassicCompute/virtualMachines/capture/action\",\r\n \"Microsoft.ClassicCompute/virtualMachines/start/action\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-27T03:30:41.2204287Z\",\r\n \"updatedOn\": \"2020-05-25T03:59:50.7212707Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/688cffa8-c3ad-434d-95bf-4feef208c51f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"688cffa8-c3ad-434d-95bf-4feef208c51f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"dfg\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"84codes.CloudAMQP/updateCommunicationPreference/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-04-15T17:01:23.582234Z\",\r\n \"updatedOn\": \"2020-04-15T17:01:23.582234Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/666436ac-d087-4028-8caa-3d56838acc54\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"666436ac-d087-4028-8caa-3d56838acc54\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testest\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"84codes.CloudAMQP/updateCommunicationPreference/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-04-15T17:28:05.771688Z\",\r\n \"updatedOn\": \"2020-04-15T17:28:05.771688Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/778f1528-7abc-42be-a89f-d72860782919\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"778f1528-7abc-42be-a89f-d72860782919\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testewasdasd\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"84codes.CloudAMQP/updateCommunicationPreference/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-04-16T19:16:54.3681577Z\",\r\n \"updatedOn\": \"2020-04-16T19:16:54.3681577Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/351dc63d-3eec-4697-bf6b-ebeb52629640\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"351dc63d-3eec-4697-bf6b-ebeb52629640\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"asdsad\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Synapse/checkNameAvailability/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-04-23T15:27:01.6742334Z\",\r\n \"updatedOn\": \"2020-04-23T15:27:01.6742334Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/2b516d2c-4b58-45d7-8c2b-55f2e936d21a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"2b516d2c-4b58-45d7-8c2b-55f2e936d21a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testrole1234\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T09:19:08.0056403Z\",\r\n \"updatedOn\": \"2020-06-09T09:19:08.0056403Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/f1ae5ae6-80f8-4b6a-9962-96e885ed2fdf\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f1ae5ae6-80f8-4b6a-9962-96e885ed2fdf\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customreader\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T21:33:19.2160171Z\",\r\n \"updatedOn\": \"2020-06-09T21:33:19.2160171Z\",\r\n \"createdBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\",\r\n \"updatedBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/e9bfc956-b9d6-4931-8df6-d8e759dfb7bd\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e9bfc956-b9d6-4931-8df6-d8e759dfb7bd\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customabc\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T21:37:45.502473Z\",\r\n \"updatedOn\": \"2020-06-09T21:37:45.502473Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/1d3c667d-d849-4444-a61e-910a34a5fbc3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"1d3c667d-d849-4444-a61e-910a34a5fbc3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customroletest123\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:01:04.3209554Z\",\r\n \"updatedOn\": \"2020-06-09T22:01:04.3209554Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/0a301507-673a-47b2-a629-7fa8ca72af3f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0a301507-673a-47b2-a629-7fa8ca72af3f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customroleabc\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:09:16.2626975Z\",\r\n \"updatedOn\": \"2020-06-09T22:09:16.2626975Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/bc1ff923-7253-46cd-9120-6ad03ef2d6e6\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"bc1ff923-7253-46cd-9120-6ad03ef2d6e6\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customreader123\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:12:24.0862728Z\",\r\n \"updatedOn\": \"2020-06-09T22:12:24.0862728Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8700af82-f42f-4393-a5f2-eee83964a9aa\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8700af82-f42f-4393-a5f2-eee83964a9aa\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"test123abc\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:14:57.6218091Z\",\r\n \"updatedOn\": \"2020-06-09T22:14:57.6218091Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/eef4fe94-b510-4514-8669-0548903f3495\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"eef4fe94-b510-4514-8669-0548903f3495\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customroleabc123\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:37:36.1262398Z\",\r\n \"updatedOn\": \"2020-06-09T22:37:36.1262398Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/fd01a54f-fd90-46ec-b525-a636a28df51f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fd01a54f-fd90-46ec-b525-a636a28df51f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testcustomroleabc\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:42:30.4994673Z\",\r\n \"updatedOn\": \"2020-06-09T22:42:30.4994673Z\",\r\n \"createdBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\",\r\n \"updatedBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/fecfef36-f4fc-4e4b-93ff-7db5732a444d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fecfef36-f4fc-4e4b-93ff-7db5732a444d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"zzcustomrolezz\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:52:41.6786191Z\",\r\n \"updatedOn\": \"2020-06-09T22:52:41.6786191Z\",\r\n \"createdBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\",\r\n \"updatedBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/dc307f0a-46a2-4260-bbca-66b3a4448a8d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"dc307f0a-46a2-4260-bbca-66b3a4448a8d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testCustomRole\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:55:26.5124865Z\",\r\n \"updatedOn\": \"2020-06-09T22:55:26.5124865Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b768931c-5d00-4572-a731-431c6189f0da\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b768931c-5d00-4572-a731-431c6189f0da\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"bbCustomRole\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T23:42:41.0368856Z\",\r\n \"updatedOn\": \"2020-06-09T23:42:41.0368856Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/ae101df6-14ae-4d66-bbe0-a469a964f90f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ae101df6-14ae-4d66-bbe0-a469a964f90f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"zzCustomRole\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T23:55:14.2992167Z\",\r\n \"updatedOn\": \"2020-06-09T23:55:14.2992167Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/bec73b96-f2cf-436c-8917-d547da43a149\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"bec73b96-f2cf-436c-8917-d547da43a149\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customrole123\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-10T01:13:23.0150344Z\",\r\n \"updatedOn\": \"2020-06-10T01:13:23.0150344Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/32d6d31d-e61a-41ec-8386-5dc64b3bc204\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"32d6d31d-e61a-41ec-8386-5dc64b3bc204\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"No RA READ\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you manage everything, including access to resources.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/roleAssignments/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-17T06:31:33.3927723Z\",\r\n \"updatedOn\": \"2020-06-17T06:31:33.3927723Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/6f2b4c36-69f1-4a45-8cda-7d5a9b690408\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"6f2b4c36-69f1-4a45-8cda-7d5a9b690408\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"No RA WRITE\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you manage everything, including access to resources.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/roleAssignments/write\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-17T06:41:55.5369299Z\",\r\n \"updatedOn\": \"2020-06-17T06:41:55.5369299Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/a43bed91-a7af-418a-8f07-e135d151b5b8\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a43bed91-a7af-418a-8f07-e135d151b5b8\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Another tests role\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test role\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\",\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/ResourceGroups/rbactest\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-01T23:09:24.5638411Z\",\r\n \"updatedOn\": \"2020-07-01T23:09:24.5638411Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/0a0e83bc-50b9-4c4d-b2c2-3f41e1a8baf2\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0a0e83bc-50b9-4c4d-b2c2-3f41e1a8baf2\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Daoroz-Custom1\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"A role to use when testing various things\\nIt does not grant any real permissions, just the ability to read role definitions\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/roleDefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-08T17:44:15.2525393Z\",\r\n \"updatedOn\": \"2020-07-08T17:44:15.2525393Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"acdd72a7-3385-48ef-bd42-f606fba81ae7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Daoroz-Custom2\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"A role to be used when testing various things\\nIt does not grant any real permissions, just the ability to read role definitions\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/roleDefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-08T17:51:15.4187811Z\",\r\n \"updatedOn\": \"2020-07-08T17:51:15.4187811Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/98ee936c-393c-4f03-81a8-6eccfd82d96e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"98ee936c-393c-4f03-81a8-6eccfd82d96e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Custom Reader Role at MG Root\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Custom Role at MG Root\",\r\n \"assignableScopes\": [\r\n \"/providers/Microsoft.Management/managementGroups/1273adef-00a3-4086-a51a-dbcce1857d36\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-07-24T19:26:02.777463Z\",\r\n \"updatedOn\": \"2019-07-24T19:26:02.777463Z\",\r\n \"createdBy\": \"cdab7ada-d740-47da-a823-ec29c9a68482\",\r\n \"updatedBy\": \"cdab7ada-d740-47da-a823-ec29c9a68482\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/fa3bf1c6-5da9-47c7-976e-1007e1bc385a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fa3bf1c6-5da9-47c7-976e-1007e1bc385a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Custom Role Manish reader\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Custom Role Manish reader\",\r\n \"assignableScopes\": [\r\n \"/providers/Microsoft.Management/managementGroups/1273adef-00a3-4086-a51a-dbcce1857d36\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-07T18:53:42.1390099Z\",\r\n \"updatedOn\": \"2020-05-08T01:15:45.1587505Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"e8df956a-9463-408a-a9be-cf5f46d09b37\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/4edfca53-b078-483f-9d0e-c83e4544e854\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4edfca53-b078-483f-9d0e-c83e4544e854\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrPush\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr push\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/pull/read\",\r\n \"Microsoft.ContainerRegistry/registries/push/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-10-29T17:52:32.5201177Z\",\r\n \"updatedOn\": \"2018-11-13T23:26:19.9749249Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8311e382-0749-4cb8-b61a-304f252e45ec\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8311e382-0749-4cb8-b61a-304f252e45ec\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"API Management Service Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage service and the APIs\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ApiManagement/service/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8650193Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:17.7502607Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/312a565d-c81f-4fd8-895a-4e21e48d571c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"312a565d-c81f-4fd8-895a-4e21e48d571c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrPull\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr pull\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/pull/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-10-22T19:01:56.8227182Z\",\r\n \"updatedOn\": \"2018-11-13T23:22:03.2302457Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/7f951dda-4ed3-4680-a7ca-43fe172d538d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7f951dda-4ed3-4680-a7ca-43fe172d538d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrImageSigner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr image signer\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/sign/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-15T23:23:08.4038322Z\",\r\n \"updatedOn\": \"2018-10-29T19:06:24.9004422Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/6cef56e8-d556-48e5-a04f-b8e64114680f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"6cef56e8-d556-48e5-a04f-b8e64114680f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrDelete\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr delete\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/artifacts/delete\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-03-11T20:19:31.6682804Z\",\r\n \"updatedOn\": \"2019-03-11T20:24:38.9845104Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/c2f4ef07-c644-48eb-af81-4b1b4947fb11\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c2f4ef07-c644-48eb-af81-4b1b4947fb11\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrQuarantineReader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr quarantine data reader\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/quarantine/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-16T00:27:39.9596835Z\",\r\n \"updatedOn\": \"2019-10-22T00:12:39.702093Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/cdda3590-29a3-44f6-95f2-9f980659eb04\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"cdda3590-29a3-44f6-95f2-9f980659eb04\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrQuarantineWriter\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr quarantine data writer\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/quarantine/read\",\r\n \"Microsoft.ContainerRegistry/registries/quarantine/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-16T00:26:37.587182Z\",\r\n \"updatedOn\": \"2019-10-22T00:10:29.8202164Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/c8d4ff99-41c3-41a8-9f60-21dfdad59608\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c8d4ff99-41c3-41a8-9f60-21dfdad59608\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"API Management Service Operator Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage service but not the APIs\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ApiManagement/service/*/read\",\r\n \"Microsoft.ApiManagement/service/backup/action\",\r\n \"Microsoft.ApiManagement/service/delete\",\r\n \"Microsoft.ApiManagement/service/managedeployments/action\",\r\n \"Microsoft.ApiManagement/service/read\",\r\n \"Microsoft.ApiManagement/service/restore/action\",\r\n \"Microsoft.ApiManagement/service/updatecertificate/action\",\r\n \"Microsoft.ApiManagement/service/updatehostname/action\",\r\n \"Microsoft.ApiManagement/service/write\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.ApiManagement/service/users/keys/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-11-09T00:03:42.1194019Z\",\r\n \"updatedOn\": \"2016-11-18T23:56:25.4682649Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/e022efe7-f5ba-4159-bbe4-b44f577e9b61\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e022efe7-f5ba-4159-bbe4-b44f577e9b61\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"API Management Service Reader Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read-only access to service and APIs\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ApiManagement/service/*/read\",\r\n \"Microsoft.ApiManagement/service/read\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.ApiManagement/service/users/keys/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-11-09T00:26:45.1540473Z\",\r\n \"updatedOn\": \"2017-01-23T23:10:34.8876776Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/71522526-b88f-4d52-b57f-d31fc3546d0d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"71522526-b88f-4d52-b57f-d31fc3546d0d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Application Insights Component Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage Application Insights components\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/metricAlerts/*\",\r\n \"Microsoft.Insights/components/*\",\r\n \"Microsoft.Insights/webtests/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2020-02-12T12:45:46.9200472Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/ae349356-3a1b-4a5e-921d-050484c6347e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ae349356-3a1b-4a5e-921d-050484c6347e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Application Insights Snapshot Debugger\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Gives user permission to use Application Insights Snapshot Debugger features\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/components/*/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-19T21:25:12.3728747Z\",\r\n \"updatedOn\": \"2017-04-19T23:34:59.9511581Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/08954f03-6346-4c2e-81c0-ec3a5cfae23b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"08954f03-6346-4c2e-81c0-ec3a5cfae23b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Attestation Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read the attestation provider properties\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Attestation/attestationProviders/attestation/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-03-25T19:42:59.157671Z\",\r\n \"updatedOn\": \"2019-05-10T17:52:38.9036953Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": \"SYSTEM\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/fd1bd22b-8476-40bc-a0bc-69b95687b9f3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fd1bd22b-8476-40bc-a0bc-69b95687b9f3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Automation Job Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Create and Manage Jobs using Automation Runbooks.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Automation/automationAccounts/hybridRunbookWorkerGroups/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/resume/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/stop/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/streams/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/suspend/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/write\",\r\n \"Microsoft.Automation/automationAccounts/jobs/output/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-19T20:52:41.0020018Z\",\r\n \"updatedOn\": \"2018-08-14T22:08:48.1147327Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/4fe576fe-1146-4730-92eb-48519fa6bf9f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4fe576fe-1146-4730-92eb-48519fa6bf9f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Automation Runbook Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read Runbook properties - to be able to create Jobs of the runbook.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Automation/automationAccounts/runbooks/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-19T20:47:49.5640674Z\",\r\n \"updatedOn\": \"2017-04-25T01:00:45.6444999Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5fb5aef8-1081-4b8e-bb16-9d5d0385bab5\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5fb5aef8-1081-4b8e-bb16-9d5d0385bab5\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Automation Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Automation Operators are able to start, stop, suspend, and resume jobs\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Automation/automationAccounts/hybridRunbookWorkerGroups/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/resume/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/stop/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/streams/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/suspend/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/write\",\r\n \"Microsoft.Automation/automationAccounts/jobSchedules/read\",\r\n \"Microsoft.Automation/automationAccounts/jobSchedules/write\",\r\n \"Microsoft.Automation/automationAccounts/linkedWorkspace/read\",\r\n \"Microsoft.Automation/automationAccounts/read\",\r\n \"Microsoft.Automation/automationAccounts/runbooks/read\",\r\n \"Microsoft.Automation/automationAccounts/schedules/read\",\r\n \"Microsoft.Automation/automationAccounts/schedules/write\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Automation/automationAccounts/jobs/output/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-08-18T01:05:03.391613Z\",\r\n \"updatedOn\": \"2018-05-10T20:12:39.69782Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/d3881f73-407a-4167-8283-e981cbba0404\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"d3881f73-407a-4167-8283-e981cbba0404\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Avere Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can create and manage an Avere vFXT cluster.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Compute/*/read\",\r\n \"Microsoft.Compute/availabilitySets/*\",\r\n \"Microsoft.Compute/proximityPlacementGroups/*\",\r\n \"Microsoft.Compute/virtualMachines/*\",\r\n \"Microsoft.Compute/disks/*\",\r\n \"Microsoft.Network/*/read\",\r\n \"Microsoft.Network/networkInterfaces/*\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/join/action\",\r\n \"Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action\",\r\n \"Microsoft.Network/networkSecurityGroups/join/action\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/*/read\",\r\n \"Microsoft.Storage/storageAccounts/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/resources/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-03-18T20:00:58.9207889Z\",\r\n \"updatedOn\": \"2020-05-27T06:48:54.4896867Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/4f8fab4f-1852-4a58-a46a-8eaf358af14a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4f8fab4f-1852-4a58-a46a-8eaf358af14a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Avere Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Used by the Avere vFXT cluster to manage the cluster\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Compute/virtualMachines/read\",\r\n \"Microsoft.Network/networkInterfaces/read\",\r\n \"Microsoft.Network/networkInterfaces/write\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/join/action\",\r\n \"Microsoft.Network/networkSecurityGroups/join/action\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/delete\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-03-18T20:02:38.3399857Z\",\r\n \"updatedOn\": \"2019-03-29T00:26:37.9205875Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/c025889f-8102-4ebf-b32c-fc0c6f0c6bd9\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c025889f-8102-4ebf-b32c-fc0c6f0c6bd9\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service Cluster Admin Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"List cluster admin credential action.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerService/managedClusters/listClusterAdminCredential/action\",\r\n \"Microsoft.ContainerService/managedClusters/accessProfiles/listCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-08-15T21:38:18.5953853Z\",\r\n \"updatedOn\": \"2020-02-07T02:49:24.9715273Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/0ab0b1a8-8aac-4efd-b8c2-3ee1fb270be8\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0ab0b1a8-8aac-4efd-b8c2-3ee1fb270be8\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service Cluster User Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"List cluster user credential action.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerService/managedClusters/listClusterUserCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-08-15T22:04:53.4037241Z\",\r\n \"updatedOn\": \"2020-02-11T23:37:03.589924Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/4abbcc35-e782-43d8-92c5-2d3f1bd2253f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4abbcc35-e782-43d8-92c5-2d3f1bd2253f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Maps Data Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Grants access to read map related data from an Azure maps account.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Maps/accounts/*/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-10-05T19:47:03.472307Z\",\r\n \"updatedOn\": \"2020-04-28T22:33:41.7780319Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/423170ca-a8f6-4b0f-8487-9e4eb8f49bfa\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"423170ca-a8f6-4b0f-8487-9e4eb8f49bfa\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Stack Registration Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Azure Stack registrations.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.AzureStack/edgeSubscriptions/read\",\r\n \"Microsoft.AzureStack/registrations/products/*/action\",\r\n \"Microsoft.AzureStack/registrations/products/read\",\r\n \"Microsoft.AzureStack/registrations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-11-13T23:42:06.2161827Z\",\r\n \"updatedOn\": \"2020-06-29T22:11:17.0759529Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/6f12a6df-dd06-4f3e-bcb1-ce8be600526a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"6f12a6df-dd06-4f3e-bcb1-ce8be600526a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Backup Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage backup service,but can't create vaults and give access to others\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.RecoveryServices/locations/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/refreshContainers/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobs/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobsExport/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperationResults/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectableItems/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectedItems/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionContainers/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupSecurityPIN/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read\",\r\n \"Microsoft.RecoveryServices/Vaults/certificates/*\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/*\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/*\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/*\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupstorageconfig/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupconfig/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupValidateOperation/action\",\r\n \"Microsoft.RecoveryServices/Vaults/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperations/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupEngines/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectableContainers/read\",\r\n \"Microsoft.RecoveryServices/locations/backupStatus/action\",\r\n \"Microsoft.RecoveryServices/locations/backupPreValidateProtection/action\",\r\n \"Microsoft.RecoveryServices/locations/backupValidateFeatures/action\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/write\",\r\n \"Microsoft.RecoveryServices/operations/read\",\r\n \"Microsoft.RecoveryServices/locations/operationStatus/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-01-03T13:12:15.7321344Z\",\r\n \"updatedOn\": \"2019-12-17T10:44:35.8361149Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5e467623-bb1f-42f4-a55d-6e525e11384b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Billing Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows read access to billing data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Billing/*/read\",\r\n \"Microsoft.Commerce/*/read\",\r\n \"Microsoft.Consumption/*/read\",\r\n \"Microsoft.Management/managementGroups/read\",\r\n \"Microsoft.CostManagement/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-25T02:13:38.9054151Z\",\r\n \"updatedOn\": \"2018-09-26T17:45:09.2227236Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/fa23ad8b-c56e-40d8-ac0c-ce449e1d2c64\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fa23ad8b-c56e-40d8-ac0c-ce449e1d2c64\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Backup Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage backup services, except removal of backup, vault creation and giving access to others\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/backup/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationsStatus/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/provisionInstantItemRecovery/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/restore/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/revokeInstantItemRecovery/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/refreshContainers/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobs/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobsExport/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperationResults/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectableItems/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectedItems/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read\",\r\n \"Microsoft.RecoveryServices/Vaults/certificates/write\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/read\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/write\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/*\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/write\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupstorageconfig/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupValidateOperation/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperations/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/operations/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/inquire/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupEngines/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectableContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/items/read\",\r\n \"Microsoft.RecoveryServices/locations/backupStatus/action\",\r\n \"Microsoft.RecoveryServices/locations/backupPreValidateProtection/action\",\r\n \"Microsoft.RecoveryServices/locations/backupValidateFeatures/action\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/write\",\r\n \"Microsoft.RecoveryServices/operations/read\",\r\n \"Microsoft.RecoveryServices/locations/operationStatus/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-01-03T13:21:11.894764Z\",\r\n \"updatedOn\": \"2019-12-17T11:02:43.9998686Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/00c29273-979b-4161-815c-10b084fb9324\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"00c29273-979b-4161-815c-10b084fb9324\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Backup Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can view backup services, but can't make changes\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.RecoveryServices/locations/allocatedStamp/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationsStatus/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobs/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobs/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobsExport/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectedItems/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupstorageconfig/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupconfig/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperations/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/operations/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupEngines/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/items/read\",\r\n \"Microsoft.RecoveryServices/locations/backupStatus/action\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/*\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/write\",\r\n \"Microsoft.RecoveryServices/operations/read\",\r\n \"Microsoft.RecoveryServices/locations/operationStatus/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.RecoveryServices/locations/backupValidateFeatures/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-01-03T13:18:41.3893065Z\",\r\n \"updatedOn\": \"2020-03-04T12:12:04.321311Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/a795c7a0-d4a2-40c1-ae25-d81f01202912\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a795c7a0-d4a2-40c1-ae25-d81f01202912\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Blockchain Member Node Access (Preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for access to Blockchain Member nodes\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Blockchain/blockchainMembers/transactionNodes/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Blockchain/blockchainMembers/transactionNodes/connect/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-21T10:33:01.9604839Z\",\r\n \"updatedOn\": \"2018-12-21T10:33:58.0042162Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/31a002a1-acaf-453e-8a5b-297c9ca1ea24\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"31a002a1-acaf-453e-8a5b-297c9ca1ea24\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"BizTalk Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage BizTalk services, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.BizTalkServices/BizTalk/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:42:18.897821Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5e3c6656-6cfa-4708-81fe-0de47ac73342\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5e3c6656-6cfa-4708-81fe-0de47ac73342\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CDN Endpoint Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage CDN endpoints, but can’t grant access to other users.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Cdn/edgenodes/read\",\r\n \"Microsoft.Cdn/operationresults/*\",\r\n \"Microsoft.Cdn/profiles/endpoints/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-01-23T02:48:46.4996252Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:52.6231539Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/426e0c7f-0c7e-4658-b36f-ff54d6c29b45\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"426e0c7f-0c7e-4658-b36f-ff54d6c29b45\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CDN Endpoint Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can view CDN endpoints, but can’t make changes.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Cdn/edgenodes/read\",\r\n \"Microsoft.Cdn/operationresults/*\",\r\n \"Microsoft.Cdn/profiles/endpoints/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-01-23T02:48:46.4996252Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:53.1585846Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/871e35f6-b5c1-49cc-a043-bde969a0f2cd\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"871e35f6-b5c1-49cc-a043-bde969a0f2cd\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CDN Profile Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage CDN profiles and their endpoints, but can’t grant access to other users.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Cdn/edgenodes/read\",\r\n \"Microsoft.Cdn/operationresults/*\",\r\n \"Microsoft.Cdn/profiles/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-01-23T02:48:46.4996252Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:53.7051278Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/ec156ff8-a8d1-4d15-830c-5b80698ca432\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ec156ff8-a8d1-4d15-830c-5b80698ca432\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CDN Profile Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can view CDN profiles and their endpoints, but can’t make changes.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Cdn/edgenodes/read\",\r\n \"Microsoft.Cdn/operationresults/*\",\r\n \"Microsoft.Cdn/profiles/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-01-23T02:48:46.4996252Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:54.2283001Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8f96442b-4075-438f-813d-ad51ab4019af\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8f96442b-4075-438f-813d-ad51ab4019af\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Classic Network Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage classic networks, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ClassicNetwork/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:39.7576926Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b34d265f-36f7-4a0d-a4d4-e158ca92e90f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b34d265f-36f7-4a0d-a4d4-e158ca92e90f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Classic Storage Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage classic storage accounts, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ClassicStorage/storageAccounts/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:30.8964641Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/86e8f5dc-a6e9-4c67-9d15-de283e8eac25\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"86e8f5dc-a6e9-4c67-9d15-de283e8eac25\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Classic Storage Account Key Operator Service Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Classic Storage Account Key Operators are allowed to list and regenerate keys on Classic Storage Accounts\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ClassicStorage/storageAccounts/listkeys/action\",\r\n \"Microsoft.ClassicStorage/storageAccounts/regeneratekey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-13T18:22:52.14611Z\",\r\n \"updatedOn\": \"2017-04-13T20:54:03.0505986Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/985d6b00-f706-48f5-a6fe-d0ca12fb668d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"985d6b00-f706-48f5-a6fe-d0ca12fb668d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"ClearDB MySQL DB Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage ClearDB MySQL databases, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"successbricks.cleardb/databases/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:42:23.2893077Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/9106cda0-8a86-4e81-b686-29a22c54effe\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"9106cda0-8a86-4e81-b686-29a22c54effe\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Classic Virtual Machine Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage classic virtual machines, but not access to them, and not the virtual network or storage account they’re connected to.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ClassicCompute/domainNames/*\",\r\n \"Microsoft.ClassicCompute/virtualMachines/*\",\r\n \"Microsoft.ClassicNetwork/networkSecurityGroups/join/action\",\r\n \"Microsoft.ClassicNetwork/reservedIps/link/action\",\r\n \"Microsoft.ClassicNetwork/reservedIps/read\",\r\n \"Microsoft.ClassicNetwork/virtualNetworks/join/action\",\r\n \"Microsoft.ClassicNetwork/virtualNetworks/read\",\r\n \"Microsoft.ClassicStorage/storageAccounts/disks/read\",\r\n \"Microsoft.ClassicStorage/storageAccounts/images/read\",\r\n \"Microsoft.ClassicStorage/storageAccounts/listKeys/action\",\r\n \"Microsoft.ClassicStorage/storageAccounts/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-04-25T00:37:56.5416086Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:43.0770473Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/d73bb868-a0df-4d4d-bd69-98a00b01fccb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"d73bb868-a0df-4d4d-bd69-98a00b01fccb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services User\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read and list keys of Cognitive Services.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\",\r\n \"Microsoft.CognitiveServices/accounts/listkeys/action\",\r\n \"Microsoft.Insights/alertRules/read\",\r\n \"Microsoft.Insights/diagnosticSettings/read\",\r\n \"Microsoft.Insights/logDefinitions/read\",\r\n \"Microsoft.Insights/metricdefinitions/read\",\r\n \"Microsoft.Insights/metrics/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-08-08T23:23:43.7701274Z\",\r\n \"updatedOn\": \"2019-02-13T19:53:56.7209248Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/a97b65f3-24c7-4388-baec-2e87135dc908\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a97b65f3-24c7-4388-baec-2e87135dc908\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Data Reader (Preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read Cognitive Services data.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-02-13T20:02:12.6849986Z\",\r\n \"updatedOn\": \"2019-02-13T22:53:55.167529Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b59867f0-fa02-499b-be73-45a86b5b3e1c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b59867f0-fa02-499b-be73-45a86b5b3e1c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you create, read, update, delete and manage keys of Cognitive Services.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.CognitiveServices/*\",\r\n \"Microsoft.Features/features/read\",\r\n \"Microsoft.Features/providers/features/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/diagnosticSettings/*\",\r\n \"Microsoft.Insights/logDefinitions/read\",\r\n \"Microsoft.Insights/metricdefinitions/read\",\r\n \"Microsoft.Insights/metrics/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourcegroups/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-08-08T23:18:39.2257848Z\",\r\n \"updatedOn\": \"2018-09-14T00:53:37.7546808Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CosmosBackupOperator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can submit restore request for a Cosmos DB database or a container for an account\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.DocumentDB/databaseAccounts/backup/action\",\r\n \"Microsoft.DocumentDB/databaseAccounts/restore/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-07T19:47:14.965156Z\",\r\n \"updatedOn\": \"2018-12-07T19:52:21.9969834Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/db7b14f2-5adf-42da-9f96-f2ee17bab5cb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"db7b14f2-5adf-42da-9f96-f2ee17bab5cb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage everything except access to resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/*/Delete\",\r\n \"Microsoft.Authorization/*/Write\",\r\n \"Microsoft.Authorization/elevateAccess/Action\",\r\n \"Microsoft.Blueprint/blueprintAssignments/write\",\r\n \"Microsoft.Blueprint/blueprintAssignments/delete\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:38.458061Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cosmos DB Account Reader Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read Azure Cosmos DB Accounts data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.DocumentDB/*/read\",\r\n \"Microsoft.DocumentDB/databaseAccounts/readonlykeys/action\",\r\n \"Microsoft.Insights/MetricDefinitions/read\",\r\n \"Microsoft.Insights/Metrics/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-10-30T17:53:54.6005577Z\",\r\n \"updatedOn\": \"2018-02-21T01:36:59.6186231Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/fbdf93bf-df7d-467e-a4d2-9458aa1360c8\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fbdf93bf-df7d-467e-a4d2-9458aa1360c8\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cost Management Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can view costs and manage cost configuration (e.g. budgets, exports)\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Consumption/*\",\r\n \"Microsoft.CostManagement/*\",\r\n \"Microsoft.Billing/billingPeriods/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Advisor/configurations/read\",\r\n \"Microsoft.Advisor/recommendations/read\",\r\n \"Microsoft.Management/managementGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-14T16:09:22.8834827Z\",\r\n \"updatedOn\": \"2019-06-25T21:25:06.8686379Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/434105ed-43f6-45c7-a02f-909b2ba83430\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"434105ed-43f6-45c7-a02f-909b2ba83430\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cost Management Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can view cost data and configuration (e.g. budgets, exports)\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Consumption/*/read\",\r\n \"Microsoft.CostManagement/*/read\",\r\n \"Microsoft.Billing/billingPeriods/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Advisor/configurations/read\",\r\n \"Microsoft.Advisor/recommendations/read\",\r\n \"Microsoft.Management/managementGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-14T16:09:22.8834827Z\",\r\n \"updatedOn\": \"2019-06-25T20:59:11.5762937Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/72fafb9e-0641-4937-9268-a91bfd8191a3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"72fafb9e-0641-4937-9268-a91bfd8191a3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Data Box Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage everything under Data Box Service except giving access to others.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Databox/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-07-27T08:28:42.714021Z\",\r\n \"updatedOn\": \"2018-07-27T08:36:56.3827309Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/add466c9-e687-43fc-8d98-dfcf8d720be5\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"add466c9-e687-43fc-8d98-dfcf8d720be5\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Data Box Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Data Box Service except creating order or editing order details and giving access to others.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Databox/*/read\",\r\n \"Microsoft.Databox/jobs/listsecrets/action\",\r\n \"Microsoft.Databox/jobs/listcredentials/action\",\r\n \"Microsoft.Databox/locations/availableSkus/action\",\r\n \"Microsoft.Databox/locations/validateInputs/action\",\r\n \"Microsoft.Databox/locations/regionConfiguration/action\",\r\n \"Microsoft.Databox/locations/validateAddress/action\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-07-27T08:26:21.9284772Z\",\r\n \"updatedOn\": \"2020-01-24T05:39:52.6143537Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/028f4ed7-e2a9-465e-a8f4-9c0ffdfdc027\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"028f4ed7-e2a9-465e-a8f4-9c0ffdfdc027\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Data Factory Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Create and manage data factories, as well as child resources within them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.DataFactory/dataFactories/*\",\r\n \"Microsoft.DataFactory/factories/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.EventGrid/eventSubscriptions/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2020-02-14T19:49:21.5789216Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"673868aa-7521-48a0-acc6-0f60742d39f5\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Data Purger\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can purge analytics data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Insights/components/*/read\",\r\n \"Microsoft.Insights/components/purge/action\",\r\n \"Microsoft.OperationalInsights/workspaces/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/purge/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-04-30T22:39:49.61677Z\",\r\n \"updatedOn\": \"2018-04-30T22:44:15.1171162Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/150f5e0c-0603-4f03-8c7f-cf70034c4e90\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"150f5e0c-0603-4f03-8c7f-cf70034c4e90\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Data Lake Analytics Developer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you submit, monitor, and manage your own jobs but not create or delete Data Lake Analytics accounts.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.BigAnalytics/accounts/*\",\r\n \"Microsoft.DataLakeAnalytics/accounts/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.BigAnalytics/accounts/Delete\",\r\n \"Microsoft.BigAnalytics/accounts/TakeOwnership/action\",\r\n \"Microsoft.BigAnalytics/accounts/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/Delete\",\r\n \"Microsoft.DataLakeAnalytics/accounts/TakeOwnership/action\",\r\n \"Microsoft.DataLakeAnalytics/accounts/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/dataLakeStoreAccounts/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/dataLakeStoreAccounts/Delete\",\r\n \"Microsoft.DataLakeAnalytics/accounts/storageAccounts/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/storageAccounts/Delete\",\r\n \"Microsoft.DataLakeAnalytics/accounts/firewallRules/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/firewallRules/Delete\",\r\n \"Microsoft.DataLakeAnalytics/accounts/computePolicies/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/computePolicies/Delete\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-10-20T00:33:29.3115234Z\",\r\n \"updatedOn\": \"2017-08-18T00:00:17.0411642Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/47b7735b-770e-4598-a7da-8b91488b4c88\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"47b7735b-770e-4598-a7da-8b91488b4c88\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"DevTest Labs User\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you connect, start, restart, and shutdown your virtual machines in your Azure DevTest Labs.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Compute/availabilitySets/read\",\r\n \"Microsoft.Compute/virtualMachines/*/read\",\r\n \"Microsoft.Compute/virtualMachines/deallocate/action\",\r\n \"Microsoft.Compute/virtualMachines/read\",\r\n \"Microsoft.Compute/virtualMachines/restart/action\",\r\n \"Microsoft.Compute/virtualMachines/start/action\",\r\n \"Microsoft.DevTestLab/*/read\",\r\n \"Microsoft.DevTestLab/labs/claimAnyVm/action\",\r\n \"Microsoft.DevTestLab/labs/createEnvironment/action\",\r\n \"Microsoft.DevTestLab/labs/ensureCurrentUserProfile/action\",\r\n \"Microsoft.DevTestLab/labs/formulas/delete\",\r\n \"Microsoft.DevTestLab/labs/formulas/read\",\r\n \"Microsoft.DevTestLab/labs/formulas/write\",\r\n \"Microsoft.DevTestLab/labs/policySets/evaluatePolicies/action\",\r\n \"Microsoft.DevTestLab/labs/virtualMachines/claim/action\",\r\n \"Microsoft.DevTestLab/labs/virtualmachines/listApplicableSchedules/action\",\r\n \"Microsoft.DevTestLab/labs/virtualMachines/getRdpFileContents/action\",\r\n \"Microsoft.Network/loadBalancers/backendAddressPools/join/action\",\r\n \"Microsoft.Network/loadBalancers/inboundNatRules/join/action\",\r\n \"Microsoft.Network/networkInterfaces/*/read\",\r\n \"Microsoft.Network/networkInterfaces/join/action\",\r\n \"Microsoft.Network/networkInterfaces/read\",\r\n \"Microsoft.Network/networkInterfaces/write\",\r\n \"Microsoft.Network/publicIPAddresses/*/read\",\r\n \"Microsoft.Network/publicIPAddresses/join/action\",\r\n \"Microsoft.Network/publicIPAddresses/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/join/action\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Resources/deployments/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/listKeys/action\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Compute/virtualMachines/vmSizes/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-08T21:52:45.0657582Z\",\r\n \"updatedOn\": \"2019-05-08T11:27:34.8855476Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/76283e04-6283-4c54-8f91-bcf1374a3c64\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"76283e04-6283-4c54-8f91-bcf1374a3c64\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"DocumentDB Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage DocumentDB accounts, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.DocumentDb/databaseAccounts/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-11-21T01:38:32.0948484Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5bd9cd88-fe45-4216-938b-f97437e15450\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"DNS Zone Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage DNS zones and record sets in Azure DNS, but does not let you control who has access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/dnsZones/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-10-15T23:33:25.9730842Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:40.3710365Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/befefa01-2a29-4197-83a8-272ff33ce314\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"befefa01-2a29-4197-83a8-272ff33ce314\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"EventGrid EventSubscription Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage EventGrid event subscription operations.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.EventGrid/eventSubscriptions/*\",\r\n \"Microsoft.EventGrid/topicTypes/eventSubscriptions/read\",\r\n \"Microsoft.EventGrid/locations/eventSubscriptions/read\",\r\n \"Microsoft.EventGrid/locations/topicTypes/eventSubscriptions/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-10-08T23:27:28.3130743Z\",\r\n \"updatedOn\": \"2019-01-08T00:06:34.3543171Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/428e0ff0-5e57-4d9c-a221-2c70d0e0a443\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"428e0ff0-5e57-4d9c-a221-2c70d0e0a443\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"EventGrid EventSubscription Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read EventGrid event subscriptions.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.EventGrid/eventSubscriptions/read\",\r\n \"Microsoft.EventGrid/topicTypes/eventSubscriptions/read\",\r\n \"Microsoft.EventGrid/locations/eventSubscriptions/read\",\r\n \"Microsoft.EventGrid/locations/topicTypes/eventSubscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-10-09T17:29:28.1417894Z\",\r\n \"updatedOn\": \"2019-01-08T00:05:40.2884365Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/2414bbcf-6497-4faf-8c65-045460748405\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"2414bbcf-6497-4faf-8c65-045460748405\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Graph Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Create and manage all aspects of the Enterprise Graph - Ontology, Schema mapping, Conflation and Conversational AI and Ingestions\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/conflation/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/conflation/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/sourceschema/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/sourceschema/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/knowledge/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/knowledge/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/intentclassification/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/intentclassification/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/ingestion/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/ingestion/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/ontology/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/ontology/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/delete\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-02-23T21:07:22.5844236Z\",\r\n \"updatedOn\": \"2019-02-28T20:21:18.9318073Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b60367af-1334-4454-b71e-769d9a4f83d9\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b60367af-1334-4454-b71e-769d9a4f83d9\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"HDInsight Domain Services Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can Read, Create, Modify and Delete Domain Services related operations needed for HDInsight Enterprise Security Package\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.AAD/*/read\",\r\n \"Microsoft.AAD/domainServices/*/read\",\r\n \"Microsoft.AAD/domainServices/oucontainer/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-09-12T22:42:51.7451109Z\",\r\n \"updatedOn\": \"2018-09-12T23:06:45.7641599Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8d8d5a11-05d3-4bda-a417-a08778121c7c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8d8d5a11-05d3-4bda-a417-a08778121c7c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Intelligent Systems Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Intelligent Systems accounts, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.IntelligentSystems/accounts/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:32:00.9996357Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/03a6d094-3444-4b3d-88af-7477090a9e5e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"03a6d094-3444-4b3d-88af-7477090a9e5e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage key vaults, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.KeyVault/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.KeyVault/locations/deletedVaults/purge/action\",\r\n \"Microsoft.KeyVault/hsmPools/*\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-02-25T17:08:28.5184971Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:49.5373075Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/f25e0fa2-a7c8-4377-a976-54943a77a395\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f25e0fa2-a7c8-4377-a976-54943a77a395\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Knowledge Consumer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Knowledge Read permission to consume Enterprise Graph Knowledge using entity search and graph query\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/knowledge/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-02-23T21:23:31.4037552Z\",\r\n \"updatedOn\": \"2019-02-28T20:25:00.7369384Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/ee361c5d-f7b5-4119-b4b6-892157c8f64c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ee361c5d-f7b5-4119-b4b6-892157c8f64c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Lab Creator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you create new labs under your Azure Lab Accounts.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.LabServices/labAccounts/*/read\",\r\n \"Microsoft.LabServices/labAccounts/createLab/action\",\r\n \"Microsoft.LabServices/labAccounts/getPricingAndAvailability/action\",\r\n \"Microsoft.LabServices/labAccounts/getRestrictionsAndUsage/action\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-01-18T23:38:58.1036141Z\",\r\n \"updatedOn\": \"2020-07-10T17:45:43.2289715Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b97fb8bc-a8b2-4522-a38b-dd33c7e65ead\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b97fb8bc-a8b2-4522-a38b-dd33c7e65ead\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Log Analytics Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Log Analytics Reader can view and search all monitoring data as well as and view monitoring settings, including viewing the configuration of Azure diagnostics on all Azure resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/analytics/query/action\",\r\n \"Microsoft.OperationalInsights/workspaces/search/action\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.OperationalInsights/workspaces/sharedKeys/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-02T00:20:28.1449012Z\",\r\n \"updatedOn\": \"2018-01-30T18:08:26.0438523Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/73c42c96-874c-492b-b04d-ab87d138a893\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"73c42c96-874c-492b-b04d-ab87d138a893\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Log Analytics Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Log Analytics Contributor can read all monitoring data and edit monitoring settings. Editing monitoring settings includes adding the VM extension to VMs; reading storage account keys to be able to configure collection of logs from Azure Storage; creating and configuring Automation accounts; adding solutions; and configuring Azure diagnostics on all Azure resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Automation/automationAccounts/*\",\r\n \"Microsoft.ClassicCompute/virtualMachines/extensions/*\",\r\n \"Microsoft.ClassicStorage/storageAccounts/listKeys/action\",\r\n \"Microsoft.Compute/virtualMachines/extensions/*\",\r\n \"Microsoft.HybridCompute/machines/extensions/write\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/diagnosticSettings/*\",\r\n \"Microsoft.OperationalInsights/*\",\r\n \"Microsoft.OperationsManagement/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourcegroups/deployments/*\",\r\n \"Microsoft.Storage/storageAccounts/listKeys/action\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-25T21:51:45.3174711Z\",\r\n \"updatedOn\": \"2020-03-26T22:57:55.366783Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Logic App Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read, enable and disable logic app.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*/read\",\r\n \"Microsoft.Insights/metricAlerts/*/read\",\r\n \"Microsoft.Insights/diagnosticSettings/*/read\",\r\n \"Microsoft.Insights/metricDefinitions/*/read\",\r\n \"Microsoft.Logic/*/read\",\r\n \"Microsoft.Logic/workflows/disable/action\",\r\n \"Microsoft.Logic/workflows/enable/action\",\r\n \"Microsoft.Logic/workflows/validate/action\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Web/connectionGateways/*/read\",\r\n \"Microsoft.Web/connections/*/read\",\r\n \"Microsoft.Web/customApis/*/read\",\r\n \"Microsoft.Web/serverFarms/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-04-28T21:33:30.4656007Z\",\r\n \"updatedOn\": \"2019-10-15T04:28:56.3265986Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/515c2055-d9d4-4321-b1b9-bd0c9a0f79fe\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"515c2055-d9d4-4321-b1b9-bd0c9a0f79fe\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Logic App Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage logic app, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ClassicStorage/storageAccounts/listKeys/action\",\r\n \"Microsoft.ClassicStorage/storageAccounts/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/metricAlerts/*\",\r\n \"Microsoft.Insights/diagnosticSettings/*\",\r\n \"Microsoft.Insights/logdefinitions/*\",\r\n \"Microsoft.Insights/metricDefinitions/*\",\r\n \"Microsoft.Logic/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/listkeys/action\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Web/connectionGateways/*\",\r\n \"Microsoft.Web/connections/*\",\r\n \"Microsoft.Web/customApis/*\",\r\n \"Microsoft.Web/serverFarms/join/action\",\r\n \"Microsoft.Web/serverFarms/read\",\r\n \"Microsoft.Web/sites/functions/listSecrets/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-04-28T21:33:30.4656007Z\",\r\n \"updatedOn\": \"2019-10-15T04:31:27.7685427Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/87a39d53-fc1b-424a-814c-f7e04687dc9e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"87a39d53-fc1b-424a-814c-f7e04687dc9e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Application Operator Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read and perform actions on Managed Application resources\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Solutions/applications/read\",\r\n \"Microsoft.Solutions/*/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-07-27T00:59:33.7988813Z\",\r\n \"updatedOn\": \"2019-02-20T01:09:55.1593079Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/c7393b34-138c-406f-901b-d8cf2b17e6ae\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c7393b34-138c-406f-901b-d8cf2b17e6ae\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Applications Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read resources in a managed app and request JIT access.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Solutions/jitRequests/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-09-06T00:33:58.3651522Z\",\r\n \"updatedOn\": \"2018-09-06T00:33:58.3651522Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b9331d33-8a36-4f8c-b097-4f54124fdb44\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b9331d33-8a36-4f8c-b097-4f54124fdb44\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Identity Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read and Assign User Assigned Identity\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ManagedIdentity/userAssignedIdentities/*/read\",\r\n \"Microsoft.ManagedIdentity/userAssignedIdentities/*/assign/action\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-14T19:52:04.3924594Z\",\r\n \"updatedOn\": \"2017-12-14T22:16:00.1483256Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/f1a07417-d97a-45cb-824c-7a7467783830\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f1a07417-d97a-45cb-824c-7a7467783830\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Identity Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Create, Read, Update, and Delete User Assigned Identity\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ManagedIdentity/userAssignedIdentities/read\",\r\n \"Microsoft.ManagedIdentity/userAssignedIdentities/write\",\r\n \"Microsoft.ManagedIdentity/userAssignedIdentities/delete\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-14T19:53:42.8804692Z\",\r\n \"updatedOn\": \"2019-06-20T21:51:27.0850433Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/e40ec5ca-96e0-45a2-b4ff-59039f2c2b59\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e40ec5ca-96e0-45a2-b4ff-59039f2c2b59\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Management Group Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Management Group Contributor Role\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Management/managementGroups/delete\",\r\n \"Microsoft.Management/managementGroups/read\",\r\n \"Microsoft.Management/managementGroups/subscriptions/delete\",\r\n \"Microsoft.Management/managementGroups/subscriptions/write\",\r\n \"Microsoft.Management/managementGroups/write\",\r\n \"Microsoft.Management/managementGroups/subscriptions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-06-22T00:28:29.0523964Z\",\r\n \"updatedOn\": \"2020-07-06T18:13:34.9045672Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5d58bcaf-24a5-4b20-bdb6-eed9f69fbe4c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5d58bcaf-24a5-4b20-bdb6-eed9f69fbe4c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Management Group Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Management Group Reader Role\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Management/managementGroups/read\",\r\n \"Microsoft.Management/managementGroups/subscriptions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-06-22T00:31:03.4295347Z\",\r\n \"updatedOn\": \"2020-07-06T18:09:27.1441705Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/ac63b705-f282-497d-ac71-919bf39d939d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ac63b705-f282-497d-ac71-919bf39d939d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Monitoring Metrics Publisher\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Enables publishing metrics against Azure resources\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Insights/Register/Action\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Insights/Metrics/Write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-08-14T00:36:16.5610279Z\",\r\n \"updatedOn\": \"2018-08-14T00:37:18.1465065Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/3913510d-42f4-4e42-8a64-420c390055eb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3913510d-42f4-4e42-8a64-420c390055eb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Monitoring Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read all monitoring data.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/search/action\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-09-21T19:19:52.4939376Z\",\r\n \"updatedOn\": \"2018-01-30T18:08:27.262625Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/43d0d8ad-25c7-4714-9337-8ba259a9fe05\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"43d0d8ad-25c7-4714-9337-8ba259a9fe05\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Network Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage networks, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-02T00:18:27.3542698Z\",\r\n \"updatedOn\": \"2016-05-31T23:14:00.3326359Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4d97b98b-1d4f-4787-a291-c67834d212e7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Monitoring Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read all monitoring data and update monitoring settings.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.AlertsManagement/alerts/*\",\r\n \"Microsoft.AlertsManagement/alertsSummary/*\",\r\n \"Microsoft.Insights/actiongroups/*\",\r\n \"Microsoft.Insights/activityLogAlerts/*\",\r\n \"Microsoft.Insights/AlertRules/*\",\r\n \"Microsoft.Insights/components/*\",\r\n \"Microsoft.Insights/DiagnosticSettings/*\",\r\n \"Microsoft.Insights/eventtypes/*\",\r\n \"Microsoft.Insights/LogDefinitions/*\",\r\n \"Microsoft.Insights/metricalerts/*\",\r\n \"Microsoft.Insights/MetricDefinitions/*\",\r\n \"Microsoft.Insights/Metrics/*\",\r\n \"Microsoft.Insights/Register/Action\",\r\n \"Microsoft.Insights/scheduledqueryrules/*\",\r\n \"Microsoft.Insights/webtests/*\",\r\n \"Microsoft.Insights/workbooks/*\",\r\n \"Microsoft.Insights/privateLinkScopes/*\",\r\n \"Microsoft.Insights/privateLinkScopeOperationStatuses/*\",\r\n \"Microsoft.OperationalInsights/workspaces/write\",\r\n \"Microsoft.OperationalInsights/workspaces/intelligencepacks/*\",\r\n \"Microsoft.OperationalInsights/workspaces/savedSearches/*\",\r\n \"Microsoft.OperationalInsights/workspaces/search/action\",\r\n \"Microsoft.OperationalInsights/workspaces/sharedKeys/action\",\r\n \"Microsoft.OperationalInsights/workspaces/storageinsightconfigs/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.WorkloadMonitor/monitors/*\",\r\n \"Microsoft.WorkloadMonitor/notificationSettings/*\",\r\n \"Microsoft.AlertsManagement/smartDetectorAlertRules/*\",\r\n \"Microsoft.AlertsManagement/actionRules/*\",\r\n \"Microsoft.AlertsManagement/smartGroups/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-09-21T19:21:08.4345976Z\",\r\n \"updatedOn\": \"2020-04-19T16:03:16.7692305Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"749f88d5-cbae-40b8-bcfc-e573ddc772fa\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"New Relic APM Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage New Relic Application Performance Management accounts and applications, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"NewRelic.APM/accounts/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:42:16.2033878Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5d28c62d-5b37-4476-8438-e587778df237\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5d28c62d-5b37-4476-8438-e587778df237\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage everything, including access to resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:32.2101122Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8e3af657-a8ff-443c-a75c-2fe8c4bcb635\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8e3af657-a8ff-443c-a75c-2fe8c4bcb635\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Redis Cache Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Redis caches, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Cache/register/action\",\r\n \"Microsoft.Cache/redis/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2020-07-16T00:20:31.8240854Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/e0f68234-74aa-48ed-b826-c38b57376e17\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e0f68234-74aa-48ed-b826-c38b57376e17\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Reader and Data Access\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you view everything but will not let you delete or create a storage account or contained resource. It will also allow read/write access to all data contained in a storage account via access to storage account keys.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/listKeys/action\",\r\n \"Microsoft.Storage/storageAccounts/ListAccountSas/action\",\r\n \"Microsoft.Storage/storageAccounts/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-27T23:20:46.1498906Z\",\r\n \"updatedOn\": \"2019-04-04T23:41:26.1056261Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/c12c1c16-33a1-487b-954d-41c89c60f349\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c12c1c16-33a1-487b-954d-41c89c60f349\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Resource Policy Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Users with rights to create/modify resource policy, create support ticket and read resources/hierarchy.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Authorization/policyassignments/*\",\r\n \"Microsoft.Authorization/policydefinitions/*\",\r\n \"Microsoft.Authorization/policysetdefinitions/*\",\r\n \"Microsoft.PolicyInsights/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-08-25T19:08:01.3861639Z\",\r\n \"updatedOn\": \"2019-11-20T20:26:12.8811365Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/36243c78-bf99-498c-9df9-86d9f8d28608\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"36243c78-bf99-498c-9df9-86d9f8d28608\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Scheduler Job Collections Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Scheduler job collections, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Scheduler/jobcollections/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:42:24.8360756Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/188a0f2f-5c9e-469b-ae67-2aa5ce574b94\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"188a0f2f-5c9e-469b-ae67-2aa5ce574b94\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Search Service Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Search services, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Search/searchServices/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:42:21.8687229Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/7ca78c08-252a-4471-8644-bb5ff32d4ba0\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7ca78c08-252a-4471-8644-bb5ff32d4ba0\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Security Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Security Admin Role\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Authorization/policyAssignments/*\",\r\n \"Microsoft.Authorization/policyDefinitions/*\",\r\n \"Microsoft.Authorization/policySetDefinitions/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Management/managementGroups/read\",\r\n \"Microsoft.operationalInsights/workspaces/*/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Security/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-03T07:51:23.0917487Z\",\r\n \"updatedOn\": \"2019-03-12T21:12:48.635016Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fb1c8493-542b-48eb-b624-b4c8fea62acd\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Security Manager (Legacy)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"This is a legacy role. Please use Security Administrator instead\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ClassicCompute/*/read\",\r\n \"Microsoft.ClassicCompute/virtualMachines/*/write\",\r\n \"Microsoft.ClassicNetwork/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Security/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-22T17:45:15.8986455Z\",\r\n \"updatedOn\": \"2018-03-08T18:18:48.618362Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/e3d13bf0-dd5a-482e-ba6b-9b8433878d10\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e3d13bf0-dd5a-482e-ba6b-9b8433878d10\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Security Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Security Reader Role\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.operationalInsights/workspaces/*/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Security/*/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Management/managementGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-03T07:48:49.0516559Z\",\r\n \"updatedOn\": \"2018-06-28T17:27:23.106561Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/39bc4728-0917-49c7-9d2c-d95423bc2eb4\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"39bc4728-0917-49c7-9d2c-d95423bc2eb4\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Spatial Anchors Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage spatial anchors in your account, but not delete them\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/create/action\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/query/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-21T17:57:41.1420864Z\",\r\n \"updatedOn\": \"2019-02-13T06:13:39.8686435Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8bbe83f1-e2a6-4df7-8cb4-4e04d4e5c827\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8bbe83f1-e2a6-4df7-8cb4-4e04d4e5c827\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Site Recovery Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Site Recovery service except vault creation and role assignment\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.RecoveryServices/locations/allocatedStamp/read\",\r\n \"Microsoft.RecoveryServices/locations/allocateStamp/action\",\r\n \"Microsoft.RecoveryServices/Vaults/certificates/write\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/*\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/refreshContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationAlertSettings/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationEvents/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationJobs/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationPolicies/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/*\",\r\n \"Microsoft.RecoveryServices/Vaults/storageConfig/*\",\r\n \"Microsoft.RecoveryServices/Vaults/tokenInfo/read\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.RecoveryServices/Vaults/vaultTokens/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/*\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/notificationConfiguration/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationOperationStatus/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-19T13:46:17.4592776Z\",\r\n \"updatedOn\": \"2019-11-07T06:13:49.0760858Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/6670b86e-a3f7-4917-ac9b-5d6ab1be4567\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"6670b86e-a3f7-4917-ac9b-5d6ab1be4567\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Site Recovery Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you failover and failback but not perform other Site Recovery management operations\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.RecoveryServices/locations/allocatedStamp/read\",\r\n \"Microsoft.RecoveryServices/locations/allocateStamp/action\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/read\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/refreshContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationAlertSettings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationEvents/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/checkConsistency/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/reassociateGateway/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/renewcertificate/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/replicationNetworkMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectableItems/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/applyRecoveryPoint/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/failoverCommit/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/plannedFailover/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/recoveryPoints/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/repairReplication/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/reProtect/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/switchprotection/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/testFailover/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/testFailoverCleanup/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/unplannedFailover/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/updateMobilityService/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/refreshProvider/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/replicationStorageClassificationMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationvCenters/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationJobs/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationPolicies/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/failoverCommit/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/plannedFailover/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/reProtect/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/testFailover/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/testFailoverCleanup/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/unplannedFailover/action\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/*\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/notificationConfiguration/read\",\r\n \"Microsoft.RecoveryServices/Vaults/storageConfig/read\",\r\n \"Microsoft.RecoveryServices/Vaults/tokenInfo/read\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.RecoveryServices/Vaults/vaultTokens/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-19T13:47:50.1341148Z\",\r\n \"updatedOn\": \"2019-08-28T12:00:57.4472826Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": \"\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/494ae006-db33-4328-bf46-533a6560a3ca\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"494ae006-db33-4328-bf46-533a6560a3ca\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Spatial Anchors Account Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you locate and read properties of spatial anchors in your account\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/query/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-21T17:57:42.9271004Z\",\r\n \"updatedOn\": \"2019-02-13T06:16:15.3170663Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5d51204f-eb77-4b1c-b86a-2ec626c49413\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5d51204f-eb77-4b1c-b86a-2ec626c49413\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Site Recovery Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you view Site Recovery status but not perform other management operations\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.RecoveryServices/locations/allocatedStamp/read\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/notificationConfiguration/read\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/refreshContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationAlertSettings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationEvents/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/replicationNetworkMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectableItems/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/recoveryPoints/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/replicationStorageClassificationMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationvCenters/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationJobs/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationPolicies/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/read\",\r\n \"Microsoft.RecoveryServices/Vaults/storageConfig/read\",\r\n \"Microsoft.RecoveryServices/Vaults/tokenInfo/read\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.RecoveryServices/Vaults/vaultTokens/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-19T13:35:40.0093634Z\",\r\n \"updatedOn\": \"2017-05-26T19:54:51.393325Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/dbaa88c4-0c30-4179-9fb3-46319faa6149\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"dbaa88c4-0c30-4179-9fb3-46319faa6149\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Spatial Anchors Account Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage spatial anchors in your account, including deleting them\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/create/action\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/delete\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/query/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-21T17:57:43.5489832Z\",\r\n \"updatedOn\": \"2019-02-13T06:15:31.8572222Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/70bbe301-9835-447d-afdd-19eb3167307c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"70bbe301-9835-447d-afdd-19eb3167307c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SQL Managed Instance Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage SQL Managed Instances and required network configuration, but can’t give access to others.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Network/networkSecurityGroups/*\",\r\n \"Microsoft.Network/routeTables/*\",\r\n \"Microsoft.Sql/locations/*/read\",\r\n \"Microsoft.Sql/locations/instanceFailoverGroups/*\",\r\n \"Microsoft.Sql/managedInstances/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Network/virtualNetworks/subnets/*\",\r\n \"Microsoft.Network/virtualNetworks/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/metrics/read\",\r\n \"Microsoft.Insights/metricDefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-10T22:57:14.2937983Z\",\r\n \"updatedOn\": \"2020-06-24T22:56:31.0576055Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/4939a1f6-9ae0-4e48-a1e0-f2cbe897382d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4939a1f6-9ae0-4e48-a1e0-f2cbe897382d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SQL DB Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage SQL databases, but not access to them. Also, you can't manage their security-related policies or their parent SQL servers.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Sql/locations/*/read\",\r\n \"Microsoft.Sql/servers/databases/*\",\r\n \"Microsoft.Sql/servers/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Insights/metrics/read\",\r\n \"Microsoft.Insights/metricDefinitions/read\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Sql/managedInstances/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/managedInstances/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/databases/auditingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/auditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/auditRecords/read\",\r\n \"Microsoft.Sql/servers/databases/connectionPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/dataMaskingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/extendedAuditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/securityMetrics/*\",\r\n \"Microsoft.Sql/servers/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentScans/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentSettings/*\",\r\n \"Microsoft.Sql/servers/vulnerabilityAssessments/*\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-28T22:44:35.864967Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/9b7fa17d-e63e-47b0-bb0a-15c516ac86ec\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"9b7fa17d-e63e-47b0-bb0a-15c516ac86ec\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SQL Security Manager\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage the security-related policies of SQL servers and databases, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Sql/managedInstances/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/managedInstances/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/databases/transparentDataEncryption/*\",\r\n \"Microsoft.Sql/managedInstances/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/auditingPolicies/*\",\r\n \"Microsoft.Sql/servers/auditingSettings/*\",\r\n \"Microsoft.Sql/servers/extendedAuditingSettings/read\",\r\n \"Microsoft.Sql/servers/databases/auditingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/auditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/auditRecords/read\",\r\n \"Microsoft.Sql/servers/databases/connectionPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/dataMaskingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/extendedAuditingSettings/read\",\r\n \"Microsoft.Sql/servers/databases/read\",\r\n \"Microsoft.Sql/servers/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/schemas/read\",\r\n \"Microsoft.Sql/servers/databases/schemas/tables/columns/read\",\r\n \"Microsoft.Sql/servers/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/schemas/tables/read\",\r\n \"Microsoft.Sql/servers/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/securityMetrics/*\",\r\n \"Microsoft.Sql/servers/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/transparentDataEncryption/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentScans/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentSettings/*\",\r\n \"Microsoft.Sql/servers/firewallRules/*\",\r\n \"Microsoft.Sql/servers/read\",\r\n \"Microsoft.Sql/servers/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/servers/vulnerabilityAssessments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-16T18:44:40.4607572Z\",\r\n \"updatedOn\": \"2019-08-08T22:58:22.2532171Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": \"yaiyun\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"056cd41c-7e88-42e1-933e-88ba6a50c9c3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage storage accounts, including accessing storage account keys which provide full access to storage account data.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/diagnosticSettings/*\",\r\n \"Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-02T00:18:27.3542698Z\",\r\n \"updatedOn\": \"2019-05-29T20:56:33.9582501Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"17d1049b-9a84-46fb-8f53-869881c3d3ab\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SQL Server Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage SQL servers and databases, but not access to them, and not their security -related policies.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Sql/locations/*/read\",\r\n \"Microsoft.Sql/servers/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Insights/metrics/read\",\r\n \"Microsoft.Insights/metricDefinitions/read\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Sql/managedInstances/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/managedInstances/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/auditingPolicies/*\",\r\n \"Microsoft.Sql/servers/auditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/auditingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/auditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/auditRecords/read\",\r\n \"Microsoft.Sql/servers/databases/connectionPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/dataMaskingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/extendedAuditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/securityMetrics/*\",\r\n \"Microsoft.Sql/servers/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentScans/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentSettings/*\",\r\n \"Microsoft.Sql/servers/extendedAuditingSettings/*\",\r\n \"Microsoft.Sql/servers/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/servers/vulnerabilityAssessments/*\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-28T22:44:36.5466043Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Account Key Operator Service Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Storage Account Key Operators are allowed to list and regenerate keys on Storage Accounts\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/listkeys/action\",\r\n \"Microsoft.Storage/storageAccounts/regeneratekey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-13T18:26:11.577057Z\",\r\n \"updatedOn\": \"2017-04-13T20:57:14.5990198Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/81a9662b-bebf-436f-a333-f67b29880f12\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"81a9662b-bebf-436f-a333-f67b29880f12\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Blob Data Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read, write and delete access to Azure Storage blob containers and data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/delete\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/write\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/move/action\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-21T00:01:24.7972312Z\",\r\n \"updatedOn\": \"2020-03-30T22:49:07.866942Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/ba92f5b4-2d11-453d-a403-e96b0029c9fe\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ba92f5b4-2d11-453d-a403-e96b0029c9fe\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Blob Data Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for full access to Azure Storage blob containers and data, including assigning POSIX access control.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/*\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-04T07:02:58.2775257Z\",\r\n \"updatedOn\": \"2019-07-16T21:30:33.7002563Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b7e6dc6d-f1e8-4753-8033-0f276bb0955b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b7e6dc6d-f1e8-4753-8033-0f276bb0955b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Blob Data Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read access to Azure Storage blob containers and data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-21T00:01:24.7972312Z\",\r\n \"updatedOn\": \"2019-07-15T22:01:25.5409721Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/2a2b9908-6ea1-4ae2-8e65-a410df84e7d1\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"2a2b9908-6ea1-4ae2-8e65-a410df84e7d1\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Queue Data Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read, write, and delete access to Azure Storage queues and queue messages\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/delete\",\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/read\",\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/delete\",\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/read\",\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-21T00:01:24.7972312Z\",\r\n \"updatedOn\": \"2019-03-05T21:58:02.7367128Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/974c5e8b-45b9-4653-ba55-5f855dd0fb88\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"974c5e8b-45b9-4653-ba55-5f855dd0fb88\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Queue Data Message Processor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for peek, receive, and delete access to Azure Storage queue messages\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/read\",\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/process/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-01-28T22:27:04.8947111Z\",\r\n \"updatedOn\": \"2019-03-05T22:05:46.1259125Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8a0f0c08-91a1-4084-bc3d-661d67233fed\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8a0f0c08-91a1-4084-bc3d-661d67233fed\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Queue Data Message Sender\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for sending of Azure Storage queue messages\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/add/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-01-28T22:28:34.7459724Z\",\r\n \"updatedOn\": \"2019-03-05T22:11:49.6383892Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/c6a89b2d-59bc-44d0-9896-0f6e12d7b80a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c6a89b2d-59bc-44d0-9896-0f6e12d7b80a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Queue Data Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read access to Azure Storage queues and queue messages\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-21T00:01:24.7972312Z\",\r\n \"updatedOn\": \"2019-03-05T22:17:32.1779262Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/19e7f393-937e-4f77-808e-94535e297925\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"19e7f393-937e-4f77-808e-94535e297925\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Support Request Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you create and manage Support requests\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-06-22T22:25:37.8053068Z\",\r\n \"updatedOn\": \"2017-06-23T01:06:24.2399631Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/cfd33db0-3dd1-45e3-aa9d-cdbdf3b6f24e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"cfd33db0-3dd1-45e3-aa9d-cdbdf3b6f24e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Traffic Manager Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Traffic Manager profiles, but does not let you control who has access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/trafficManagerProfiles/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-10-15T23:33:25.9730842Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:44.1458854Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/a4b10055-b0c7-44c2-b00f-c7b5b3550cf7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a4b10055-b0c7-44c2-b00f-c7b5b3550cf7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Virtual Machine Administrator Login\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"View Virtual Machines in the portal and login as administrator\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Network/publicIPAddresses/read\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/loadBalancers/read\",\r\n \"Microsoft.Network/networkInterfaces/read\",\r\n \"Microsoft.Compute/virtualMachines/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Compute/virtualMachines/login/action\",\r\n \"Microsoft.Compute/virtualMachines/loginAsAdmin/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-02-09T18:36:13.3315744Z\",\r\n \"updatedOn\": \"2018-05-09T22:17:57.0514548Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/1c0163c0-47e6-4577-8991-ea5c82e286e4\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"1c0163c0-47e6-4577-8991-ea5c82e286e4\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"User Access Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage user access to Azure resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Authorization/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:12.6807454Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/18d7d88d-d35e-4fb5-a5c3-7773c20a72d9\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"18d7d88d-d35e-4fb5-a5c3-7773c20a72d9\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Virtual Machine User Login\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"View Virtual Machines in the portal and login as a regular user.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Network/publicIPAddresses/read\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/loadBalancers/read\",\r\n \"Microsoft.Network/networkInterfaces/read\",\r\n \"Microsoft.Compute/virtualMachines/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Compute/virtualMachines/login/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-02-09T18:36:13.3315744Z\",\r\n \"updatedOn\": \"2018-05-09T22:18:52.2780979Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/fb879df8-f326-4884-b1cf-06f3ad86be52\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fb879df8-f326-4884-b1cf-06f3ad86be52\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Virtual Machine Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage virtual machines, but not access to them, and not the virtual network or storage account they're connected to.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Compute/availabilitySets/*\",\r\n \"Microsoft.Compute/locations/*\",\r\n \"Microsoft.Compute/virtualMachines/*\",\r\n \"Microsoft.Compute/virtualMachineScaleSets/*\",\r\n \"Microsoft.Compute/disks/write\",\r\n \"Microsoft.Compute/disks/read\",\r\n \"Microsoft.Compute/disks/delete\",\r\n \"Microsoft.DevTestLab/schedules/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/applicationGateways/backendAddressPools/join/action\",\r\n \"Microsoft.Network/loadBalancers/backendAddressPools/join/action\",\r\n \"Microsoft.Network/loadBalancers/inboundNatPools/join/action\",\r\n \"Microsoft.Network/loadBalancers/inboundNatRules/join/action\",\r\n \"Microsoft.Network/loadBalancers/probes/join/action\",\r\n \"Microsoft.Network/loadBalancers/read\",\r\n \"Microsoft.Network/locations/*\",\r\n \"Microsoft.Network/networkInterfaces/*\",\r\n \"Microsoft.Network/networkSecurityGroups/join/action\",\r\n \"Microsoft.Network/networkSecurityGroups/read\",\r\n \"Microsoft.Network/publicIPAddresses/join/action\",\r\n \"Microsoft.Network/publicIPAddresses/read\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/join/action\",\r\n \"Microsoft.RecoveryServices/locations/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/*/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/write\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.RecoveryServices/Vaults/write\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.SqlVirtualMachine/*\",\r\n \"Microsoft.Storage/storageAccounts/listKeys/action\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-02T00:18:27.3542698Z\",\r\n \"updatedOn\": \"2020-02-03T19:38:21.2170228Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Web Plan Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage the web plans for websites, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Web/serverFarms/*\",\r\n \"Microsoft.Web/hostingEnvironments/Join/Action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-03-26T18:17:34.5018645Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/2cc479cb-7b4d-49a8-b449-8c00fd0f0a4b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"2cc479cb-7b4d-49a8-b449-8c00fd0f0a4b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Website Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage websites (not web plans), but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/components/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Web/certificates/*\",\r\n \"Microsoft.Web/listSitesAssignedToHostName/read\",\r\n \"Microsoft.Web/serverFarms/join/action\",\r\n \"Microsoft.Web/serverFarms/read\",\r\n \"Microsoft.Web/sites/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-05-12T23:10:23.6193952Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:46.9407288Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/de139f84-1756-47ae-9be6-808fbbe84772\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"de139f84-1756-47ae-9be6-808fbbe84772\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Service Bus Data Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for full access to Azure Service Bus resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ServiceBus/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ServiceBus/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-16T21:33:36.7445745Z\",\r\n \"updatedOn\": \"2019-08-21T22:47:11.3982905Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/090c5cfd-751d-490a-894a-3ce6f1109419\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"090c5cfd-751d-490a-894a-3ce6f1109419\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Event Hubs Data Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for full access to Azure Event Hubs resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.EventHub/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.EventHub/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-16T21:34:29.8656362Z\",\r\n \"updatedOn\": \"2019-08-21T22:58:57.7584645Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/f526a384-b230-433a-b45c-95f59c4a2dec\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f526a384-b230-433a-b45c-95f59c4a2dec\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Attestation Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read write or delete the attestation provider instance\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Attestation/attestationProviders/attestation/read\",\r\n \"Microsoft.Attestation/attestationProviders/attestation/write\",\r\n \"Microsoft.Attestation/attestationProviders/attestation/delete\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-19T00:24:09.3354177Z\",\r\n \"updatedOn\": \"2019-05-10T17:59:06.3448436Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/bbf86eb8-f7b4-4cce-96e4-18cddf81d86e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"bbf86eb8-f7b4-4cce-96e4-18cddf81d86e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"HDInsight Cluster Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read and modify HDInsight cluster configurations.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.HDInsight/*/read\",\r\n \"Microsoft.HDInsight/clusters/getGatewaySettings/action\",\r\n \"Microsoft.HDInsight/clusters/updateGatewaySettings/action\",\r\n \"Microsoft.HDInsight/clusters/configurations/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-20T00:03:01.7110732Z\",\r\n \"updatedOn\": \"2019-04-28T02:34:17.4679314Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/61ed4efc-fab3-44fd-b111-e24485cc132a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"61ed4efc-fab3-44fd-b111-e24485cc132a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cosmos DB Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Azure Cosmos DB accounts, but not access data in them. Prevents access to account keys and connection strings.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.DocumentDb/databaseAccounts/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.DocumentDB/databaseAccounts/readonlyKeys/*\",\r\n \"Microsoft.DocumentDB/databaseAccounts/regenerateKey/*\",\r\n \"Microsoft.DocumentDB/databaseAccounts/listKeys/*\",\r\n \"Microsoft.DocumentDB/databaseAccounts/listConnectionStrings/*\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-26T17:01:17.0169383Z\",\r\n \"updatedOn\": \"2019-11-21T01:34:13.3746345Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/230815da-be43-4aae-9cb4-875f7bd000aa\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"230815da-be43-4aae-9cb4-875f7bd000aa\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Hybrid Server Resource Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read, write, delete, and re-onboard Hybrid servers to the Hybrid Resource Provider.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.HybridCompute/machines/*\",\r\n \"Microsoft.HybridCompute/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-29T21:39:32.3132923Z\",\r\n \"updatedOn\": \"2019-05-06T20:08:25.3180258Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/48b40c6e-82e0-4eb3-90d5-19e40f49b624\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"48b40c6e-82e0-4eb3-90d5-19e40f49b624\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Hybrid Server Onboarding\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can onboard new Hybrid servers to the Hybrid Resource Provider.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.HybridCompute/machines/read\",\r\n \"Microsoft.HybridCompute/machines/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-29T22:36:28.1873756Z\",\r\n \"updatedOn\": \"2019-05-06T20:09:17.9364269Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5d1e5ee4-7c68-4a71-ac8b-0739630a3dfb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5d1e5ee4-7c68-4a71-ac8b-0739630a3dfb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Event Hubs Data Receiver\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows receive access to Azure Event Hubs resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.EventHub/*/eventhubs/consumergroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.EventHub/*/receive/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-05-10T06:25:21.1056666Z\",\r\n \"updatedOn\": \"2019-08-21T23:00:32.6225396Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/a638d3c7-ab3a-418d-83e6-5f17a39d4fde\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a638d3c7-ab3a-418d-83e6-5f17a39d4fde\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Event Hubs Data Sender\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows send access to Azure Event Hubs resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.EventHub/*/eventhubs/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.EventHub/*/send/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-05-10T06:26:12.4673714Z\",\r\n \"updatedOn\": \"2019-08-21T23:02:26.6155679Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/2b629674-e913-4c01-ae53-ef4638d8f975\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"2b629674-e913-4c01-ae53-ef4638d8f975\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Service Bus Data Receiver\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for receive access to Azure Service Bus resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ServiceBus/*/queues/read\",\r\n \"Microsoft.ServiceBus/*/topics/read\",\r\n \"Microsoft.ServiceBus/*/topics/subscriptions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ServiceBus/*/receive/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-05-10T06:43:01.6343849Z\",\r\n \"updatedOn\": \"2019-08-21T22:55:24.3423558Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/4f6d3b9b-027b-4f4c-9142-0e5a2a2247e0\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4f6d3b9b-027b-4f4c-9142-0e5a2a2247e0\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Service Bus Data Sender\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for send access to Azure Service Bus resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ServiceBus/*/queues/read\",\r\n \"Microsoft.ServiceBus/*/topics/read\",\r\n \"Microsoft.ServiceBus/*/topics/subscriptions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ServiceBus/*/send/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-05-10T06:43:46.7046934Z\",\r\n \"updatedOn\": \"2019-08-21T22:57:12.2555683Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/69a216fc-b8fb-44d8-bc22-1f3c2cd27a39\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"69a216fc-b8fb-44d8-bc22-1f3c2cd27a39\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage File Data SMB Share Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read access to Azure File Share over SMB\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-07-01T20:19:31.8620471Z\",\r\n \"updatedOn\": \"2019-08-07T01:00:41.9223409Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/aba4ae5f-2193-4029-9191-0cb91df5e314\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"aba4ae5f-2193-4029-9191-0cb91df5e314\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage File Data SMB Share Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read, write, and delete access in Azure Storage file shares over SMB\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read\",\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/write\",\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/delete\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-07-01T20:54:35.483431Z\",\r\n \"updatedOn\": \"2019-08-07T01:05:24.4309872Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/0c867c2a-1d8c-454a-a3db-ab2ea1bdc8bb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0c867c2a-1d8c-454a-a3db-ab2ea1bdc8bb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Private DNS Zone Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage private DNS zone resources, but not the virtual networks they are linked to.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Network/privateDnsZones/*\",\r\n \"Microsoft.Network/privateDnsOperationResults/*\",\r\n \"Microsoft.Network/privateDnsOperationStatuses/*\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/virtualNetworks/join/action\",\r\n \"Microsoft.Authorization/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-07-10T19:31:15.5645518Z\",\r\n \"updatedOn\": \"2019-07-11T21:12:01.7260648Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b12aa53e-6015-4669-85d0-8515ebb3ae7f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b12aa53e-6015-4669-85d0-8515ebb3ae7f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Blob Delegator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for generation of a user delegation key which can be used to sign SAS tokens\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-07-23T00:51:16.3376761Z\",\r\n \"updatedOn\": \"2019-07-23T01:14:31.8778475Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/db58b8e5-c6ad-4a2a-8342-4190687cbf4a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"db58b8e5-c6ad-4a2a-8342-4190687cbf4a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Desktop Virtualization User\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows user to use the applications in an application group.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.DesktopVirtualization/applicationGroups/useApplications/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-07T00:29:03.8727621Z\",\r\n \"updatedOn\": \"2019-08-07T00:29:03.8727621Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/1d18fff3-a72a-46b5-b4a9-0b38a3cd7e63\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"1d18fff3-a72a-46b5-b4a9-0b38a3cd7e63\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage File Data SMB Share Elevated Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read, write, delete and modify NTFS permission access in Azure Storage file shares over SMB\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read\",\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/write\",\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/delete\",\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/modifypermissions/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-07T01:35:36.9935457Z\",\r\n \"updatedOn\": \"2019-08-07T01:35:36.9935457Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/a7264617-510b-434b-a828-9731dc254ea7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a7264617-510b-434b-a828-9731dc254ea7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Blueprint Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage blueprint definitions, but not assign them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Blueprint/blueprints/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-14T21:55:16.9683949Z\",\r\n \"updatedOn\": \"2019-08-17T00:10:55.7494677Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/41077137-e803-4205-871c-5a86e6a753b4\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"41077137-e803-4205-871c-5a86e6a753b4\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Blueprint Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can assign existing published blueprints, but cannot create new blueprints. NOTE: this only works if the assignment is done with a user-assigned managed identity.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Blueprint/blueprintAssignments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-14T21:56:48.7897875Z\",\r\n \"updatedOn\": \"2019-08-17T00:06:02.6509737Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/437d2ced-4a38-4302-8479-ed2bcb43d090\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"437d2ced-4a38-4302-8479-ed2bcb43d090\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Sentinel Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Azure Sentinel Contributor\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.SecurityInsights/*\",\r\n \"Microsoft.OperationalInsights/workspaces/analytics/query/action\",\r\n \"Microsoft.OperationalInsights/workspaces/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/savedSearches/*\",\r\n \"Microsoft.OperationsManagement/solutions/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/dataSources/read\",\r\n \"Microsoft.Insights/workbooks/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-28T16:39:03.8725173Z\",\r\n \"updatedOn\": \"2020-03-11T15:20:51.6768533Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/ab8e14d6-4a74-4a29-9ba8-549422addade\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ab8e14d6-4a74-4a29-9ba8-549422addade\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Sentinel Responder\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Azure Sentinel Responder\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.SecurityInsights/*/read\",\r\n \"Microsoft.SecurityInsights/dataConnectorsCheckRequirements/action\",\r\n \"Microsoft.SecurityInsights/cases/*\",\r\n \"Microsoft.SecurityInsights/incidents/*\",\r\n \"Microsoft.OperationalInsights/workspaces/analytics/query/action\",\r\n \"Microsoft.OperationalInsights/workspaces/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/dataSources/read\",\r\n \"Microsoft.OperationalInsights/workspaces/savedSearches/read\",\r\n \"Microsoft.OperationsManagement/solutions/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/dataSources/read\",\r\n \"Microsoft.Insights/workbooks/read\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-28T16:54:07.6467264Z\",\r\n \"updatedOn\": \"2020-04-02T08:42:10.2864085Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/3e150937-b8fe-4cfb-8069-0eaf05ecd056\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3e150937-b8fe-4cfb-8069-0eaf05ecd056\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Sentinel Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Azure Sentinel Reader\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.SecurityInsights/*/read\",\r\n \"Microsoft.SecurityInsights/dataConnectorsCheckRequirements/action\",\r\n \"Microsoft.OperationalInsights/workspaces/analytics/query/action\",\r\n \"Microsoft.OperationalInsights/workspaces/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/LinkedServices/read\",\r\n \"Microsoft.OperationalInsights/workspaces/savedSearches/read\",\r\n \"Microsoft.OperationsManagement/solutions/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/dataSources/read\",\r\n \"Microsoft.Insights/workbooks/read\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-28T16:58:50.1132117Z\",\r\n \"updatedOn\": \"2020-04-02T08:34:51.7222706Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8d289c81-5878-46d4-8554-54e1e3d8b5cb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8d289c81-5878-46d4-8554-54e1e3d8b5cb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Workbook Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read workbooks.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"microsoft.insights/workbooks/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-28T20:56:17.680814Z\",\r\n \"updatedOn\": \"2019-08-28T21:43:05.0202124Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b279062a-9be3-42a0-92ae-8b3cf002ec4d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b279062a-9be3-42a0-92ae-8b3cf002ec4d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Workbook Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can save shared workbooks.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Insights/workbooks/write\",\r\n \"Microsoft.Insights/workbooks/delete\",\r\n \"Microsoft.Insights/workbooks/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-28T20:59:42.4820277Z\",\r\n \"updatedOn\": \"2020-01-22T00:05:20.938721Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/e8ddcd69-c73f-4f9f-9844-4100522f16ad\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e8ddcd69-c73f-4f9f-9844-4100522f16ad\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Policy Insights Data Writer (Preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows read access to resource policies and write access to resource component policy events.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/policyassignments/read\",\r\n \"Microsoft.Authorization/policydefinitions/read\",\r\n \"Microsoft.Authorization/policysetdefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.PolicyInsights/checkDataPolicyCompliance/action\",\r\n \"Microsoft.PolicyInsights/policyEvents/logDataEvents/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-09-19T19:35:20.9504127Z\",\r\n \"updatedOn\": \"2019-09-19T19:37:02.5331596Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/66bb4e9e-b016-4a94-8249-4c0511c2be84\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"66bb4e9e-b016-4a94-8249-4c0511c2be84\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SignalR AccessKey Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read SignalR Service Access Keys\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.SignalRService/*/read\",\r\n \"Microsoft.SignalRService/SignalR/listkeys/action\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-09-20T09:33:19.6236874Z\",\r\n \"updatedOn\": \"2019-09-20T09:33:19.6236874Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/04165923-9d83-45d5-8227-78b77b0a687e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"04165923-9d83-45d5-8227-78b77b0a687e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SignalR Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Create, Read, Update, and Delete SignalR service resources\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.SignalRService/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-09-20T09:58:09.0009662Z\",\r\n \"updatedOn\": \"2019-09-20T09:58:09.0009662Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Connected Machine Onboarding\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can onboard Azure Connected Machines.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.HybridCompute/machines/read\",\r\n \"Microsoft.HybridCompute/machines/write\",\r\n \"Microsoft.GuestConfiguration/guestConfigurationAssignments/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-10-23T20:15:07.137287Z\",\r\n \"updatedOn\": \"2019-11-03T18:26:59.2060282Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b64e21ea-ac4e-4cdf-9dc9-5b892992bee7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b64e21ea-ac4e-4cdf-9dc9-5b892992bee7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Connected Machine Resource Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read, write, delete and re-onboard Azure Connected Machines.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.HybridCompute/machines/read\",\r\n \"Microsoft.HybridCompute/machines/write\",\r\n \"Microsoft.HybridCompute/machines/delete\",\r\n \"Microsoft.HybridCompute/machines/reconnect/action\",\r\n \"Microsoft.HybridCompute/machines/extensions/write\",\r\n \"Microsoft.HybridCompute/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-10-23T20:24:59.1474607Z\",\r\n \"updatedOn\": \"2020-03-19T22:39:54.1226122Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/cd570a14-e51a-42ad-bac8-bafd67325302\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"cd570a14-e51a-42ad-bac8-bafd67325302\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Services Registration assignment Delete Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Managed Services Registration Assignment Delete Role allows the managing tenant users to delete the registration assignment assigned to their tenant.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ManagedServices/registrationAssignments/read\",\r\n \"Microsoft.ManagedServices/registrationAssignments/delete\",\r\n \"Microsoft.ManagedServices/operationStatuses/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-10-23T22:33:33.1183469Z\",\r\n \"updatedOn\": \"2019-10-24T21:49:09.3875276Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/91c1777a-f3dc-4fae-b103-61d183457e46\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"91c1777a-f3dc-4fae-b103-61d183457e46\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"App Configuration Data Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows full access to App Configuration data.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.AppConfiguration/configurationStores/*/read\",\r\n \"Microsoft.AppConfiguration/configurationStores/*/write\",\r\n \"Microsoft.AppConfiguration/configurationStores/*/delete\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-10-25T18:41:40.1185063Z\",\r\n \"updatedOn\": \"2019-10-25T18:41:40.1185063Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5ae67dd6-50cb-40e7-96ff-dc2bfa4b606b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5ae67dd6-50cb-40e7-96ff-dc2bfa4b606b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"App Configuration Data Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows read access to App Configuration data.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.AppConfiguration/configurationStores/*/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-10-25T18:45:33.7975332Z\",\r\n \"updatedOn\": \"2019-10-25T18:45:33.7975332Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/516239f1-63e1-4d78-a4de-a74fb236a071\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"516239f1-63e1-4d78-a4de-a74fb236a071\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Kubernetes Cluster - Azure Arc Onboarding\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Role definition to authorize any user/service to create connectedClusters resource\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Kubernetes/connectedClusters/Write\",\r\n \"Microsoft.Kubernetes/connectedClusters/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-11-18T17:00:02.2087147Z\",\r\n \"updatedOn\": \"2020-02-10T22:40:48.3317559Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/34e09817-6cbe-4d01-b1a2-e0eac5743d41\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"34e09817-6cbe-4d01-b1a2-e0eac5743d41\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Experimentation Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Experimentation Contributor\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/read\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/experiment/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/emergencystop/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/read\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/write\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/delete\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-12-13T00:08:08.6679591Z\",\r\n \"updatedOn\": \"2020-07-07T20:17:06.8223079Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/7f646f1b-fa08-80eb-a22b-edd6ce5c915c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7f646f1b-fa08-80eb-a22b-edd6ce5c915c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services QnA Maker Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Let’s you read and test a KB only.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\",\r\n \"Microsoft.Authorization/roleAssignments/read\",\r\n \"Microsoft.Authorization/roleDefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-12-17T18:26:12.3329439Z\",\r\n \"updatedOn\": \"2020-05-08T12:03:46.9266538Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/466ccd10-b268-4a11-b098-b4849f024126\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"466ccd10-b268-4a11-b098-b4849f024126\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services QnA Maker Editor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Let’s you create, edit, import and export a KB. You cannot publish or delete a KB.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\",\r\n \"Microsoft.Authorization/roleAssignments/read\",\r\n \"Microsoft.Authorization/roleDefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/create/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/train/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/alterations/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/refreshkeys/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/operations/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/create/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/train/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/refreshkeys/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/operations/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-12-17T18:27:30.6434556Z\",\r\n \"updatedOn\": \"2020-05-08T12:02:34.0065552Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/f4cc2bf9-21be-47a1-bdf1-5c5804381025\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f4cc2bf9-21be-47a1-bdf1-5c5804381025\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Experimentation Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Experimentation Administrator\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/admin/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/read\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/write\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/delete\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/experimentadmin/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/experiment/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/emergencystop/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/read\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/write\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/delete\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/admin/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-12-18T22:46:33.1116612Z\",\r\n \"updatedOn\": \"2020-04-22T20:10:20.1216929Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/7f646f1b-fa08-80eb-a33b-edd6ce5c915c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7f646f1b-fa08-80eb-a33b-edd6ce5c915c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Remote Rendering Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Provides user with conversion, manage session, rendering and diagnostics capabilities for Azure Remote Rendering\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/convert/action\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/convert/read\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/convert/delete\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/read\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/action\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/delete\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/render/read\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/diagnostic/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-01-23T18:15:31.3450348Z\",\r\n \"updatedOn\": \"2020-01-23T18:15:31.3450348Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/3df8b902-2a6f-47c7-8cc5-360e9b272a7e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3df8b902-2a6f-47c7-8cc5-360e9b272a7e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Remote Rendering Client\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Provides user with manage session, rendering and diagnostics capabilities for Azure Remote Rendering.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/read\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/action\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/delete\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/render/read\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/diagnostic/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-01-23T18:32:52.7069824Z\",\r\n \"updatedOn\": \"2020-01-23T18:32:52.7069824Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/d39065c4-c120-43c9-ab0a-63eed9795f0a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"d39065c4-c120-43c9-ab0a-63eed9795f0a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Application Contributor Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for creating managed application resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Solutions/applications/*\",\r\n \"Microsoft.Solutions/register/action\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/*\",\r\n \"Microsoft.Resources/deployments/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-08T03:39:11.8933879Z\",\r\n \"updatedOn\": \"2020-03-23T02:12:30.0853051Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/641177b8-a67a-45b9-a033-47bc880bb21e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"641177b8-a67a-45b9-a033-47bc880bb21e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Security Assessment Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you push assessments to Security Center\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Security/assessments/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-13T08:23:47.7656161Z\",\r\n \"updatedOn\": \"2020-02-13T08:23:47.7656161Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/612c2aa1-cb24-443b-ac28-3ab7272de6f5\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"612c2aa1-cb24-443b-ac28-3ab7272de6f5\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Tag Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage tags on entities, without providing access to the entities themselves.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/resources/read\",\r\n \"Microsoft.Resources/subscriptions/resources/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Resources/tags/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-18T23:19:19.2977644Z\",\r\n \"updatedOn\": \"2020-02-19T00:04:58.9214962Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/4a9ae827-6dc8-4573-8ac7-8239d42aa03f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4a9ae827-6dc8-4573-8ac7-8239d42aa03f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Integration Service Environment Developer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows developers to create and update workflows, integration accounts and API connections in integration service environments.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Logic/integrationServiceEnvironments/read\",\r\n \"Microsoft.Logic/integrationServiceEnvironments/join/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-20T21:09:00.5627875Z\",\r\n \"updatedOn\": \"2020-02-20T21:36:24.619073Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/c7aa55d3-1abb-444a-a5ca-5e51e485d6ec\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c7aa55d3-1abb-444a-a5ca-5e51e485d6ec\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Integration Service Environment Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage integration service environments, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Logic/integrationServiceEnvironments/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-20T21:10:44.4008319Z\",\r\n \"updatedOn\": \"2020-02-20T21:41:56.7983599Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/a41e2c5b-bd99-4a07-88f4-9bf657a760b8\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a41e2c5b-bd99-4a07-88f4-9bf657a760b8\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Marketplace Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Administrator of marketplace resource provider\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Marketplace/privateStores/write\",\r\n \"Microsoft.Marketplace/privateStores/action\",\r\n \"Microsoft.Marketplace/privateStores/delete\",\r\n \"Microsoft.Marketplace/privateStores/offers/write\",\r\n \"Microsoft.Marketplace/privateStores/offers/action\",\r\n \"Microsoft.Marketplace/privateStores/offers/delete\",\r\n \"Microsoft.Authorization/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-26T14:19:50.9681015Z\",\r\n \"updatedOn\": \"2020-06-23T05:54:42.8370671Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/dd920d6d-f481-47f1-b461-f338c46b2d9f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"dd920d6d-f481-47f1-b461-f338c46b2d9f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service Contributor Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Grants access to read and write Azure Kubernetes Service clusters\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerService/managedClusters/read\",\r\n \"Microsoft.ContainerService/managedClusters/write\",\r\n \"Microsoft.Resources/deployments/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-27T19:27:15.073997Z\",\r\n \"updatedOn\": \"2020-02-28T02:34:14.5162305Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/ed7f3fbd-7b88-4dd4-9017-9adb7ce333f8\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ed7f3fbd-7b88-4dd4-9017-9adb7ce333f8\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Digital Twins Reader (Preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read-only role for Digital Twins data-plane properties\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.DigitalTwins/digitaltwins/read\",\r\n \"Microsoft.DigitalTwins/digitaltwins/relationships/read\",\r\n \"Microsoft.DigitalTwins/eventroutes/read\",\r\n \"Microsoft.DigitalTwins/models/read\",\r\n \"Microsoft.DigitalTwins/query/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-10T23:48:14.7057381Z\",\r\n \"updatedOn\": \"2020-07-01T17:50:50.2393244Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/d57506d4-4c8d-48b1-8587-93c323f6a5a3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"d57506d4-4c8d-48b1-8587-93c323f6a5a3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Digital Twins Owner (Preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Full access role for Digital Twins data-plane\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.DigitalTwins/eventroutes/*\",\r\n \"Microsoft.DigitalTwins/digitaltwins/*\",\r\n \"Microsoft.DigitalTwins/digitaltwins/commands/*\",\r\n \"Microsoft.DigitalTwins/digitaltwins/relationships/*\",\r\n \"Microsoft.DigitalTwins/models/*\",\r\n \"Microsoft.DigitalTwins/query/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-10T23:49:33.782193Z\",\r\n \"updatedOn\": \"2020-03-10T23:49:33.782193Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/bcd981a7-7f74-457b-83e1-cceb9e632ffe\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"bcd981a7-7f74-457b-83e1-cceb9e632ffe\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Hierarchy Settings Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows users to edit and delete Hierarchy Settings\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Management/managementGroups/settings/write\",\r\n \"Microsoft.Management/managementGroups/settings/delete\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-13T23:55:11.0212387Z\",\r\n \"updatedOn\": \"2020-03-13T23:58:46.9249866Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/350f8d15-c687-4448-8ae1-157740a3936d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"350f8d15-c687-4448-8ae1-157740a3936d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"FHIR Data Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Role allows user or principal full access to FHIR Data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.HealthcareApis/services/fhir/resources/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-17T18:35:04.4949547Z\",\r\n \"updatedOn\": \"2020-03-17T18:35:04.4949547Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5a1fc7df-4bf1-4951-a576-89034ee01acd\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5a1fc7df-4bf1-4951-a576-89034ee01acd\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"FHIR Data Exporter\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Role allows user or principal to read and export FHIR Data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.HealthcareApis/services/fhir/resources/read\",\r\n \"Microsoft.HealthcareApis/services/fhir/resources/export/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-17T18:45:01.9764073Z\",\r\n \"updatedOn\": \"2020-03-19T20:29:56.9958536Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/3db33094-8700-4567-8da5-1501d4e7e843\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3db33094-8700-4567-8da5-1501d4e7e843\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"FHIR Data Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Role allows user or principal to read FHIR Data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.HealthcareApis/services/fhir/resources/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-17T18:49:04.8353499Z\",\r\n \"updatedOn\": \"2020-03-17T18:49:04.8353499Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/4c8d0bbc-75d3-4935-991f-5f3c56d81508\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4c8d0bbc-75d3-4935-991f-5f3c56d81508\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"FHIR Data Writer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Role allows user or principal to read and write FHIR Data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.HealthcareApis/services/fhir/resources/*\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.HealthcareApis/services/fhir/resources/hardDelete/action\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-17T18:55:35.2413335Z\",\r\n \"updatedOn\": \"2020-03-17T18:55:35.2413335Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/3f88fce4-5892-4214-ae73-ba5294559913\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3f88fce4-5892-4214-ae73-ba5294559913\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Experimentation Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Experimentation Reader\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Experimentation/experimentWorkspaces/read\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-25T18:05:14.8375678Z\",\r\n \"updatedOn\": \"2020-04-22T21:20:46.2737555Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/49632ef5-d9ac-41f4-b8e7-bbe587fa74a1\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"49632ef5-d9ac-41f4-b8e7-bbe587fa74a1\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Object Understanding Account Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Provides user with ingestion capabilities for Azure Object Understanding.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/ObjectUnderstandingAccounts/ingest/action\",\r\n \"Microsoft.MixedReality/ObjectUnderstandingAccounts/ingest/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-04-22T19:15:09.0697923Z\",\r\n \"updatedOn\": \"2020-04-22T19:15:09.0697923Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/4dd61c23-6743-42fe-a388-d8bdd41cb745\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4dd61c23-6743-42fe-a388-d8bdd41cb745\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Maps Data Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Grants access to read, write, and delete access to map related data from an Azure maps account.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Maps/accounts/*/read\",\r\n \"Microsoft.Maps/accounts/*/write\",\r\n \"Microsoft.Maps/accounts/*/delete\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-07T20:55:05.064541Z\",\r\n \"updatedOn\": \"2020-05-07T20:55:05.064541Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8f5e0ce6-4f7b-4dcf-bddf-e6f48634a204\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8f5e0ce6-4f7b-4dcf-bddf-e6f48634a204\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Custom Vision Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Full access to the project, including the ability to view, create, edit, or delete projects.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-08T23:47:07.0779345Z\",\r\n \"updatedOn\": \"2020-05-08T23:47:07.0779345Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/c1ff6cc2-c111-46fe-8896-e0ef812ad9f3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c1ff6cc2-c111-46fe-8896-e0ef812ad9f3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Custom Vision Deployment\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Publish, unpublish or export models. Deployment can view the project but can’t update.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/*/read\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/publish/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/export/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/quicktest/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/classify/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/detect/*\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-09T01:31:05.952862Z\",\r\n \"updatedOn\": \"2020-05-09T01:31:05.952862Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5c4089e1-6d96-4d2f-b296-c1bc7137275f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5c4089e1-6d96-4d2f-b296-c1bc7137275f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Custom Vision Labeler\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"View, edit training images and create, add, remove, or delete the image tags. Labelers can view the project but can’t update anything other than training images and tags.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/*/read\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/images/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/tags/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/images/suggested/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/tagsandregions/suggestions/action\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-09T01:33:20.8278896Z\",\r\n \"updatedOn\": \"2020-05-09T01:33:20.8278896Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/88424f51-ebe7-446f-bc41-7fa16989e96c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"88424f51-ebe7-446f-bc41-7fa16989e96c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Custom Vision Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read-only actions in the project. Readers can’t create or update the project.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/*/read\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-09T01:34:18.5328818Z\",\r\n \"updatedOn\": \"2020-05-09T01:34:18.5328818Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/93586559-c37d-4a6b-ba08-b9f0940c2d73\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"93586559-c37d-4a6b-ba08-b9f0940c2d73\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Custom Vision Trainer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"View, edit projects and train the models, including the ability to publish, unpublish, export the models. Trainers can’t create or delete the project.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/*\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/action\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/delete\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/import/action\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-09T01:35:13.8147804Z\",\r\n \"updatedOn\": \"2020-05-09T01:35:13.8147804Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/0a5ae4ab-0d65-4eeb-be61-29fc9b54394b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0a5ae4ab-0d65-4eeb-be61-29fc9b54394b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Administrator (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can perform any action on certificates, keys and secrets of a key vault, except manage permissions.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.KeyVault/checkNameAvailability/read\",\r\n \"Microsoft.KeyVault/deletedVaults/read\",\r\n \"Microsoft.KeyVault/locations/*/read\",\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:46.2349235Z\",\r\n \"updatedOn\": \"2020-05-20T19:40:18.9511304Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/00482a5a-887f-4fb3-b363-3b7fe8e74483\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"00482a5a-887f-4fb3-b363-3b7fe8e74483\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Crypto Officer (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can perform any action on the keys of a key vault, except manage permissions.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.KeyVault/checkNameAvailability/read\",\r\n \"Microsoft.KeyVault/deletedVaults/read\",\r\n \"Microsoft.KeyVault/locations/*/read\",\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/keys/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.0099249Z\",\r\n \"updatedOn\": \"2020-05-20T19:44:51.5886988Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/14b46e9e-c2b7-41b4-b07b-48a6ebf60603\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"14b46e9e-c2b7-41b4-b07b-48a6ebf60603\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Crypto User (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can perform cryptographic operations on keys and certificates.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/keys/read\",\r\n \"Microsoft.KeyVault/vaults/keys/update/action\",\r\n \"Microsoft.KeyVault/vaults/keys/backup/action\",\r\n \"Microsoft.KeyVault/vaults/keys/encrypt/action\",\r\n \"Microsoft.KeyVault/vaults/keys/decrypt/action\",\r\n \"Microsoft.KeyVault/vaults/keys/wrap/action\",\r\n \"Microsoft.KeyVault/vaults/keys/unwrap/action\",\r\n \"Microsoft.KeyVault/vaults/keys/sign/action\",\r\n \"Microsoft.KeyVault/vaults/keys/verify/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.0699268Z\",\r\n \"updatedOn\": \"2020-05-20T19:48:54.8672037Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/12338af0-0e69-4776-bea7-57ae8d297424\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"12338af0-0e69-4776-bea7-57ae8d297424\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Secrets Officer (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can perform any action on the secrets of a key vault, except manage permissions.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.KeyVault/checkNameAvailability/read\",\r\n \"Microsoft.KeyVault/deletedVaults/read\",\r\n \"Microsoft.KeyVault/locations/*/read\",\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/secrets/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.1449242Z\",\r\n \"updatedOn\": \"2020-05-20T19:51:40.033812Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b86a8fe4-44ce-4948-aee5-eccb2c155cd7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b86a8fe4-44ce-4948-aee5-eccb2c155cd7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Secrets User (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read secret contents.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/secrets/getSecret/action\",\r\n \"Microsoft.KeyVault/vaults/secrets/readMetadata/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.2049241Z\",\r\n \"updatedOn\": \"2020-05-20T19:53:53.9617292Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/4633458b-17de-408a-b874-0445c86b69e6\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4633458b-17de-408a-b874-0445c86b69e6\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Certificates Officer (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can perform any action on the certificates of a key vault, except manage permissions.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.KeyVault/checkNameAvailability/read\",\r\n \"Microsoft.KeyVault/deletedVaults/read\",\r\n \"Microsoft.KeyVault/locations/*/read\",\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/certificatecas/*\",\r\n \"Microsoft.KeyVault/vaults/certificates/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.2499247Z\",\r\n \"updatedOn\": \"2020-05-20T19:56:22.0363761Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/a4417e6f-fecd-4de8-b567-7b0420556985\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a4417e6f-fecd-4de8-b567-7b0420556985\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Reader (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read metadata of key vaults and its certificates, keys and secrets. Cannot read sensitive values such as secret contents or key material.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.KeyVault/checkNameAvailability/read\",\r\n \"Microsoft.KeyVault/deletedVaults/read\",\r\n \"Microsoft.KeyVault/locations/*/read\",\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/vaults/secrets/readMetadata/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.2949294Z\",\r\n \"updatedOn\": \"2020-05-20T19:58:55.0084184Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/21090545-7ca7-4776-b22c-e363652d74d2\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"21090545-7ca7-4776-b22c-e363652d74d2\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Crypto Service Encryption (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read metadata of keys and perform wrap/unwrap operations.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/keys/read\",\r\n \"Microsoft.KeyVault/vaults/keys/wrap/action\",\r\n \"Microsoft.KeyVault/vaults/keys/unwrap/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-20T20:55:19.239847Z\",\r\n \"updatedOn\": \"2020-05-20T20:55:19.239847Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/e147488a-f6f5-4113-8e2d-b22465e65bf6\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e147488a-f6f5-4113-8e2d-b22465e65bf6\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Arc Kubernetes Viewer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you view all resources in cluster/namespace, except secrets.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/*/read\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/secrets/read\",\r\n \"Microsoft.Kubernetes/connectedClusters/clusterconfig.azure.com/azureclusteridentityrequests/read\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-12T20:51:12.8801199Z\",\r\n \"updatedOn\": \"2020-06-12T20:51:12.8801199Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/63f0a09d-1495-4db4-a681-037d84835eb4\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"63f0a09d-1495-4db4-a681-037d84835eb4\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Arc Kubernetes Writer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you update everything in cluster/namespace, except (cluster)roles and (cluster)role bindings.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/*/read\",\r\n \"Microsoft.Kubernetes/connectedClusters/*/write\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/rbac.authorization.k8s.io/*/read\",\r\n \"Microsoft.Kubernetes/connectedClusters/rbac.authorization.k8s.io/*/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/namespaces/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/resourcequotas/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/certificates.k8s.io/certificatesigningrequests/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/policy/podsecuritypolicies/write\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-12T20:53:50.6749823Z\",\r\n \"updatedOn\": \"2020-06-12T20:53:50.6749823Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5b999177-9696-4545-85c7-50de3797e5a1\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5b999177-9696-4545-85c7-50de3797e5a1\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Arc Kubernetes Cluster Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage all resources in the cluster.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-12T20:55:30.9910462Z\",\r\n \"updatedOn\": \"2020-06-12T20:55:30.9910462Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8393591c-06b9-48a2-a542-1bd6b377f6a2\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8393591c-06b9-48a2-a542-1bd6b377f6a2\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Arc Kubernetes Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage all resources under cluster/namespace, except update or delete resource quotas and namespaces.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/*\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/resourcequotas/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/resourcequotas/delete\",\r\n \"Microsoft.Kubernetes/connectedClusters/namespaces/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/namespaces/delete\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-12T20:57:06.0391177Z\",\r\n \"updatedOn\": \"2020-06-12T20:57:06.0391177Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/dffb1e0c-446f-4dde-a09f-99eb5cc68b96\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"dffb1e0c-446f-4dde-a09f-99eb5cc68b96\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service RBAC Cluster Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage all resources in the cluster.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.ContainerService/managedClusters/listClusterUserCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-02T17:47:24.4071415Z\",\r\n \"updatedOn\": \"2020-07-02T17:47:24.4071415Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b1ff04bb-8a4e-4dc4-8eb5-8693973ce19b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b1ff04bb-8a4e-4dc4-8eb5-8693973ce19b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service RBAC Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage all resources under cluster/namespace, except update or delete resource quotas and namespaces.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.ContainerService/managedClusters/listClusterUserCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/*\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/resourcequotas/write\",\r\n \"Microsoft.ContainerService/managedClusters/resourcequotas/delete\",\r\n \"Microsoft.ContainerService/managedClusters/namespaces/write\",\r\n \"Microsoft.ContainerService/managedClusters/namespaces/delete\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-02T17:50:30.4020311Z\",\r\n \"updatedOn\": \"2020-07-02T17:50:30.4020311Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/3498e952-d568-435e-9b2c-8d77e338d7f7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3498e952-d568-435e-9b2c-8d77e338d7f7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service RBAC Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you view all resources in cluster/namespace, except secrets.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.ContainerService/managedClusters/listClusterUserCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/*/read\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/rbac.authorization.k8s.io/*/read\",\r\n \"Microsoft.ContainerService/managedClusters/rbac.authorization.k8s.io/*/write\",\r\n \"Microsoft.ContainerService/managedClusters/secrets/*\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-02T17:53:05.5728294Z\",\r\n \"updatedOn\": \"2020-07-07T16:40:37.2744607Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/7f6c6a51-bcf8-42ba-9220-52d62157d7db\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7f6c6a51-bcf8-42ba-9220-52d62157d7db\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service RBAC Writer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you update everything in cluster/namespace, except resource quotas, namespaces, pod security policies, certificate signing requests, (cluster)roles and (cluster)role bindings.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.ContainerService/managedClusters/listClusterUserCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/*/read\",\r\n \"Microsoft.ContainerService/managedClusters/*/write\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/rbac.authorization.k8s.io/*/read\",\r\n \"Microsoft.ContainerService/managedClusters/rbac.authorization.k8s.io/*/write\",\r\n \"Microsoft.ContainerService/managedClusters/namespaces/write\",\r\n \"Microsoft.ContainerService/managedClusters/resourcequotas/write\",\r\n \"Microsoft.ContainerService/managedClusters/certificates.k8s.io/certificatesigningrequests/write\",\r\n \"Microsoft.ContainerService/managedClusters/policy/podsecuritypolicies/write\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-02T17:54:51.9644983Z\",\r\n \"updatedOn\": \"2020-07-02T17:54:51.9644983Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/a7ffa36f-339b-4b5c-8bdf-e2c188b2c0eb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a7ffa36f-339b-4b5c-8bdf-e2c188b2c0eb\"\r\n }\r\n ]\r\n}", + "StatusCode": 200 + }, + { + "RequestUri": "//subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments/734de5f5-c680-41c0-8beb-67b98c3539d2?api-version=2020-04-01-preview", + "EncodedRequestUri": "Ly9zdWJzY3JpcHRpb25zLzQwMDRhOWZkLWQ1OGUtNDhkYy1hZWIyLTRhNGFlYzU4NjA2Zi9yZXNvdXJjZUdyb3Vwcy9kYW9yb3pjb19idWdfcmVwcm8vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3JvbGVBc3NpZ25tZW50cy83MzRkZTVmNS1jNjgwLTQxYzAtOGJlYi02N2I5OGMzNTM5ZDI/YXBpLXZlcnNpb249MjAyMC0wNC0wMS1wcmV2aWV3", + "RequestMethod": "DELETE", + "RequestBody": "", + "RequestHeaders": { + "x-ms-client-request-id": [ + "0dfd6586-0795-415f-a7a9-08ece38187c6" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.29017.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.12.0.0" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-request-id": [ + "0400061d-a005-40a4-a759-a55abf0e9003" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Set-Cookie": [ + "x-ms-gateway-slice=Production; path=/; secure; HttpOnly; SameSite=None" + ], + "x-ms-ratelimit-remaining-subscription-deletes": [ + "14999" + ], + "x-ms-correlation-request-id": [ + "b92a592c-81b1-4172-8489-4f1d32e816b9" + ], + "x-ms-routing-request-id": [ + "WESTUS:20200717T010326Z:b92a592c-81b1-4172-8489-4f1d32e816b9" + ], + "Date": [ + "Fri, 17 Jul 2020 01:03:25 GMT" + ], + "Content-Length": [ + "1075" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"properties\": {\r\n \"roleDefinitionId\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"principalId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"principalType\": \"User\",\r\n \"scope\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg\",\r\n \"condition\": \"@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:Name] StringEqualsIgnoreCase 'foo_storage_container'\",\r\n \"conditionVersion\": \"2.0\",\r\n \"createdOn\": \"2020-07-17T01:03:22.9503355Z\",\r\n \"updatedOn\": \"2020-07-17T01:03:22.9503355Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"canDelegate\": false,\r\n \"delegatedManagedIdentityResourceId\": null,\r\n \"description\": \"This test should not fail\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments/734de5f5-c680-41c0-8beb-67b98c3539d2\",\r\n \"type\": \"Microsoft.Authorization/roleAssignments\",\r\n \"name\": \"734de5f5-c680-41c0-8beb-67b98c3539d2\"\r\n}", + "StatusCode": 200 + } + ], + "Names": {}, + "Variables": { + "SubscriptionId": "4004a9fd-d58e-48dc-aeb2-4a4aec58606f" + } +} \ No newline at end of file diff --git a/src/Resources/Resources.Test/SessionRecords/Microsoft.Azure.Commands.Resources.Test.ScenarioTests.RoleAssignmentTests/RaWithV2ConditionsOnly.json b/src/Resources/Resources.Test/SessionRecords/Microsoft.Azure.Commands.Resources.Test.ScenarioTests.RoleAssignmentTests/RaWithV2ConditionsOnly.json new file mode 100644 index 000000000000..2c0c525ba98f --- /dev/null +++ b/src/Resources/Resources.Test/SessionRecords/Microsoft.Azure.Commands.Resources.Test.ScenarioTests.RoleAssignmentTests/RaWithV2ConditionsOnly.json @@ -0,0 +1,518 @@ +{ + "Entries": [ + { + "RequestUri": "//subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments/734de5f5-c680-41c0-8beb-67b98c3539d2?api-version=2020-04-01-preview", + "EncodedRequestUri": "Ly9zdWJzY3JpcHRpb25zLzQwMDRhOWZkLWQ1OGUtNDhkYy1hZWIyLTRhNGFlYzU4NjA2Zi9yZXNvdXJjZUdyb3Vwcy9kYW9yb3pjb19idWdfcmVwcm8vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3JvbGVBc3NpZ25tZW50cy83MzRkZTVmNS1jNjgwLTQxYzAtOGJlYi02N2I5OGMzNTM5ZDI/YXBpLXZlcnNpb249MjAyMC0wNC0wMS1wcmV2aWV3", + "RequestMethod": "PUT", + "RequestBody": "{\r\n \"properties\": {\r\n \"roleDefinitionId\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"principalId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"canDelegate\": false,\r\n \"description\": \"This test should not fail\",\r\n \"condition\": \"@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:Name] StringEqualsIgnoreCase 'foo_storage_container'\",\r\n \"conditionVersion\": \"2.0\"\r\n }\r\n}", + "RequestHeaders": { + "x-ms-client-request-id": [ + "13b601a1-526e-45da-a2b2-f22f74c68337" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.29017.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.12.0.0" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Content-Length": [ + "538" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-request-id": [ + "3c73c0c9-bf10-4fe7-91cd-e1c76e2e9fec" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Set-Cookie": [ + "x-ms-gateway-slice=Production; path=/; SameSite=None; secure; HttpOnly" + ], + "x-ms-ratelimit-remaining-subscription-writes": [ + "1199" + ], + "x-ms-correlation-request-id": [ + "6fcb0f9e-9ca1-407b-ad39-b5590c5d3e34" + ], + "x-ms-routing-request-id": [ + "WESTUS:20200717T010329Z:6fcb0f9e-9ca1-407b-ad39-b5590c5d3e34" + ], + "Date": [ + "Fri, 17 Jul 2020 01:03:29 GMT" + ], + "Content-Length": [ + "1041" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"properties\": {\r\n \"roleDefinitionId\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"principalId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"principalType\": \"User\",\r\n \"scope\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg\",\r\n \"condition\": \"@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:Name] StringEqualsIgnoreCase 'foo_storage_container'\",\r\n \"conditionVersion\": \"2.0\",\r\n \"createdOn\": \"2020-07-17T01:03:28.9914418Z\",\r\n \"updatedOn\": \"2020-07-17T01:03:28.9914418Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"canDelegate\": false,\r\n \"delegatedManagedIdentityResourceId\": null,\r\n \"description\": \"This test should not fail\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments/734de5f5-c680-41c0-8beb-67b98c3539d2\",\r\n \"type\": \"Microsoft.Authorization/roleAssignments\",\r\n \"name\": \"734de5f5-c680-41c0-8beb-67b98c3539d2\"\r\n}", + "StatusCode": 201 + }, + { + "RequestUri": "//subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7?api-version=2018-01-01-preview", + "EncodedRequestUri": "Ly9zdWJzY3JpcHRpb25zLzQwMDRhOWZkLWQ1OGUtNDhkYy1hZWIyLTRhNGFlYzU4NjA2Zi9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcm9sZURlZmluaXRpb25zLzAzNTNlZTBhLTE5YWUtNDM4MC1iYTNkLWQ1NDc2N2M3NWQ1Yj9hcGktdmVyc2lvbj0yMDE4LTAxLTAxLXByZXZpZXc=", + "RequestMethod": "GET", + "RequestBody": "", + "RequestHeaders": { + "x-ms-client-request-id": [ + "8a181225-cc8e-448d-a930-78f39b020e76" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.29017.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.12.0.0" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-request-id": [ + "694c9f4d-7b94-4ee2-a54f-0c6d94225d2c" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Set-Cookie": [ + "x-ms-gateway-slice=Production; path=/; secure; HttpOnly; SameSite=None" + ], + "x-ms-ratelimit-remaining-subscription-reads": [ + "11999" + ], + "x-ms-correlation-request-id": [ + "1db8ec28-678a-488a-83e1-0022623466f6" + ], + "x-ms-routing-request-id": [ + "WESTUS:20200717T010329Z:1db8ec28-678a-488a-83e1-0022623466f6" + ], + "Date": [ + "Fri, 17 Jul 2020 01:03:29 GMT" + ], + "Content-Length": [ + "873" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"properties\": {\r\n \"roleName\": \"Daoroz-Custom1\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"A role to use when testing various things\\nIt does not grant any real permissions, just the ability to read role definitions\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/roleDefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-08T17:44:15.2525393Z\",\r\n \"updatedOn\": \"2020-07-08T17:44:15.2525393Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"acdd72a7-3385-48ef-bd42-f606fba81ae7\"\r\n}", + "StatusCode": 200 + }, + { + "RequestUri": "/395544B0-BF41-429D-921F-E1CA2252FCF4/getObjectsByObjectIds?api-version=1.6", + "EncodedRequestUri": "LzEyNzNhZGVmLTAwYTMtNDA4Ni1hNTFhLWRiY2NlMTg1N2QzNi9nZXRPYmplY3RzQnlPYmplY3RJZHM/YXBpLXZlcnNpb249MS42", + "RequestMethod": "POST", + "RequestBody": "{\r\n \"objectIds\": [\r\n \"01072e9b-c4a1-4246-a756-031b529bbf66\"\r\n ],\r\n \"includeDirectoryObjectReferences\": true\r\n}", + "RequestHeaders": { + "x-ms-client-request-id": [ + "0076959f-5d09-4f03-a9f7-d4be396eb915" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.29017.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Graph.RBAC.GraphRbacManagementClient/3.5.0.0" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Content-Length": [ + "116" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "ocp-aad-diagnostics-server-name": [ + "qD03Phkyp3PESyOCOq/UWezyOoJRSPWoF1sQ7pSJmlE=" + ], + "request-id": [ + "32b16353-d6d7-41f9-ad4e-8f43cbde99b8" + ], + "client-request-id": [ + "0076959f-5d09-4f03-a9f7-d4be396eb915" + ], + "x-ms-dirapi-data-contract-version": [ + "1.6" + ], + "ocp-aad-session-key": [ + "onnnrPbw7g6QCSIoNLmaSKwvaATyfJJcj78qUMavIOEEUGTFWIT5GjrEhF94JH5qN2CZv6KB3qPxBTwQFe7zI4CazDIEmjaYShejpvypcRxrO0aNluyL9wc-EITLaPKS.0svXI81E-lTfbpCyeS3GOquOhM4cNtpc5oCVgdEiUJM" + ], + "x-aad-resource-unit": [ + "3" + ], + "DataServiceVersion": [ + "3.0;" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Access-Control-Allow-Origin": [ + "*" + ], + "X-AspNet-Version": [ + "4.0.30319" + ], + "X-Powered-By": [ + "ASP.NET" + ], + "Duration": [ + "368986" + ], + "Date": [ + "Fri, 17 Jul 2020 01:03:29 GMT" + ], + "Content-Type": [ + "application/json; odata=minimalmetadata; streaming=true; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Content-Length": [ + "1511" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"odata.metadata\": \"https://graph.windows.net/395544B0-BF41-429D-921F-E1CA2252FCF4/$metadata#directoryObjects\",\r\n \"value\": [\r\n {\r\n \"odata.type\": \"Microsoft.DirectoryServices.User\",\r\n \"objectType\": \"User\",\r\n \"objectId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"deletionTimestamp\": null,\r\n \"accountEnabled\": true,\r\n \"ageGroup\": null,\r\n \"assignedLicenses\": [],\r\n \"assignedPlans\": [],\r\n \"city\": null,\r\n \"companyName\": null,\r\n \"consentProvidedForMinor\": null,\r\n \"country\": null,\r\n \"createdDateTime\": \"2020-07-06T23:49:47Z\",\r\n \"creationType\": null,\r\n \"department\": null,\r\n \"dirSyncEnabled\": null,\r\n \"displayName\": \"ddd\",\r\n \"employeeId\": null,\r\n \"facsimileTelephoneNumber\": null,\r\n \"givenName\": null,\r\n \"immutableId\": null,\r\n \"isCompromised\": null,\r\n \"jobTitle\": null,\r\n \"lastDirSyncTime\": null,\r\n \"legalAgeGroupClassification\": null,\r\n \"mail\": null,\r\n \"mailNickname\": \"dagoroz-bug-repro\",\r\n \"mobile\": null,\r\n \"onPremisesDistinguishedName\": null,\r\n \"onPremisesSecurityIdentifier\": null,\r\n \"otherMails\": [],\r\n \"passwordPolicies\": null,\r\n \"passwordProfile\": {\r\n \"password\": null,\r\n \"forceChangePasswordNextLogin\": true,\r\n \"enforceChangePasswordPolicy\": false\r\n },\r\n \"physicalDeliveryOfficeName\": null,\r\n \"postalCode\": null,\r\n \"preferredLanguage\": null,\r\n \"provisionedPlans\": [],\r\n \"provisioningErrors\": [],\r\n \"proxyAddresses\": [],\r\n \"refreshTokensValidFromDateTime\": \"2020-07-06T23:49:47Z\",\r\n \"showInAddressList\": null,\r\n \"signInNames\": [],\r\n \"sipProxyAddress\": null,\r\n \"state\": null,\r\n \"streetAddress\": null,\r\n \"surname\": null,\r\n \"telephoneNumber\": null,\r\n \"usageLocation\": null,\r\n \"userIdentities\": [],\r\n \"userPrincipalName\": \"dagoroz-bug-repro@rbacclitest.onmicrosoft.com\",\r\n \"userState\": null,\r\n \"userStateChangedOn\": null,\r\n \"userType\": \"Member\"\r\n }\r\n ]\r\n}", + "StatusCode": 200 + }, + { + "RequestUri": "/395544B0-BF41-429D-921F-E1CA2252FCF4/getObjectsByObjectIds?api-version=1.6", + "EncodedRequestUri": "LzEyNzNhZGVmLTAwYTMtNDA4Ni1hNTFhLWRiY2NlMTg1N2QzNi9nZXRPYmplY3RzQnlPYmplY3RJZHM/YXBpLXZlcnNpb249MS42", + "RequestMethod": "POST", + "RequestBody": "{\r\n \"objectIds\": [\r\n \"01072e9b-c4a1-4246-a756-031b529bbf66\"\r\n ],\r\n \"includeDirectoryObjectReferences\": true\r\n}", + "RequestHeaders": { + "x-ms-client-request-id": [ + "2fee237e-8e2f-40f6-9997-13030f9e9f0e" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.29017.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Graph.RBAC.GraphRbacManagementClient/3.5.0.0" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Content-Length": [ + "116" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "ocp-aad-diagnostics-server-name": [ + "cAVsKsE66TYakbqGtubIAtWvSCoR9a+ArvTZEZ5t0Yk=" + ], + "request-id": [ + "5ebdb93c-7271-4096-b079-9ca50aaf56fa" + ], + "client-request-id": [ + "2fee237e-8e2f-40f6-9997-13030f9e9f0e" + ], + "x-ms-dirapi-data-contract-version": [ + "1.6" + ], + "ocp-aad-session-key": [ + "Y6sU9FqB88SoCA1x_WEGhA1-CVMeUZqoC9GTLVtjmWVXCdFGP5qn3M2WE4NaFuasIecOUKgfTxuqiXjnIcVU6FhF-re0-vd6FFeE-x8av_pQtQiGCNY_8RqUnIviTWsA.taV8XC_JptOGtfwelWcgm57fdLWDJHecjD1ukIBTI6Q" + ], + "x-aad-resource-unit": [ + "3" + ], + "DataServiceVersion": [ + "3.0;" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Access-Control-Allow-Origin": [ + "*" + ], + "X-AspNet-Version": [ + "4.0.30319" + ], + "X-Powered-By": [ + "ASP.NET" + ], + "Duration": [ + "323191" + ], + "Date": [ + "Fri, 17 Jul 2020 01:03:30 GMT" + ], + "Content-Type": [ + "application/json; odata=minimalmetadata; streaming=true; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Content-Length": [ + "1511" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"odata.metadata\": \"https://graph.windows.net/395544B0-BF41-429D-921F-E1CA2252FCF4/$metadata#directoryObjects\",\r\n \"value\": [\r\n {\r\n \"odata.type\": \"Microsoft.DirectoryServices.User\",\r\n \"objectType\": \"User\",\r\n \"objectId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"deletionTimestamp\": null,\r\n \"accountEnabled\": true,\r\n \"ageGroup\": null,\r\n \"assignedLicenses\": [],\r\n \"assignedPlans\": [],\r\n \"city\": null,\r\n \"companyName\": null,\r\n \"consentProvidedForMinor\": null,\r\n \"country\": null,\r\n \"createdDateTime\": \"2020-07-06T23:49:47Z\",\r\n \"creationType\": null,\r\n \"department\": null,\r\n \"dirSyncEnabled\": null,\r\n \"displayName\": \"ddd\",\r\n \"employeeId\": null,\r\n \"facsimileTelephoneNumber\": null,\r\n \"givenName\": null,\r\n \"immutableId\": null,\r\n \"isCompromised\": null,\r\n \"jobTitle\": null,\r\n \"lastDirSyncTime\": null,\r\n \"legalAgeGroupClassification\": null,\r\n \"mail\": null,\r\n \"mailNickname\": \"dagoroz-bug-repro\",\r\n \"mobile\": null,\r\n \"onPremisesDistinguishedName\": null,\r\n \"onPremisesSecurityIdentifier\": null,\r\n \"otherMails\": [],\r\n \"passwordPolicies\": null,\r\n \"passwordProfile\": {\r\n \"password\": null,\r\n \"forceChangePasswordNextLogin\": true,\r\n \"enforceChangePasswordPolicy\": false\r\n },\r\n \"physicalDeliveryOfficeName\": null,\r\n \"postalCode\": null,\r\n \"preferredLanguage\": null,\r\n \"provisionedPlans\": [],\r\n \"provisioningErrors\": [],\r\n \"proxyAddresses\": [],\r\n \"refreshTokensValidFromDateTime\": \"2020-07-06T23:49:47Z\",\r\n \"showInAddressList\": null,\r\n \"signInNames\": [],\r\n \"sipProxyAddress\": null,\r\n \"state\": null,\r\n \"streetAddress\": null,\r\n \"surname\": null,\r\n \"telephoneNumber\": null,\r\n \"usageLocation\": null,\r\n \"userIdentities\": [],\r\n \"userPrincipalName\": \"dagoroz-bug-repro@rbacclitest.onmicrosoft.com\",\r\n \"userState\": null,\r\n \"userStateChangedOn\": null,\r\n \"userType\": \"Member\"\r\n }\r\n ]\r\n}", + "StatusCode": 200 + }, + { + "RequestUri": "//subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments?$filter=principalId%20eq%20'01072e9b-c4a1-4246-a756-031b529bbf66'&api-version=2020-04-01-preview", + "EncodedRequestUri": "Ly9zdWJzY3JpcHRpb25zLzQwMDRhOWZkLWQ1OGUtNDhkYy1hZWIyLTRhNGFlYzU4NjA2Zi9yZXNvdXJjZUdyb3Vwcy9kYW9yb3pjb19idWdfcmVwcm8vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3JvbGVBc3NpZ25tZW50cz8kZmlsdGVyPXByaW5jaXBhbElkJTIwZXElMjAnZTk1ZmE2MDgtM2Q0OS00NDM4LTlmNjAtMzVkODVkODRjYTE2JyZhcGktdmVyc2lvbj0yMDIwLTA0LTAxLXByZXZpZXc=", + "RequestMethod": "GET", + "RequestBody": "", + "RequestHeaders": { + "x-ms-client-request-id": [ + "737ff02e-3f97-45ab-a86b-7ee6a8baeb0c" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.29017.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.12.0.0" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-request-id": [ + "1d579c58-aa98-48db-b0d0-7dd8e94a9f05" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Set-Cookie": [ + "x-ms-gateway-slice=Production; path=/; SameSite=None; secure; HttpOnly" + ], + "x-ms-ratelimit-remaining-subscription-reads": [ + "11999" + ], + "x-ms-correlation-request-id": [ + "96527d2f-0a9b-426d-b116-62230f6357db" + ], + "x-ms-routing-request-id": [ + "WESTUS:20200717T010330Z:96527d2f-0a9b-426d-b116-62230f6357db" + ], + "Date": [ + "Fri, 17 Jul 2020 01:03:30 GMT" + ], + "Content-Length": [ + "1087" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"properties\": {\r\n \"roleDefinitionId\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"principalId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"principalType\": \"User\",\r\n \"scope\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg\",\r\n \"condition\": \"@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:Name] StringEqualsIgnoreCase 'foo_storage_container'\",\r\n \"conditionVersion\": \"2.0\",\r\n \"createdOn\": \"2020-07-17T01:03:22.9503355Z\",\r\n \"updatedOn\": \"2020-07-17T01:03:29.1742508Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"canDelegate\": false,\r\n \"delegatedManagedIdentityResourceId\": null,\r\n \"description\": \"This test should not fail\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments/734de5f5-c680-41c0-8beb-67b98c3539d2\",\r\n \"type\": \"Microsoft.Authorization/roleAssignments\",\r\n \"name\": \"734de5f5-c680-41c0-8beb-67b98c3539d2\"\r\n }\r\n ]\r\n}", + "StatusCode": 200 + }, + { + "RequestUri": "//subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleDefinitions?api-version=2018-01-01-preview", + "EncodedRequestUri": "Ly9zdWJzY3JpcHRpb25zLzQwMDRhOWZkLWQ1OGUtNDhkYy1hZWIyLTRhNGFlYzU4NjA2Zi9yZXNvdXJjZUdyb3Vwcy9kYW9yb3pjb19idWdfcmVwcm8vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3JvbGVEZWZpbml0aW9ucz9hcGktdmVyc2lvbj0yMDE4LTAxLTAxLXByZXZpZXc=", + "RequestMethod": "GET", + "RequestBody": "", + "RequestHeaders": { + "x-ms-client-request-id": [ + "49d73c6f-da52-4475-891e-3118365f9466" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.29017.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.12.0.0" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-request-id": [ + "de953189-fce5-4b82-9fdb-b713555c9c10" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Set-Cookie": [ + "x-ms-gateway-slice=Production; path=/; secure; HttpOnly; SameSite=None" + ], + "x-ms-ratelimit-remaining-subscription-reads": [ + "11998" + ], + "x-ms-correlation-request-id": [ + "a9c22a54-1fe7-4acb-8d41-419cdb857de2" + ], + "x-ms-routing-request-id": [ + "WESTUS:20200717T010330Z:a9c22a54-1fe7-4acb-8d41-419cdb857de2" + ], + "Date": [ + "Fri, 17 Jul 2020 01:03:30 GMT" + ], + "Content-Length": [ + "243873" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Custom Reader Test Properties\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Read, monitor and restart virtual machines\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Authorization/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.ClassicCompute/virtualMachines/restart/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-13T18:17:20.8584392Z\",\r\n \"updatedOn\": \"2018-03-13T18:18:37.0952708Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/171d2453-29dc-42b4-84fc-3fd259eeaec3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"171d2453-29dc-42b4-84fc-3fd259eeaec3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"OnCommand Cloud Manager Operator\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"OnCommand Cloud Manager Permissions\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Compute/disks/delete\",\r\n \"Microsoft.Compute/disks/read\",\r\n \"Microsoft.Compute/disks/write\",\r\n \"Microsoft.Compute/locations/operations/read\",\r\n \"Microsoft.Compute/locations/vmSizes/read\",\r\n \"Microsoft.Compute/operations/read\",\r\n \"Microsoft.Compute/virtualMachines/instanceView/read\",\r\n \"Microsoft.Compute/virtualMachines/powerOff/action\",\r\n \"Microsoft.Compute/virtualMachines/read\",\r\n \"Microsoft.Compute/virtualMachines/restart/action\",\r\n \"Microsoft.Compute/virtualMachines/start/action\",\r\n \"Microsoft.Compute/virtualMachines/deallocate/action\",\r\n \"Microsoft.Compute/virtualMachines/vmSizes/read\",\r\n \"Microsoft.Compute/virtualMachines/write\",\r\n \"Microsoft.Network/locations/operationResults/read\",\r\n \"Microsoft.Network/locations/operations/read\",\r\n \"Microsoft.Network/networkInterfaces/read\",\r\n \"Microsoft.Network/networkInterfaces/write\",\r\n \"Microsoft.Network/networkInterfaces/join/action\",\r\n \"Microsoft.Network/networkSecurityGroups/read\",\r\n \"Microsoft.Network/networkSecurityGroups/write\",\r\n \"Microsoft.Network/networkSecurityGroups/join/action\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/virtualNetworks/checkIpAddressAvailability/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/virtualMachines/read\",\r\n \"Microsoft.Network/virtualNetworks/virtualMachines/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/join/action\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Resources/deployments/read\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/resources/read\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/delete\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/subscriptions/resourcegroups/resources/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/write\",\r\n \"Microsoft.Storage/checknameavailability/read\",\r\n \"Microsoft.Storage/operations/read\",\r\n \"Microsoft.Storage/storageAccounts/listkeys/action\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.Storage/storageAccounts/regeneratekey/action\",\r\n \"Microsoft.Storage/storageAccounts/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-03-29T21:56:07.9054892Z\",\r\n \"updatedOn\": \"2017-03-29T21:56:07.9054892Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/9acd117c-1527-4461-ab19-031c2329aa9b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"9acd117c-1527-4461-ab19-031c2329aa9b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Support Custom Role\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Support Custom Role\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-02-02T02:17:43.627696Z\",\r\n \"updatedOn\": \"2017-04-20T22:55:02.9860347Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/ee2d57e0-fda3-436d-8174-f3c9684efb46\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ee2d57e0-fda3-436d-8174-f3c9684efb46\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Test Administrator\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test Role to manage Azure environment\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ADHybridHealthService/configuration/read\",\r\n \"Microsoft.ADHybridHealthService/services/read\",\r\n \"Microsoft.ADHybridHealthService/services/servicemembers/read\",\r\n \"Microsoft.ADHybridHealthService/services/servicemembers/alerts/read\",\r\n \"Microsoft.ADHybridHealthService/services/alerts/read\",\r\n \"Microsoft.Advisor/register/action\",\r\n \"Microsoft.Advisor/recommendations/read\",\r\n \"Microsoft.Authorization/classicAdministrators/read\",\r\n \"Microsoft.Authorization/locks/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-25T23:19:00.1735084Z\",\r\n \"updatedOn\": \"2017-05-25T23:19:00.1735084Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/239cd0e7-5e27-4872-a1d0-0ff3c4cec6b6\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"239cd0e7-5e27-4872-a1d0-0ff3c4cec6b6\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Test Administrator for testing\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test Role to manage Azure environment\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/roleAssignments/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-10-31T23:40:34.3971201Z\",\r\n \"updatedOn\": \"2017-10-31T23:40:34.3971201Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/7db62a6c-edd9-42bb-b30e-31fc063ce154\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7db62a6c-edd9-42bb-b30e-31fc063ce154\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Test definiton\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Can monitor compute, network and storage, and restart virtual machines\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/ResourceGroups/rbacproda\",\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/ResourceGroups\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-06-30T20:29:54.258388Z\",\r\n \"updatedOn\": \"2017-06-30T20:29:54.258388Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/574857fa-2e5b-4029-ada2-7d042637cbfb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"574857fa-2e5b-4029-ada2-7d042637cbfb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Test RD\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test RDDD\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Compute/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-04-17T18:39:35.636177Z\",\r\n \"updatedOn\": \"2018-04-17T18:39:35.636177Z\",\r\n \"createdBy\": \"76102c29-afb3-4704-a4b7-683bd5b14934\",\r\n \"updatedBy\": \"76102c29-afb3-4704-a4b7-683bd5b14934\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/98b036c8-8bf1-4f4a-8f50-a0a6dde0e734\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"98b036c8-8bf1-4f4a-8f50-a0a6dde0e734\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"test role and another testrole\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test role\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-22T23:58:52.7462995Z\",\r\n \"updatedOn\": \"2018-04-11T20:49:59.3331071Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/a997608d-3f63-4eeb-b01b-1b3ae270cd6d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a997608d-3f63-4eeb-b01b-1b3ae270cd6d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Test definiton2\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Can monitor compute, network and storage, and restart virtual machines\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/ResourceGroups/rbacproda\",\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/ResourceGroups\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-06-30T20:32:19.4246182Z\",\r\n \"updatedOn\": \"2017-06-30T20:32:19.4246182Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/0b98a570-beae-486e-aa44-7cb035aa126d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0b98a570-beae-486e-aa44-7cb035aa126d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testrole132\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Custom Role Test Desc\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-05-30T23:13:47.7513317Z\",\r\n \"updatedOn\": \"2018-05-30T23:13:47.7513317Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/3e66a0a6-a18a-4afc-a5cc-ec19e06012ae\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3e66a0a6-a18a-4afc-a5cc-ec19e06012ae\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testrole-novm\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets Fuse Developers access select objects they need.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Resources/subscriptions/resourceGroups/*/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/*/read\",\r\n \"Microsoft.Storage/storageAccounts/*/read\",\r\n \"Microsoft.Web/sites/*/read\",\r\n \"Microsoft.ServiceBus/namespaces/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/*/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-09-20T00:19:06.4239042Z\",\r\n \"updatedOn\": \"2018-09-20T00:19:06.4239042Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/ef4af617-2f0e-412b-b30a-b7c848aa9098\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ef4af617-2f0e-412b-b30a-b7c848aa9098\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"TestRole_1c581fde-9c61-41fe-b0fa-9f113f09280d\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Custom Role Test Desc\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/resourceGroups/rbactest\",\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-03-11T00:43:21.0606467Z\",\r\n \"updatedOn\": \"2017-04-21T18:07:28.8010892Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/41c81219-e0b7-4d81-96db-5ac27ff234be\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"41c81219-e0b7-4d81-96db-5ac27ff234be\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"TestRole_6d13263a-d237-4d4d-9227-a9e055757887\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Custom Role Test Desc\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-06-29T23:20:59.9048046Z\",\r\n \"updatedOn\": \"2017-06-29T23:20:59.9048046Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/7749b7c9-67a5-4d9c-9e58-58c811859c1a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7749b7c9-67a5-4d9c-9e58-58c811859c1a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"TestContributor\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you manage everything except access to resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/*/Delete\",\r\n \"Microsoft.Authorization/*/Write\",\r\n \"Microsoft.Authorization/elevateAccess/Action\",\r\n \"Microsoft.Blueprint/blueprintAssignments/write\",\r\n \"Microsoft.Blueprint/blueprintAssignments/delete\",\r\n \"Microsoft.Storage/storageAccounts/write\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-03-06T00:36:20.4923118Z\",\r\n \"updatedOn\": \"2019-04-10T19:14:27.67508Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/c24988ac-6180-42a0-ab88-20f7382dd24c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CustomRole Tests Role\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test role\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-21T18:24:29.0508834Z\",\r\n \"updatedOn\": \"2019-08-21T18:32:39.5641976Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8d7dd69e-9ae2-44a1-94d8-f7bc8e12645e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8d7dd69e-9ae2-44a1-94d8-f7bc8e12645e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testbatchcontributor\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Batch/batchAccounts/read\",\r\n \"Microsoft.Batch/batchAccounts/*/read\",\r\n \"Microsoft.Batch/batchAccounts/applications/*\",\r\n \"Microsoft.Batch/batchAccounts/listkeys/action\",\r\n \"Microsoft.Batch/batchAccounts/pools/write\",\r\n \"Microsoft.Batch/batchAccounts/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-09-10T16:44:02.3947885Z\",\r\n \"updatedOn\": \"2019-09-10T16:44:02.3947885Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/e2ab292b-812a-4306-9c73-df992f61649b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e2ab292b-812a-4306-9c73-df992f61649b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"No RD WRITE\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you manage everything, including access to resources.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/roleDefinitions/write\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-01-28T00:57:45.1574464Z\",\r\n \"updatedOn\": \"2020-01-28T00:57:45.1574464Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/d8bae860-743b-407c-8cf0-3aa1cbb8788c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"d8bae860-743b-407c-8cf0-3aa1cbb8788c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"No RD READ\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you manage everything, including access to resources.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/roleDefinitions/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-01-29T00:27:29.0693475Z\",\r\n \"updatedOn\": \"2020-01-29T00:27:29.0693475Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/724dd060-7e51-4f7b-a749-cd927f345b68\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"724dd060-7e51-4f7b-a749-cd927f345b68\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"asd\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Synapse/register/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-19T20:09:21.8617073Z\",\r\n \"updatedOn\": \"2020-02-19T20:09:21.8617073Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/254d9483-0229-40a3-a457-f6cbb5449be6\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"254d9483-0229-40a3-a457-f6cbb5449be6\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"teste\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"setesrt\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"microsoft.operationalinsights/register/action\",\r\n \"microsoft.operationalinsights/unregister/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-27T01:22:58.9649766Z\",\r\n \"updatedOn\": \"2020-02-27T01:22:58.9649766Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/7da825e5-3464-48e4-8646-fab69f7de46c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7da825e5-3464-48e4-8646-fab69f7de46c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"asda\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"asdasd\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Synapse/checkNameAvailability/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-27T19:33:25.1899025Z\",\r\n \"updatedOn\": \"2020-02-27T19:33:25.1899025Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/7cab0ec5-99cb-466f-937e-26806c98f0fb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7cab0ec5-99cb-466f-937e-26806c98f0fb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CloneIt\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-17T03:08:21.1526749Z\",\r\n \"updatedOn\": \"2020-03-17T03:08:21.1526749Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/acfb9fda-b179-4290-8d82-609ddb722ca0\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"acfb9fda-b179-4290-8d82-609ddb722ca0\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"RyanTestMG\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you view everything, but not make any changes.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\",\r\n \"/providers/Microsoft.Management/managementGroups/thisdoesntexist\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-18T23:23:29.8420866Z\",\r\n \"updatedOn\": \"2020-03-18T23:23:29.8420866Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/f5fde758-46cb-4388-8e2d-5dfb6f9c5e26\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f5fde758-46cb-4388-8e2d-5dfb6f9c5e26\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"27MarchCR Clone\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [\r\n \"Microsoft.ClassicCompute/virtualMachines/capture/action\",\r\n \"Microsoft.ClassicCompute/virtualMachines/start/action\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-27T03:30:41.2204287Z\",\r\n \"updatedOn\": \"2020-05-25T03:59:50.7212707Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/688cffa8-c3ad-434d-95bf-4feef208c51f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"688cffa8-c3ad-434d-95bf-4feef208c51f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"dfg\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"84codes.CloudAMQP/updateCommunicationPreference/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-04-15T17:01:23.582234Z\",\r\n \"updatedOn\": \"2020-04-15T17:01:23.582234Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/666436ac-d087-4028-8caa-3d56838acc54\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"666436ac-d087-4028-8caa-3d56838acc54\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testest\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"84codes.CloudAMQP/updateCommunicationPreference/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-04-15T17:28:05.771688Z\",\r\n \"updatedOn\": \"2020-04-15T17:28:05.771688Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/778f1528-7abc-42be-a89f-d72860782919\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"778f1528-7abc-42be-a89f-d72860782919\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testewasdasd\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"84codes.CloudAMQP/updateCommunicationPreference/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-04-16T19:16:54.3681577Z\",\r\n \"updatedOn\": \"2020-04-16T19:16:54.3681577Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/351dc63d-3eec-4697-bf6b-ebeb52629640\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"351dc63d-3eec-4697-bf6b-ebeb52629640\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"asdsad\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Synapse/checkNameAvailability/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-04-23T15:27:01.6742334Z\",\r\n \"updatedOn\": \"2020-04-23T15:27:01.6742334Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/2b516d2c-4b58-45d7-8c2b-55f2e936d21a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"2b516d2c-4b58-45d7-8c2b-55f2e936d21a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testrole1234\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T09:19:08.0056403Z\",\r\n \"updatedOn\": \"2020-06-09T09:19:08.0056403Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/f1ae5ae6-80f8-4b6a-9962-96e885ed2fdf\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f1ae5ae6-80f8-4b6a-9962-96e885ed2fdf\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customreader\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T21:33:19.2160171Z\",\r\n \"updatedOn\": \"2020-06-09T21:33:19.2160171Z\",\r\n \"createdBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\",\r\n \"updatedBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/e9bfc956-b9d6-4931-8df6-d8e759dfb7bd\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e9bfc956-b9d6-4931-8df6-d8e759dfb7bd\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customabc\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T21:37:45.502473Z\",\r\n \"updatedOn\": \"2020-06-09T21:37:45.502473Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/1d3c667d-d849-4444-a61e-910a34a5fbc3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"1d3c667d-d849-4444-a61e-910a34a5fbc3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customroletest123\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:01:04.3209554Z\",\r\n \"updatedOn\": \"2020-06-09T22:01:04.3209554Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/0a301507-673a-47b2-a629-7fa8ca72af3f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0a301507-673a-47b2-a629-7fa8ca72af3f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customroleabc\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:09:16.2626975Z\",\r\n \"updatedOn\": \"2020-06-09T22:09:16.2626975Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/bc1ff923-7253-46cd-9120-6ad03ef2d6e6\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"bc1ff923-7253-46cd-9120-6ad03ef2d6e6\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customreader123\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:12:24.0862728Z\",\r\n \"updatedOn\": \"2020-06-09T22:12:24.0862728Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8700af82-f42f-4393-a5f2-eee83964a9aa\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8700af82-f42f-4393-a5f2-eee83964a9aa\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"test123abc\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:14:57.6218091Z\",\r\n \"updatedOn\": \"2020-06-09T22:14:57.6218091Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/eef4fe94-b510-4514-8669-0548903f3495\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"eef4fe94-b510-4514-8669-0548903f3495\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customroleabc123\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:37:36.1262398Z\",\r\n \"updatedOn\": \"2020-06-09T22:37:36.1262398Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/fd01a54f-fd90-46ec-b525-a636a28df51f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fd01a54f-fd90-46ec-b525-a636a28df51f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testcustomroleabc\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:42:30.4994673Z\",\r\n \"updatedOn\": \"2020-06-09T22:42:30.4994673Z\",\r\n \"createdBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\",\r\n \"updatedBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/fecfef36-f4fc-4e4b-93ff-7db5732a444d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fecfef36-f4fc-4e4b-93ff-7db5732a444d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"zzcustomrolezz\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:52:41.6786191Z\",\r\n \"updatedOn\": \"2020-06-09T22:52:41.6786191Z\",\r\n \"createdBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\",\r\n \"updatedBy\": \"fc6c8339-646b-4fb2-a2e2-80f95c0baf96\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/dc307f0a-46a2-4260-bbca-66b3a4448a8d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"dc307f0a-46a2-4260-bbca-66b3a4448a8d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"testCustomRole\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T22:55:26.5124865Z\",\r\n \"updatedOn\": \"2020-06-09T22:55:26.5124865Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b768931c-5d00-4572-a731-431c6189f0da\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b768931c-5d00-4572-a731-431c6189f0da\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"bbCustomRole\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T23:42:41.0368856Z\",\r\n \"updatedOn\": \"2020-06-09T23:42:41.0368856Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/ae101df6-14ae-4d66-bbe0-a469a964f90f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ae101df6-14ae-4d66-bbe0-a469a964f90f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"zzCustomRole\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-09T23:55:14.2992167Z\",\r\n \"updatedOn\": \"2020-06-09T23:55:14.2992167Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/bec73b96-f2cf-436c-8917-d547da43a149\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"bec73b96-f2cf-436c-8917-d547da43a149\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"customrole123\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-10T01:13:23.0150344Z\",\r\n \"updatedOn\": \"2020-06-10T01:13:23.0150344Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/32d6d31d-e61a-41ec-8386-5dc64b3bc204\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"32d6d31d-e61a-41ec-8386-5dc64b3bc204\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"No RA READ\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you manage everything, including access to resources.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/roleAssignments/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-17T06:31:33.3927723Z\",\r\n \"updatedOn\": \"2020-06-17T06:31:33.3927723Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/6f2b4c36-69f1-4a45-8cda-7d5a9b690408\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"6f2b4c36-69f1-4a45-8cda-7d5a9b690408\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"No RA WRITE\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Lets you manage everything, including access to resources.\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/roleAssignments/write\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-17T06:41:55.5369299Z\",\r\n \"updatedOn\": \"2020-06-17T06:41:55.5369299Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/a43bed91-a7af-418a-8f07-e135d151b5b8\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a43bed91-a7af-418a-8f07-e135d151b5b8\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Another tests role\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Test role\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\",\r\n \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/ResourceGroups/rbactest\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-01T23:09:24.5638411Z\",\r\n \"updatedOn\": \"2020-07-01T23:09:24.5638411Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/0a0e83bc-50b9-4c4d-b2c2-3f41e1a8baf2\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0a0e83bc-50b9-4c4d-b2c2-3f41e1a8baf2\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Daoroz-Custom1\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"A role to use when testing various things\\nIt does not grant any real permissions, just the ability to read role definitions\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/roleDefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-08T17:44:15.2525393Z\",\r\n \"updatedOn\": \"2020-07-08T17:44:15.2525393Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"acdd72a7-3385-48ef-bd42-f606fba81ae7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Daoroz-Custom2\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"A role to be used when testing various things\\nIt does not grant any real permissions, just the ability to read role definitions\",\r\n \"assignableScopes\": [\r\n \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/roleDefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-08T17:51:15.4187811Z\",\r\n \"updatedOn\": \"2020-07-08T17:51:15.4187811Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/98ee936c-393c-4f03-81a8-6eccfd82d96e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"98ee936c-393c-4f03-81a8-6eccfd82d96e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Custom Reader Role at MG Root\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Custom Role at MG Root\",\r\n \"assignableScopes\": [\r\n \"/providers/Microsoft.Management/managementGroups/395544B0-BF41-429D-921F-E1CA2252FCF4\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-07-24T19:26:02.777463Z\",\r\n \"updatedOn\": \"2019-07-24T19:26:02.777463Z\",\r\n \"createdBy\": \"cdab7ada-d740-47da-a823-ec29c9a68482\",\r\n \"updatedBy\": \"cdab7ada-d740-47da-a823-ec29c9a68482\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/fa3bf1c6-5da9-47c7-976e-1007e1bc385a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fa3bf1c6-5da9-47c7-976e-1007e1bc385a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Custom Role Manish reader\",\r\n \"type\": \"CustomRole\",\r\n \"description\": \"Custom Role Manish reader\",\r\n \"assignableScopes\": [\r\n \"/providers/Microsoft.Management/managementGroups/395544B0-BF41-429D-921F-E1CA2252FCF4\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-07T18:53:42.1390099Z\",\r\n \"updatedOn\": \"2020-05-08T01:15:45.1587505Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"e8df956a-9463-408a-a9be-cf5f46d09b37\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/4edfca53-b078-483f-9d0e-c83e4544e854\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4edfca53-b078-483f-9d0e-c83e4544e854\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrPush\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr push\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/pull/read\",\r\n \"Microsoft.ContainerRegistry/registries/push/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-10-29T17:52:32.5201177Z\",\r\n \"updatedOn\": \"2018-11-13T23:26:19.9749249Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8311e382-0749-4cb8-b61a-304f252e45ec\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8311e382-0749-4cb8-b61a-304f252e45ec\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"API Management Service Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage service and the APIs\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ApiManagement/service/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8650193Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:17.7502607Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/312a565d-c81f-4fd8-895a-4e21e48d571c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"312a565d-c81f-4fd8-895a-4e21e48d571c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrPull\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr pull\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/pull/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-10-22T19:01:56.8227182Z\",\r\n \"updatedOn\": \"2018-11-13T23:22:03.2302457Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/7f951dda-4ed3-4680-a7ca-43fe172d538d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7f951dda-4ed3-4680-a7ca-43fe172d538d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrImageSigner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr image signer\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/sign/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-15T23:23:08.4038322Z\",\r\n \"updatedOn\": \"2018-10-29T19:06:24.9004422Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/6cef56e8-d556-48e5-a04f-b8e64114680f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"6cef56e8-d556-48e5-a04f-b8e64114680f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrDelete\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr delete\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/artifacts/delete\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-03-11T20:19:31.6682804Z\",\r\n \"updatedOn\": \"2019-03-11T20:24:38.9845104Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/c2f4ef07-c644-48eb-af81-4b1b4947fb11\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c2f4ef07-c644-48eb-af81-4b1b4947fb11\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrQuarantineReader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr quarantine data reader\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/quarantine/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-16T00:27:39.9596835Z\",\r\n \"updatedOn\": \"2019-10-22T00:12:39.702093Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/cdda3590-29a3-44f6-95f2-9f980659eb04\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"cdda3590-29a3-44f6-95f2-9f980659eb04\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"AcrQuarantineWriter\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"acr quarantine data writer\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerRegistry/registries/quarantine/read\",\r\n \"Microsoft.ContainerRegistry/registries/quarantine/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-16T00:26:37.587182Z\",\r\n \"updatedOn\": \"2019-10-22T00:10:29.8202164Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/c8d4ff99-41c3-41a8-9f60-21dfdad59608\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c8d4ff99-41c3-41a8-9f60-21dfdad59608\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"API Management Service Operator Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage service but not the APIs\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ApiManagement/service/*/read\",\r\n \"Microsoft.ApiManagement/service/backup/action\",\r\n \"Microsoft.ApiManagement/service/delete\",\r\n \"Microsoft.ApiManagement/service/managedeployments/action\",\r\n \"Microsoft.ApiManagement/service/read\",\r\n \"Microsoft.ApiManagement/service/restore/action\",\r\n \"Microsoft.ApiManagement/service/updatecertificate/action\",\r\n \"Microsoft.ApiManagement/service/updatehostname/action\",\r\n \"Microsoft.ApiManagement/service/write\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.ApiManagement/service/users/keys/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-11-09T00:03:42.1194019Z\",\r\n \"updatedOn\": \"2016-11-18T23:56:25.4682649Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/e022efe7-f5ba-4159-bbe4-b44f577e9b61\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e022efe7-f5ba-4159-bbe4-b44f577e9b61\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"API Management Service Reader Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read-only access to service and APIs\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ApiManagement/service/*/read\",\r\n \"Microsoft.ApiManagement/service/read\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.ApiManagement/service/users/keys/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-11-09T00:26:45.1540473Z\",\r\n \"updatedOn\": \"2017-01-23T23:10:34.8876776Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/71522526-b88f-4d52-b57f-d31fc3546d0d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"71522526-b88f-4d52-b57f-d31fc3546d0d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Application Insights Component Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage Application Insights components\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/metricAlerts/*\",\r\n \"Microsoft.Insights/components/*\",\r\n \"Microsoft.Insights/webtests/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2020-02-12T12:45:46.9200472Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/ae349356-3a1b-4a5e-921d-050484c6347e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ae349356-3a1b-4a5e-921d-050484c6347e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Application Insights Snapshot Debugger\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Gives user permission to use Application Insights Snapshot Debugger features\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/components/*/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-19T21:25:12.3728747Z\",\r\n \"updatedOn\": \"2017-04-19T23:34:59.9511581Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/08954f03-6346-4c2e-81c0-ec3a5cfae23b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"08954f03-6346-4c2e-81c0-ec3a5cfae23b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Attestation Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read the attestation provider properties\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Attestation/attestationProviders/attestation/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-03-25T19:42:59.157671Z\",\r\n \"updatedOn\": \"2019-05-10T17:52:38.9036953Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": \"SYSTEM\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/fd1bd22b-8476-40bc-a0bc-69b95687b9f3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fd1bd22b-8476-40bc-a0bc-69b95687b9f3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Automation Job Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Create and Manage Jobs using Automation Runbooks.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Automation/automationAccounts/hybridRunbookWorkerGroups/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/resume/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/stop/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/streams/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/suspend/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/write\",\r\n \"Microsoft.Automation/automationAccounts/jobs/output/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-19T20:52:41.0020018Z\",\r\n \"updatedOn\": \"2018-08-14T22:08:48.1147327Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/4fe576fe-1146-4730-92eb-48519fa6bf9f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4fe576fe-1146-4730-92eb-48519fa6bf9f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Automation Runbook Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read Runbook properties - to be able to create Jobs of the runbook.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Automation/automationAccounts/runbooks/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-19T20:47:49.5640674Z\",\r\n \"updatedOn\": \"2017-04-25T01:00:45.6444999Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5fb5aef8-1081-4b8e-bb16-9d5d0385bab5\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5fb5aef8-1081-4b8e-bb16-9d5d0385bab5\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Automation Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Automation Operators are able to start, stop, suspend, and resume jobs\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Automation/automationAccounts/hybridRunbookWorkerGroups/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/resume/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/stop/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/streams/read\",\r\n \"Microsoft.Automation/automationAccounts/jobs/suspend/action\",\r\n \"Microsoft.Automation/automationAccounts/jobs/write\",\r\n \"Microsoft.Automation/automationAccounts/jobSchedules/read\",\r\n \"Microsoft.Automation/automationAccounts/jobSchedules/write\",\r\n \"Microsoft.Automation/automationAccounts/linkedWorkspace/read\",\r\n \"Microsoft.Automation/automationAccounts/read\",\r\n \"Microsoft.Automation/automationAccounts/runbooks/read\",\r\n \"Microsoft.Automation/automationAccounts/schedules/read\",\r\n \"Microsoft.Automation/automationAccounts/schedules/write\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Automation/automationAccounts/jobs/output/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-08-18T01:05:03.391613Z\",\r\n \"updatedOn\": \"2018-05-10T20:12:39.69782Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/d3881f73-407a-4167-8283-e981cbba0404\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"d3881f73-407a-4167-8283-e981cbba0404\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Avere Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can create and manage an Avere vFXT cluster.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Compute/*/read\",\r\n \"Microsoft.Compute/availabilitySets/*\",\r\n \"Microsoft.Compute/proximityPlacementGroups/*\",\r\n \"Microsoft.Compute/virtualMachines/*\",\r\n \"Microsoft.Compute/disks/*\",\r\n \"Microsoft.Network/*/read\",\r\n \"Microsoft.Network/networkInterfaces/*\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/join/action\",\r\n \"Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action\",\r\n \"Microsoft.Network/networkSecurityGroups/join/action\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/*/read\",\r\n \"Microsoft.Storage/storageAccounts/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/resources/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-03-18T20:00:58.9207889Z\",\r\n \"updatedOn\": \"2020-05-27T06:48:54.4896867Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/4f8fab4f-1852-4a58-a46a-8eaf358af14a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4f8fab4f-1852-4a58-a46a-8eaf358af14a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Avere Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Used by the Avere vFXT cluster to manage the cluster\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Compute/virtualMachines/read\",\r\n \"Microsoft.Network/networkInterfaces/read\",\r\n \"Microsoft.Network/networkInterfaces/write\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/join/action\",\r\n \"Microsoft.Network/networkSecurityGroups/join/action\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/delete\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-03-18T20:02:38.3399857Z\",\r\n \"updatedOn\": \"2019-03-29T00:26:37.9205875Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/c025889f-8102-4ebf-b32c-fc0c6f0c6bd9\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c025889f-8102-4ebf-b32c-fc0c6f0c6bd9\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service Cluster Admin Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"List cluster admin credential action.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerService/managedClusters/listClusterAdminCredential/action\",\r\n \"Microsoft.ContainerService/managedClusters/accessProfiles/listCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-08-15T21:38:18.5953853Z\",\r\n \"updatedOn\": \"2020-02-07T02:49:24.9715273Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/0ab0b1a8-8aac-4efd-b8c2-3ee1fb270be8\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0ab0b1a8-8aac-4efd-b8c2-3ee1fb270be8\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service Cluster User Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"List cluster user credential action.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerService/managedClusters/listClusterUserCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-08-15T22:04:53.4037241Z\",\r\n \"updatedOn\": \"2020-02-11T23:37:03.589924Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/4abbcc35-e782-43d8-92c5-2d3f1bd2253f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4abbcc35-e782-43d8-92c5-2d3f1bd2253f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Maps Data Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Grants access to read map related data from an Azure maps account.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Maps/accounts/*/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-10-05T19:47:03.472307Z\",\r\n \"updatedOn\": \"2020-04-28T22:33:41.7780319Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/423170ca-a8f6-4b0f-8487-9e4eb8f49bfa\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"423170ca-a8f6-4b0f-8487-9e4eb8f49bfa\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Stack Registration Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Azure Stack registrations.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.AzureStack/edgeSubscriptions/read\",\r\n \"Microsoft.AzureStack/registrations/products/*/action\",\r\n \"Microsoft.AzureStack/registrations/products/read\",\r\n \"Microsoft.AzureStack/registrations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-11-13T23:42:06.2161827Z\",\r\n \"updatedOn\": \"2020-06-29T22:11:17.0759529Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/6f12a6df-dd06-4f3e-bcb1-ce8be600526a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"6f12a6df-dd06-4f3e-bcb1-ce8be600526a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Backup Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage backup service,but can't create vaults and give access to others\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.RecoveryServices/locations/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/refreshContainers/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobs/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobsExport/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperationResults/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectableItems/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectedItems/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionContainers/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupSecurityPIN/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read\",\r\n \"Microsoft.RecoveryServices/Vaults/certificates/*\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/*\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/*\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/*\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupstorageconfig/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupconfig/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupValidateOperation/action\",\r\n \"Microsoft.RecoveryServices/Vaults/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperations/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupEngines/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectableContainers/read\",\r\n \"Microsoft.RecoveryServices/locations/backupStatus/action\",\r\n \"Microsoft.RecoveryServices/locations/backupPreValidateProtection/action\",\r\n \"Microsoft.RecoveryServices/locations/backupValidateFeatures/action\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/write\",\r\n \"Microsoft.RecoveryServices/operations/read\",\r\n \"Microsoft.RecoveryServices/locations/operationStatus/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-01-03T13:12:15.7321344Z\",\r\n \"updatedOn\": \"2019-12-17T10:44:35.8361149Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5e467623-bb1f-42f4-a55d-6e525e11384b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Billing Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows read access to billing data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Billing/*/read\",\r\n \"Microsoft.Commerce/*/read\",\r\n \"Microsoft.Consumption/*/read\",\r\n \"Microsoft.Management/managementGroups/read\",\r\n \"Microsoft.CostManagement/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-25T02:13:38.9054151Z\",\r\n \"updatedOn\": \"2018-09-26T17:45:09.2227236Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/fa23ad8b-c56e-40d8-ac0c-ce449e1d2c64\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fa23ad8b-c56e-40d8-ac0c-ce449e1d2c64\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Backup Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage backup services, except removal of backup, vault creation and giving access to others\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/backup/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationsStatus/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/provisionInstantItemRecovery/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/restore/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/revokeInstantItemRecovery/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/refreshContainers/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobs/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobsExport/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperationResults/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectableItems/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectedItems/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read\",\r\n \"Microsoft.RecoveryServices/Vaults/certificates/write\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/read\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/write\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/*\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/write\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupstorageconfig/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupValidateOperation/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperations/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/operations/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/inquire/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupEngines/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectableContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/items/read\",\r\n \"Microsoft.RecoveryServices/locations/backupStatus/action\",\r\n \"Microsoft.RecoveryServices/locations/backupPreValidateProtection/action\",\r\n \"Microsoft.RecoveryServices/locations/backupValidateFeatures/action\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/write\",\r\n \"Microsoft.RecoveryServices/operations/read\",\r\n \"Microsoft.RecoveryServices/locations/operationStatus/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-01-03T13:21:11.894764Z\",\r\n \"updatedOn\": \"2019-12-17T11:02:43.9998686Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/00c29273-979b-4161-815c-10b084fb9324\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"00c29273-979b-4161-815c-10b084fb9324\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Backup Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can view backup services, but can't make changes\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.RecoveryServices/locations/allocatedStamp/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationsStatus/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobs/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobs/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupJobsExport/action\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectedItems/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupstorageconfig/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupconfig/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupOperations/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/operations/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupEngines/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/items/read\",\r\n \"Microsoft.RecoveryServices/locations/backupStatus/action\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/*\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/write\",\r\n \"Microsoft.RecoveryServices/operations/read\",\r\n \"Microsoft.RecoveryServices/locations/operationStatus/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.RecoveryServices/locations/backupValidateFeatures/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-01-03T13:18:41.3893065Z\",\r\n \"updatedOn\": \"2020-03-04T12:12:04.321311Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/a795c7a0-d4a2-40c1-ae25-d81f01202912\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a795c7a0-d4a2-40c1-ae25-d81f01202912\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Blockchain Member Node Access (Preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for access to Blockchain Member nodes\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Blockchain/blockchainMembers/transactionNodes/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Blockchain/blockchainMembers/transactionNodes/connect/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-21T10:33:01.9604839Z\",\r\n \"updatedOn\": \"2018-12-21T10:33:58.0042162Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/31a002a1-acaf-453e-8a5b-297c9ca1ea24\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"31a002a1-acaf-453e-8a5b-297c9ca1ea24\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"BizTalk Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage BizTalk services, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.BizTalkServices/BizTalk/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:42:18.897821Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5e3c6656-6cfa-4708-81fe-0de47ac73342\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5e3c6656-6cfa-4708-81fe-0de47ac73342\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CDN Endpoint Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage CDN endpoints, but can’t grant access to other users.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Cdn/edgenodes/read\",\r\n \"Microsoft.Cdn/operationresults/*\",\r\n \"Microsoft.Cdn/profiles/endpoints/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-01-23T02:48:46.4996252Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:52.6231539Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/426e0c7f-0c7e-4658-b36f-ff54d6c29b45\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"426e0c7f-0c7e-4658-b36f-ff54d6c29b45\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CDN Endpoint Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can view CDN endpoints, but can’t make changes.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Cdn/edgenodes/read\",\r\n \"Microsoft.Cdn/operationresults/*\",\r\n \"Microsoft.Cdn/profiles/endpoints/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-01-23T02:48:46.4996252Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:53.1585846Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/871e35f6-b5c1-49cc-a043-bde969a0f2cd\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"871e35f6-b5c1-49cc-a043-bde969a0f2cd\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CDN Profile Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage CDN profiles and their endpoints, but can’t grant access to other users.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Cdn/edgenodes/read\",\r\n \"Microsoft.Cdn/operationresults/*\",\r\n \"Microsoft.Cdn/profiles/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-01-23T02:48:46.4996252Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:53.7051278Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/ec156ff8-a8d1-4d15-830c-5b80698ca432\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ec156ff8-a8d1-4d15-830c-5b80698ca432\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CDN Profile Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can view CDN profiles and their endpoints, but can’t make changes.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Cdn/edgenodes/read\",\r\n \"Microsoft.Cdn/operationresults/*\",\r\n \"Microsoft.Cdn/profiles/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-01-23T02:48:46.4996252Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:54.2283001Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8f96442b-4075-438f-813d-ad51ab4019af\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8f96442b-4075-438f-813d-ad51ab4019af\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Classic Network Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage classic networks, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ClassicNetwork/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:39.7576926Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b34d265f-36f7-4a0d-a4d4-e158ca92e90f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b34d265f-36f7-4a0d-a4d4-e158ca92e90f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Classic Storage Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage classic storage accounts, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ClassicStorage/storageAccounts/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:30.8964641Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/86e8f5dc-a6e9-4c67-9d15-de283e8eac25\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"86e8f5dc-a6e9-4c67-9d15-de283e8eac25\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Classic Storage Account Key Operator Service Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Classic Storage Account Key Operators are allowed to list and regenerate keys on Classic Storage Accounts\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ClassicStorage/storageAccounts/listkeys/action\",\r\n \"Microsoft.ClassicStorage/storageAccounts/regeneratekey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-13T18:22:52.14611Z\",\r\n \"updatedOn\": \"2017-04-13T20:54:03.0505986Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/985d6b00-f706-48f5-a6fe-d0ca12fb668d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"985d6b00-f706-48f5-a6fe-d0ca12fb668d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"ClearDB MySQL DB Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage ClearDB MySQL databases, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"successbricks.cleardb/databases/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:42:23.2893077Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/9106cda0-8a86-4e81-b686-29a22c54effe\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"9106cda0-8a86-4e81-b686-29a22c54effe\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Classic Virtual Machine Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage classic virtual machines, but not access to them, and not the virtual network or storage account they’re connected to.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ClassicCompute/domainNames/*\",\r\n \"Microsoft.ClassicCompute/virtualMachines/*\",\r\n \"Microsoft.ClassicNetwork/networkSecurityGroups/join/action\",\r\n \"Microsoft.ClassicNetwork/reservedIps/link/action\",\r\n \"Microsoft.ClassicNetwork/reservedIps/read\",\r\n \"Microsoft.ClassicNetwork/virtualNetworks/join/action\",\r\n \"Microsoft.ClassicNetwork/virtualNetworks/read\",\r\n \"Microsoft.ClassicStorage/storageAccounts/disks/read\",\r\n \"Microsoft.ClassicStorage/storageAccounts/images/read\",\r\n \"Microsoft.ClassicStorage/storageAccounts/listKeys/action\",\r\n \"Microsoft.ClassicStorage/storageAccounts/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-04-25T00:37:56.5416086Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:43.0770473Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/d73bb868-a0df-4d4d-bd69-98a00b01fccb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"d73bb868-a0df-4d4d-bd69-98a00b01fccb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services User\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read and list keys of Cognitive Services.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\",\r\n \"Microsoft.CognitiveServices/accounts/listkeys/action\",\r\n \"Microsoft.Insights/alertRules/read\",\r\n \"Microsoft.Insights/diagnosticSettings/read\",\r\n \"Microsoft.Insights/logDefinitions/read\",\r\n \"Microsoft.Insights/metricdefinitions/read\",\r\n \"Microsoft.Insights/metrics/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-08-08T23:23:43.7701274Z\",\r\n \"updatedOn\": \"2019-02-13T19:53:56.7209248Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/a97b65f3-24c7-4388-baec-2e87135dc908\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a97b65f3-24c7-4388-baec-2e87135dc908\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Data Reader (Preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read Cognitive Services data.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-02-13T20:02:12.6849986Z\",\r\n \"updatedOn\": \"2019-02-13T22:53:55.167529Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b59867f0-fa02-499b-be73-45a86b5b3e1c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b59867f0-fa02-499b-be73-45a86b5b3e1c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you create, read, update, delete and manage keys of Cognitive Services.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.CognitiveServices/*\",\r\n \"Microsoft.Features/features/read\",\r\n \"Microsoft.Features/providers/features/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/diagnosticSettings/*\",\r\n \"Microsoft.Insights/logDefinitions/read\",\r\n \"Microsoft.Insights/metricdefinitions/read\",\r\n \"Microsoft.Insights/metrics/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourcegroups/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-08-08T23:18:39.2257848Z\",\r\n \"updatedOn\": \"2018-09-14T00:53:37.7546808Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"CosmosBackupOperator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can submit restore request for a Cosmos DB database or a container for an account\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.DocumentDB/databaseAccounts/backup/action\",\r\n \"Microsoft.DocumentDB/databaseAccounts/restore/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-07T19:47:14.965156Z\",\r\n \"updatedOn\": \"2018-12-07T19:52:21.9969834Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/db7b14f2-5adf-42da-9f96-f2ee17bab5cb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"db7b14f2-5adf-42da-9f96-f2ee17bab5cb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage everything except access to resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Authorization/*/Delete\",\r\n \"Microsoft.Authorization/*/Write\",\r\n \"Microsoft.Authorization/elevateAccess/Action\",\r\n \"Microsoft.Blueprint/blueprintAssignments/write\",\r\n \"Microsoft.Blueprint/blueprintAssignments/delete\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:38.458061Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cosmos DB Account Reader Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read Azure Cosmos DB Accounts data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.DocumentDB/*/read\",\r\n \"Microsoft.DocumentDB/databaseAccounts/readonlykeys/action\",\r\n \"Microsoft.Insights/MetricDefinitions/read\",\r\n \"Microsoft.Insights/Metrics/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-10-30T17:53:54.6005577Z\",\r\n \"updatedOn\": \"2018-02-21T01:36:59.6186231Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/fbdf93bf-df7d-467e-a4d2-9458aa1360c8\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fbdf93bf-df7d-467e-a4d2-9458aa1360c8\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cost Management Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can view costs and manage cost configuration (e.g. budgets, exports)\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Consumption/*\",\r\n \"Microsoft.CostManagement/*\",\r\n \"Microsoft.Billing/billingPeriods/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Advisor/configurations/read\",\r\n \"Microsoft.Advisor/recommendations/read\",\r\n \"Microsoft.Management/managementGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-14T16:09:22.8834827Z\",\r\n \"updatedOn\": \"2019-06-25T21:25:06.8686379Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/434105ed-43f6-45c7-a02f-909b2ba83430\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"434105ed-43f6-45c7-a02f-909b2ba83430\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cost Management Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can view cost data and configuration (e.g. budgets, exports)\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Consumption/*/read\",\r\n \"Microsoft.CostManagement/*/read\",\r\n \"Microsoft.Billing/billingPeriods/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Advisor/configurations/read\",\r\n \"Microsoft.Advisor/recommendations/read\",\r\n \"Microsoft.Management/managementGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-14T16:09:22.8834827Z\",\r\n \"updatedOn\": \"2019-06-25T20:59:11.5762937Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/72fafb9e-0641-4937-9268-a91bfd8191a3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"72fafb9e-0641-4937-9268-a91bfd8191a3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Data Box Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage everything under Data Box Service except giving access to others.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Databox/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-07-27T08:28:42.714021Z\",\r\n \"updatedOn\": \"2018-07-27T08:36:56.3827309Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/add466c9-e687-43fc-8d98-dfcf8d720be5\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"add466c9-e687-43fc-8d98-dfcf8d720be5\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Data Box Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Data Box Service except creating order or editing order details and giving access to others.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Databox/*/read\",\r\n \"Microsoft.Databox/jobs/listsecrets/action\",\r\n \"Microsoft.Databox/jobs/listcredentials/action\",\r\n \"Microsoft.Databox/locations/availableSkus/action\",\r\n \"Microsoft.Databox/locations/validateInputs/action\",\r\n \"Microsoft.Databox/locations/regionConfiguration/action\",\r\n \"Microsoft.Databox/locations/validateAddress/action\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-07-27T08:26:21.9284772Z\",\r\n \"updatedOn\": \"2020-01-24T05:39:52.6143537Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/028f4ed7-e2a9-465e-a8f4-9c0ffdfdc027\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"028f4ed7-e2a9-465e-a8f4-9c0ffdfdc027\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Data Factory Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Create and manage data factories, as well as child resources within them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.DataFactory/dataFactories/*\",\r\n \"Microsoft.DataFactory/factories/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.EventGrid/eventSubscriptions/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2020-02-14T19:49:21.5789216Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"673868aa-7521-48a0-acc6-0f60742d39f5\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Data Purger\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can purge analytics data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Insights/components/*/read\",\r\n \"Microsoft.Insights/components/purge/action\",\r\n \"Microsoft.OperationalInsights/workspaces/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/purge/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-04-30T22:39:49.61677Z\",\r\n \"updatedOn\": \"2018-04-30T22:44:15.1171162Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/150f5e0c-0603-4f03-8c7f-cf70034c4e90\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"150f5e0c-0603-4f03-8c7f-cf70034c4e90\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Data Lake Analytics Developer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you submit, monitor, and manage your own jobs but not create or delete Data Lake Analytics accounts.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.BigAnalytics/accounts/*\",\r\n \"Microsoft.DataLakeAnalytics/accounts/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.BigAnalytics/accounts/Delete\",\r\n \"Microsoft.BigAnalytics/accounts/TakeOwnership/action\",\r\n \"Microsoft.BigAnalytics/accounts/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/Delete\",\r\n \"Microsoft.DataLakeAnalytics/accounts/TakeOwnership/action\",\r\n \"Microsoft.DataLakeAnalytics/accounts/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/dataLakeStoreAccounts/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/dataLakeStoreAccounts/Delete\",\r\n \"Microsoft.DataLakeAnalytics/accounts/storageAccounts/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/storageAccounts/Delete\",\r\n \"Microsoft.DataLakeAnalytics/accounts/firewallRules/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/firewallRules/Delete\",\r\n \"Microsoft.DataLakeAnalytics/accounts/computePolicies/Write\",\r\n \"Microsoft.DataLakeAnalytics/accounts/computePolicies/Delete\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-10-20T00:33:29.3115234Z\",\r\n \"updatedOn\": \"2017-08-18T00:00:17.0411642Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/47b7735b-770e-4598-a7da-8b91488b4c88\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"47b7735b-770e-4598-a7da-8b91488b4c88\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"DevTest Labs User\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you connect, start, restart, and shutdown your virtual machines in your Azure DevTest Labs.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Compute/availabilitySets/read\",\r\n \"Microsoft.Compute/virtualMachines/*/read\",\r\n \"Microsoft.Compute/virtualMachines/deallocate/action\",\r\n \"Microsoft.Compute/virtualMachines/read\",\r\n \"Microsoft.Compute/virtualMachines/restart/action\",\r\n \"Microsoft.Compute/virtualMachines/start/action\",\r\n \"Microsoft.DevTestLab/*/read\",\r\n \"Microsoft.DevTestLab/labs/claimAnyVm/action\",\r\n \"Microsoft.DevTestLab/labs/createEnvironment/action\",\r\n \"Microsoft.DevTestLab/labs/ensureCurrentUserProfile/action\",\r\n \"Microsoft.DevTestLab/labs/formulas/delete\",\r\n \"Microsoft.DevTestLab/labs/formulas/read\",\r\n \"Microsoft.DevTestLab/labs/formulas/write\",\r\n \"Microsoft.DevTestLab/labs/policySets/evaluatePolicies/action\",\r\n \"Microsoft.DevTestLab/labs/virtualMachines/claim/action\",\r\n \"Microsoft.DevTestLab/labs/virtualmachines/listApplicableSchedules/action\",\r\n \"Microsoft.DevTestLab/labs/virtualMachines/getRdpFileContents/action\",\r\n \"Microsoft.Network/loadBalancers/backendAddressPools/join/action\",\r\n \"Microsoft.Network/loadBalancers/inboundNatRules/join/action\",\r\n \"Microsoft.Network/networkInterfaces/*/read\",\r\n \"Microsoft.Network/networkInterfaces/join/action\",\r\n \"Microsoft.Network/networkInterfaces/read\",\r\n \"Microsoft.Network/networkInterfaces/write\",\r\n \"Microsoft.Network/publicIPAddresses/*/read\",\r\n \"Microsoft.Network/publicIPAddresses/join/action\",\r\n \"Microsoft.Network/publicIPAddresses/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/join/action\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Resources/deployments/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/listKeys/action\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Compute/virtualMachines/vmSizes/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-08T21:52:45.0657582Z\",\r\n \"updatedOn\": \"2019-05-08T11:27:34.8855476Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/76283e04-6283-4c54-8f91-bcf1374a3c64\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"76283e04-6283-4c54-8f91-bcf1374a3c64\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"DocumentDB Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage DocumentDB accounts, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.DocumentDb/databaseAccounts/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-11-21T01:38:32.0948484Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5bd9cd88-fe45-4216-938b-f97437e15450\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"DNS Zone Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage DNS zones and record sets in Azure DNS, but does not let you control who has access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/dnsZones/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-10-15T23:33:25.9730842Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:40.3710365Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/befefa01-2a29-4197-83a8-272ff33ce314\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"befefa01-2a29-4197-83a8-272ff33ce314\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"EventGrid EventSubscription Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage EventGrid event subscription operations.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.EventGrid/eventSubscriptions/*\",\r\n \"Microsoft.EventGrid/topicTypes/eventSubscriptions/read\",\r\n \"Microsoft.EventGrid/locations/eventSubscriptions/read\",\r\n \"Microsoft.EventGrid/locations/topicTypes/eventSubscriptions/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-10-08T23:27:28.3130743Z\",\r\n \"updatedOn\": \"2019-01-08T00:06:34.3543171Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/428e0ff0-5e57-4d9c-a221-2c70d0e0a443\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"428e0ff0-5e57-4d9c-a221-2c70d0e0a443\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"EventGrid EventSubscription Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read EventGrid event subscriptions.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.EventGrid/eventSubscriptions/read\",\r\n \"Microsoft.EventGrid/topicTypes/eventSubscriptions/read\",\r\n \"Microsoft.EventGrid/locations/eventSubscriptions/read\",\r\n \"Microsoft.EventGrid/locations/topicTypes/eventSubscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-10-09T17:29:28.1417894Z\",\r\n \"updatedOn\": \"2019-01-08T00:05:40.2884365Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/2414bbcf-6497-4faf-8c65-045460748405\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"2414bbcf-6497-4faf-8c65-045460748405\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Graph Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Create and manage all aspects of the Enterprise Graph - Ontology, Schema mapping, Conflation and Conversational AI and Ingestions\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/conflation/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/conflation/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/sourceschema/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/sourceschema/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/knowledge/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/knowledge/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/intentclassification/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/intentclassification/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/ingestion/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/ingestion/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/ontology/read\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/ontology/write\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/delete\",\r\n \"Microsoft.EnterpriseKnowledgeGraph/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-02-23T21:07:22.5844236Z\",\r\n \"updatedOn\": \"2019-02-28T20:21:18.9318073Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b60367af-1334-4454-b71e-769d9a4f83d9\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b60367af-1334-4454-b71e-769d9a4f83d9\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"HDInsight Domain Services Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can Read, Create, Modify and Delete Domain Services related operations needed for HDInsight Enterprise Security Package\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.AAD/*/read\",\r\n \"Microsoft.AAD/domainServices/*/read\",\r\n \"Microsoft.AAD/domainServices/oucontainer/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-09-12T22:42:51.7451109Z\",\r\n \"updatedOn\": \"2018-09-12T23:06:45.7641599Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8d8d5a11-05d3-4bda-a417-a08778121c7c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8d8d5a11-05d3-4bda-a417-a08778121c7c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Intelligent Systems Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Intelligent Systems accounts, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.IntelligentSystems/accounts/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:32:00.9996357Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/03a6d094-3444-4b3d-88af-7477090a9e5e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"03a6d094-3444-4b3d-88af-7477090a9e5e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage key vaults, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.KeyVault/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.KeyVault/locations/deletedVaults/purge/action\",\r\n \"Microsoft.KeyVault/hsmPools/*\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-02-25T17:08:28.5184971Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:49.5373075Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/f25e0fa2-a7c8-4377-a976-54943a77a395\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f25e0fa2-a7c8-4377-a976-54943a77a395\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Knowledge Consumer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Knowledge Read permission to consume Enterprise Graph Knowledge using entity search and graph query\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.EnterpriseKnowledgeGraph/services/knowledge/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-02-23T21:23:31.4037552Z\",\r\n \"updatedOn\": \"2019-02-28T20:25:00.7369384Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/ee361c5d-f7b5-4119-b4b6-892157c8f64c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ee361c5d-f7b5-4119-b4b6-892157c8f64c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Lab Creator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you create new labs under your Azure Lab Accounts.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.LabServices/labAccounts/*/read\",\r\n \"Microsoft.LabServices/labAccounts/createLab/action\",\r\n \"Microsoft.LabServices/labAccounts/getPricingAndAvailability/action\",\r\n \"Microsoft.LabServices/labAccounts/getRestrictionsAndUsage/action\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-01-18T23:38:58.1036141Z\",\r\n \"updatedOn\": \"2020-07-10T17:45:43.2289715Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b97fb8bc-a8b2-4522-a38b-dd33c7e65ead\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b97fb8bc-a8b2-4522-a38b-dd33c7e65ead\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Log Analytics Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Log Analytics Reader can view and search all monitoring data as well as and view monitoring settings, including viewing the configuration of Azure diagnostics on all Azure resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/analytics/query/action\",\r\n \"Microsoft.OperationalInsights/workspaces/search/action\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.OperationalInsights/workspaces/sharedKeys/read\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-02T00:20:28.1449012Z\",\r\n \"updatedOn\": \"2018-01-30T18:08:26.0438523Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/73c42c96-874c-492b-b04d-ab87d138a893\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"73c42c96-874c-492b-b04d-ab87d138a893\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Log Analytics Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Log Analytics Contributor can read all monitoring data and edit monitoring settings. Editing monitoring settings includes adding the VM extension to VMs; reading storage account keys to be able to configure collection of logs from Azure Storage; creating and configuring Automation accounts; adding solutions; and configuring Azure diagnostics on all Azure resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Automation/automationAccounts/*\",\r\n \"Microsoft.ClassicCompute/virtualMachines/extensions/*\",\r\n \"Microsoft.ClassicStorage/storageAccounts/listKeys/action\",\r\n \"Microsoft.Compute/virtualMachines/extensions/*\",\r\n \"Microsoft.HybridCompute/machines/extensions/write\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/diagnosticSettings/*\",\r\n \"Microsoft.OperationalInsights/*\",\r\n \"Microsoft.OperationsManagement/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourcegroups/deployments/*\",\r\n \"Microsoft.Storage/storageAccounts/listKeys/action\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-25T21:51:45.3174711Z\",\r\n \"updatedOn\": \"2020-03-26T22:57:55.366783Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"92aaf0da-9dab-42b6-94a3-d43ce8d16293\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Logic App Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read, enable and disable logic app.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*/read\",\r\n \"Microsoft.Insights/metricAlerts/*/read\",\r\n \"Microsoft.Insights/diagnosticSettings/*/read\",\r\n \"Microsoft.Insights/metricDefinitions/*/read\",\r\n \"Microsoft.Logic/*/read\",\r\n \"Microsoft.Logic/workflows/disable/action\",\r\n \"Microsoft.Logic/workflows/enable/action\",\r\n \"Microsoft.Logic/workflows/validate/action\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Web/connectionGateways/*/read\",\r\n \"Microsoft.Web/connections/*/read\",\r\n \"Microsoft.Web/customApis/*/read\",\r\n \"Microsoft.Web/serverFarms/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-04-28T21:33:30.4656007Z\",\r\n \"updatedOn\": \"2019-10-15T04:28:56.3265986Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/515c2055-d9d4-4321-b1b9-bd0c9a0f79fe\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"515c2055-d9d4-4321-b1b9-bd0c9a0f79fe\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Logic App Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage logic app, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ClassicStorage/storageAccounts/listKeys/action\",\r\n \"Microsoft.ClassicStorage/storageAccounts/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/metricAlerts/*\",\r\n \"Microsoft.Insights/diagnosticSettings/*\",\r\n \"Microsoft.Insights/logdefinitions/*\",\r\n \"Microsoft.Insights/metricDefinitions/*\",\r\n \"Microsoft.Logic/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/listkeys/action\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Web/connectionGateways/*\",\r\n \"Microsoft.Web/connections/*\",\r\n \"Microsoft.Web/customApis/*\",\r\n \"Microsoft.Web/serverFarms/join/action\",\r\n \"Microsoft.Web/serverFarms/read\",\r\n \"Microsoft.Web/sites/functions/listSecrets/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-04-28T21:33:30.4656007Z\",\r\n \"updatedOn\": \"2019-10-15T04:31:27.7685427Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/87a39d53-fc1b-424a-814c-f7e04687dc9e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"87a39d53-fc1b-424a-814c-f7e04687dc9e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Application Operator Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read and perform actions on Managed Application resources\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Solutions/applications/read\",\r\n \"Microsoft.Solutions/*/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-07-27T00:59:33.7988813Z\",\r\n \"updatedOn\": \"2019-02-20T01:09:55.1593079Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/c7393b34-138c-406f-901b-d8cf2b17e6ae\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c7393b34-138c-406f-901b-d8cf2b17e6ae\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Applications Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read resources in a managed app and request JIT access.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Solutions/jitRequests/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-09-06T00:33:58.3651522Z\",\r\n \"updatedOn\": \"2018-09-06T00:33:58.3651522Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b9331d33-8a36-4f8c-b097-4f54124fdb44\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b9331d33-8a36-4f8c-b097-4f54124fdb44\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Identity Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read and Assign User Assigned Identity\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ManagedIdentity/userAssignedIdentities/*/read\",\r\n \"Microsoft.ManagedIdentity/userAssignedIdentities/*/assign/action\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-14T19:52:04.3924594Z\",\r\n \"updatedOn\": \"2017-12-14T22:16:00.1483256Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/f1a07417-d97a-45cb-824c-7a7467783830\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f1a07417-d97a-45cb-824c-7a7467783830\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Identity Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Create, Read, Update, and Delete User Assigned Identity\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ManagedIdentity/userAssignedIdentities/read\",\r\n \"Microsoft.ManagedIdentity/userAssignedIdentities/write\",\r\n \"Microsoft.ManagedIdentity/userAssignedIdentities/delete\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-14T19:53:42.8804692Z\",\r\n \"updatedOn\": \"2019-06-20T21:51:27.0850433Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/e40ec5ca-96e0-45a2-b4ff-59039f2c2b59\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e40ec5ca-96e0-45a2-b4ff-59039f2c2b59\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Management Group Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Management Group Contributor Role\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Management/managementGroups/delete\",\r\n \"Microsoft.Management/managementGroups/read\",\r\n \"Microsoft.Management/managementGroups/subscriptions/delete\",\r\n \"Microsoft.Management/managementGroups/subscriptions/write\",\r\n \"Microsoft.Management/managementGroups/write\",\r\n \"Microsoft.Management/managementGroups/subscriptions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-06-22T00:28:29.0523964Z\",\r\n \"updatedOn\": \"2020-07-06T18:13:34.9045672Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5d58bcaf-24a5-4b20-bdb6-eed9f69fbe4c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5d58bcaf-24a5-4b20-bdb6-eed9f69fbe4c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Management Group Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Management Group Reader Role\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Management/managementGroups/read\",\r\n \"Microsoft.Management/managementGroups/subscriptions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-06-22T00:31:03.4295347Z\",\r\n \"updatedOn\": \"2020-07-06T18:09:27.1441705Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/ac63b705-f282-497d-ac71-919bf39d939d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ac63b705-f282-497d-ac71-919bf39d939d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Monitoring Metrics Publisher\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Enables publishing metrics against Azure resources\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Insights/Register/Action\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Insights/Metrics/Write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-08-14T00:36:16.5610279Z\",\r\n \"updatedOn\": \"2018-08-14T00:37:18.1465065Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/3913510d-42f4-4e42-8a64-420c390055eb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3913510d-42f4-4e42-8a64-420c390055eb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Monitoring Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read all monitoring data.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/search/action\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-09-21T19:19:52.4939376Z\",\r\n \"updatedOn\": \"2018-01-30T18:08:27.262625Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/43d0d8ad-25c7-4714-9337-8ba259a9fe05\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"43d0d8ad-25c7-4714-9337-8ba259a9fe05\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Network Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage networks, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-02T00:18:27.3542698Z\",\r\n \"updatedOn\": \"2016-05-31T23:14:00.3326359Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4d97b98b-1d4f-4787-a291-c67834d212e7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Monitoring Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read all monitoring data and update monitoring settings.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.AlertsManagement/alerts/*\",\r\n \"Microsoft.AlertsManagement/alertsSummary/*\",\r\n \"Microsoft.Insights/actiongroups/*\",\r\n \"Microsoft.Insights/activityLogAlerts/*\",\r\n \"Microsoft.Insights/AlertRules/*\",\r\n \"Microsoft.Insights/components/*\",\r\n \"Microsoft.Insights/DiagnosticSettings/*\",\r\n \"Microsoft.Insights/eventtypes/*\",\r\n \"Microsoft.Insights/LogDefinitions/*\",\r\n \"Microsoft.Insights/metricalerts/*\",\r\n \"Microsoft.Insights/MetricDefinitions/*\",\r\n \"Microsoft.Insights/Metrics/*\",\r\n \"Microsoft.Insights/Register/Action\",\r\n \"Microsoft.Insights/scheduledqueryrules/*\",\r\n \"Microsoft.Insights/webtests/*\",\r\n \"Microsoft.Insights/workbooks/*\",\r\n \"Microsoft.Insights/privateLinkScopes/*\",\r\n \"Microsoft.Insights/privateLinkScopeOperationStatuses/*\",\r\n \"Microsoft.OperationalInsights/workspaces/write\",\r\n \"Microsoft.OperationalInsights/workspaces/intelligencepacks/*\",\r\n \"Microsoft.OperationalInsights/workspaces/savedSearches/*\",\r\n \"Microsoft.OperationalInsights/workspaces/search/action\",\r\n \"Microsoft.OperationalInsights/workspaces/sharedKeys/action\",\r\n \"Microsoft.OperationalInsights/workspaces/storageinsightconfigs/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.WorkloadMonitor/monitors/*\",\r\n \"Microsoft.WorkloadMonitor/notificationSettings/*\",\r\n \"Microsoft.AlertsManagement/smartDetectorAlertRules/*\",\r\n \"Microsoft.AlertsManagement/actionRules/*\",\r\n \"Microsoft.AlertsManagement/smartGroups/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2016-09-21T19:21:08.4345976Z\",\r\n \"updatedOn\": \"2020-04-19T16:03:16.7692305Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"749f88d5-cbae-40b8-bcfc-e573ddc772fa\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"New Relic APM Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage New Relic Application Performance Management accounts and applications, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"NewRelic.APM/accounts/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:42:16.2033878Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5d28c62d-5b37-4476-8438-e587778df237\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5d28c62d-5b37-4476-8438-e587778df237\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage everything, including access to resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:32.2101122Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8e3af657-a8ff-443c-a75c-2fe8c4bcb635\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8e3af657-a8ff-443c-a75c-2fe8c4bcb635\"\r\n },{\r\n \"properties\": {\r\n \"roleName\": \"Redis Cache Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Redis caches, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Cache/register/action\",\r\n \"Microsoft.Cache/redis/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2020-07-16T00:20:31.8240854Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/e0f68234-74aa-48ed-b826-c38b57376e17\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e0f68234-74aa-48ed-b826-c38b57376e17\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Reader and Data Access\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you view everything but will not let you delete or create a storage account or contained resource. It will also allow read/write access to all data contained in a storage account via access to storage account keys.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/listKeys/action\",\r\n \"Microsoft.Storage/storageAccounts/ListAccountSas/action\",\r\n \"Microsoft.Storage/storageAccounts/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-03-27T23:20:46.1498906Z\",\r\n \"updatedOn\": \"2019-04-04T23:41:26.1056261Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/c12c1c16-33a1-487b-954d-41c89c60f349\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c12c1c16-33a1-487b-954d-41c89c60f349\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Resource Policy Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Users with rights to create/modify resource policy, create support ticket and read resources/hierarchy.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Authorization/policyassignments/*\",\r\n \"Microsoft.Authorization/policydefinitions/*\",\r\n \"Microsoft.Authorization/policysetdefinitions/*\",\r\n \"Microsoft.PolicyInsights/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-08-25T19:08:01.3861639Z\",\r\n \"updatedOn\": \"2019-11-20T20:26:12.8811365Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/36243c78-bf99-498c-9df9-86d9f8d28608\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"36243c78-bf99-498c-9df9-86d9f8d28608\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Scheduler Job Collections Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Scheduler job collections, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Scheduler/jobcollections/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:42:24.8360756Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/188a0f2f-5c9e-469b-ae67-2aa5ce574b94\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"188a0f2f-5c9e-469b-ae67-2aa5ce574b94\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Search Service Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Search services, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Search/searchServices/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T20:42:21.8687229Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/7ca78c08-252a-4471-8644-bb5ff32d4ba0\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7ca78c08-252a-4471-8644-bb5ff32d4ba0\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Security Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Security Admin Role\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Authorization/policyAssignments/*\",\r\n \"Microsoft.Authorization/policyDefinitions/*\",\r\n \"Microsoft.Authorization/policySetDefinitions/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Management/managementGroups/read\",\r\n \"Microsoft.operationalInsights/workspaces/*/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Security/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-03T07:51:23.0917487Z\",\r\n \"updatedOn\": \"2019-03-12T21:12:48.635016Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fb1c8493-542b-48eb-b624-b4c8fea62acd\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Security Manager (Legacy)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"This is a legacy role. Please use Security Administrator instead\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ClassicCompute/*/read\",\r\n \"Microsoft.ClassicCompute/virtualMachines/*/write\",\r\n \"Microsoft.ClassicNetwork/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Security/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-22T17:45:15.8986455Z\",\r\n \"updatedOn\": \"2018-03-08T18:18:48.618362Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/e3d13bf0-dd5a-482e-ba6b-9b8433878d10\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e3d13bf0-dd5a-482e-ba6b-9b8433878d10\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Security Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Security Reader Role\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.operationalInsights/workspaces/*/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Security/*/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Management/managementGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-03T07:48:49.0516559Z\",\r\n \"updatedOn\": \"2018-06-28T17:27:23.106561Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/39bc4728-0917-49c7-9d2c-d95423bc2eb4\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"39bc4728-0917-49c7-9d2c-d95423bc2eb4\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Spatial Anchors Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage spatial anchors in your account, but not delete them\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/create/action\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/query/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-21T17:57:41.1420864Z\",\r\n \"updatedOn\": \"2019-02-13T06:13:39.8686435Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8bbe83f1-e2a6-4df7-8cb4-4e04d4e5c827\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8bbe83f1-e2a6-4df7-8cb4-4e04d4e5c827\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Site Recovery Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Site Recovery service except vault creation and role assignment\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.RecoveryServices/locations/allocatedStamp/read\",\r\n \"Microsoft.RecoveryServices/locations/allocateStamp/action\",\r\n \"Microsoft.RecoveryServices/Vaults/certificates/write\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/*\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/refreshContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationAlertSettings/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationEvents/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationJobs/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationPolicies/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/*\",\r\n \"Microsoft.RecoveryServices/Vaults/storageConfig/*\",\r\n \"Microsoft.RecoveryServices/Vaults/tokenInfo/read\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.RecoveryServices/Vaults/vaultTokens/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/*\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/notificationConfiguration/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationOperationStatus/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-19T13:46:17.4592776Z\",\r\n \"updatedOn\": \"2019-11-07T06:13:49.0760858Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/6670b86e-a3f7-4917-ac9b-5d6ab1be4567\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"6670b86e-a3f7-4917-ac9b-5d6ab1be4567\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Site Recovery Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you failover and failback but not perform other Site Recovery management operations\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.RecoveryServices/locations/allocatedStamp/read\",\r\n \"Microsoft.RecoveryServices/locations/allocateStamp/action\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/read\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/refreshContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationAlertSettings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationEvents/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/checkConsistency/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/reassociateGateway/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/renewcertificate/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/replicationNetworkMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectableItems/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/applyRecoveryPoint/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/failoverCommit/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/plannedFailover/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/recoveryPoints/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/repairReplication/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/reProtect/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/switchprotection/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/testFailover/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/testFailoverCleanup/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/unplannedFailover/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/updateMobilityService/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/refreshProvider/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/replicationStorageClassificationMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationvCenters/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationJobs/*\",\r\n \"Microsoft.RecoveryServices/vaults/replicationPolicies/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/failoverCommit/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/plannedFailover/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/reProtect/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/testFailover/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/testFailoverCleanup/action\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/unplannedFailover/action\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/*\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/notificationConfiguration/read\",\r\n \"Microsoft.RecoveryServices/Vaults/storageConfig/read\",\r\n \"Microsoft.RecoveryServices/Vaults/tokenInfo/read\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.RecoveryServices/Vaults/vaultTokens/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-19T13:47:50.1341148Z\",\r\n \"updatedOn\": \"2019-08-28T12:00:57.4472826Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": \"\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/494ae006-db33-4328-bf46-533a6560a3ca\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"494ae006-db33-4328-bf46-533a6560a3ca\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Spatial Anchors Account Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you locate and read properties of spatial anchors in your account\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/query/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-21T17:57:42.9271004Z\",\r\n \"updatedOn\": \"2019-02-13T06:16:15.3170663Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5d51204f-eb77-4b1c-b86a-2ec626c49413\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5d51204f-eb77-4b1c-b86a-2ec626c49413\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Site Recovery Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you view Site Recovery status but not perform other management operations\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.RecoveryServices/locations/allocatedStamp/read\",\r\n \"Microsoft.RecoveryServices/Vaults/extendedInformation/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringAlerts/read\",\r\n \"Microsoft.RecoveryServices/Vaults/monitoringConfigurations/notificationConfiguration/read\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/refreshContainers/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/registeredIdentities/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationAlertSettings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationEvents/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/replicationNetworkMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectableItems/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/recoveryPoints/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/replicationStorageClassificationMappings/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationFabrics/replicationvCenters/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationJobs/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationPolicies/read\",\r\n \"Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/read\",\r\n \"Microsoft.RecoveryServices/Vaults/storageConfig/read\",\r\n \"Microsoft.RecoveryServices/Vaults/tokenInfo/read\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.RecoveryServices/Vaults/vaultTokens/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-05-19T13:35:40.0093634Z\",\r\n \"updatedOn\": \"2017-05-26T19:54:51.393325Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/dbaa88c4-0c30-4179-9fb3-46319faa6149\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"dbaa88c4-0c30-4179-9fb3-46319faa6149\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Spatial Anchors Account Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage spatial anchors in your account, including deleting them\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/create/action\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/delete\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/query/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read\",\r\n \"Microsoft.MixedReality/SpatialAnchorsAccounts/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-21T17:57:43.5489832Z\",\r\n \"updatedOn\": \"2019-02-13T06:15:31.8572222Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/70bbe301-9835-447d-afdd-19eb3167307c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"70bbe301-9835-447d-afdd-19eb3167307c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SQL Managed Instance Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage SQL Managed Instances and required network configuration, but can’t give access to others.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Network/networkSecurityGroups/*\",\r\n \"Microsoft.Network/routeTables/*\",\r\n \"Microsoft.Sql/locations/*/read\",\r\n \"Microsoft.Sql/locations/instanceFailoverGroups/*\",\r\n \"Microsoft.Sql/managedInstances/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Network/virtualNetworks/subnets/*\",\r\n \"Microsoft.Network/virtualNetworks/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/metrics/read\",\r\n \"Microsoft.Insights/metricDefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-10T22:57:14.2937983Z\",\r\n \"updatedOn\": \"2020-06-24T22:56:31.0576055Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/4939a1f6-9ae0-4e48-a1e0-f2cbe897382d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4939a1f6-9ae0-4e48-a1e0-f2cbe897382d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SQL DB Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage SQL databases, but not access to them. Also, you can't manage their security-related policies or their parent SQL servers.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Sql/locations/*/read\",\r\n \"Microsoft.Sql/servers/databases/*\",\r\n \"Microsoft.Sql/servers/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Insights/metrics/read\",\r\n \"Microsoft.Insights/metricDefinitions/read\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Sql/managedInstances/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/managedInstances/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/databases/auditingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/auditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/auditRecords/read\",\r\n \"Microsoft.Sql/servers/databases/connectionPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/dataMaskingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/extendedAuditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/securityMetrics/*\",\r\n \"Microsoft.Sql/servers/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentScans/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentSettings/*\",\r\n \"Microsoft.Sql/servers/vulnerabilityAssessments/*\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-28T22:44:35.864967Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/9b7fa17d-e63e-47b0-bb0a-15c516ac86ec\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"9b7fa17d-e63e-47b0-bb0a-15c516ac86ec\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SQL Security Manager\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage the security-related policies of SQL servers and databases, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Sql/managedInstances/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/managedInstances/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/databases/transparentDataEncryption/*\",\r\n \"Microsoft.Sql/managedInstances/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/auditingPolicies/*\",\r\n \"Microsoft.Sql/servers/auditingSettings/*\",\r\n \"Microsoft.Sql/servers/extendedAuditingSettings/read\",\r\n \"Microsoft.Sql/servers/databases/auditingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/auditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/auditRecords/read\",\r\n \"Microsoft.Sql/servers/databases/connectionPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/dataMaskingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/extendedAuditingSettings/read\",\r\n \"Microsoft.Sql/servers/databases/read\",\r\n \"Microsoft.Sql/servers/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/schemas/read\",\r\n \"Microsoft.Sql/servers/databases/schemas/tables/columns/read\",\r\n \"Microsoft.Sql/servers/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/schemas/tables/read\",\r\n \"Microsoft.Sql/servers/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/securityMetrics/*\",\r\n \"Microsoft.Sql/servers/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/transparentDataEncryption/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentScans/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentSettings/*\",\r\n \"Microsoft.Sql/servers/firewallRules/*\",\r\n \"Microsoft.Sql/servers/read\",\r\n \"Microsoft.Sql/servers/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/servers/vulnerabilityAssessments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-16T18:44:40.4607572Z\",\r\n \"updatedOn\": \"2019-08-08T22:58:22.2532171Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": \"yaiyun\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"056cd41c-7e88-42e1-933e-88ba6a50c9c3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Account Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage storage accounts, including accessing storage account keys which provide full access to storage account data.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/diagnosticSettings/*\",\r\n \"Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Storage/storageAccounts/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-02T00:18:27.3542698Z\",\r\n \"updatedOn\": \"2019-05-29T20:56:33.9582501Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"17d1049b-9a84-46fb-8f53-869881c3d3ab\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SQL Server Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage SQL servers and databases, but not access to them, and not their security -related policies.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Sql/locations/*/read\",\r\n \"Microsoft.Sql/servers/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Insights/metrics/read\",\r\n \"Microsoft.Insights/metricDefinitions/read\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.Sql/managedInstances/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/managedInstances/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/managedInstances/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/managedInstances/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/auditingPolicies/*\",\r\n \"Microsoft.Sql/servers/auditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/auditingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/auditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/auditRecords/read\",\r\n \"Microsoft.Sql/servers/databases/connectionPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/currentSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/dataMaskingPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/extendedAuditingSettings/*\",\r\n \"Microsoft.Sql/servers/databases/recommendedSensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/schemas/tables/columns/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/servers/databases/securityMetrics/*\",\r\n \"Microsoft.Sql/servers/databases/sensitivityLabels/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessments/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentScans/*\",\r\n \"Microsoft.Sql/servers/databases/vulnerabilityAssessmentSettings/*\",\r\n \"Microsoft.Sql/servers/extendedAuditingSettings/*\",\r\n \"Microsoft.Sql/servers/securityAlertPolicies/*\",\r\n \"Microsoft.Sql/servers/vulnerabilityAssessments/*\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-28T22:44:36.5466043Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Account Key Operator Service Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Storage Account Key Operators are allowed to list and regenerate keys on Storage Accounts\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/listkeys/action\",\r\n \"Microsoft.Storage/storageAccounts/regeneratekey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-04-13T18:26:11.577057Z\",\r\n \"updatedOn\": \"2017-04-13T20:57:14.5990198Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/81a9662b-bebf-436f-a333-f67b29880f12\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"81a9662b-bebf-436f-a333-f67b29880f12\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Blob Data Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read, write and delete access to Azure Storage blob containers and data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/delete\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/write\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/move/action\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-21T00:01:24.7972312Z\",\r\n \"updatedOn\": \"2020-03-30T22:49:07.866942Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/ba92f5b4-2d11-453d-a403-e96b0029c9fe\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ba92f5b4-2d11-453d-a403-e96b0029c9fe\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Blob Data Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for full access to Azure Storage blob containers and data, including assigning POSIX access control.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/*\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-12-04T07:02:58.2775257Z\",\r\n \"updatedOn\": \"2019-07-16T21:30:33.7002563Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b7e6dc6d-f1e8-4753-8033-0f276bb0955b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b7e6dc6d-f1e8-4753-8033-0f276bb0955b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Blob Data Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read access to Azure Storage blob containers and data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/read\",\r\n \"Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-21T00:01:24.7972312Z\",\r\n \"updatedOn\": \"2019-07-15T22:01:25.5409721Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/2a2b9908-6ea1-4ae2-8e65-a410df84e7d1\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"2a2b9908-6ea1-4ae2-8e65-a410df84e7d1\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Queue Data Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read, write, and delete access to Azure Storage queues and queue messages\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/delete\",\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/read\",\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/delete\",\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/read\",\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/write\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-21T00:01:24.7972312Z\",\r\n \"updatedOn\": \"2019-03-05T21:58:02.7367128Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/974c5e8b-45b9-4653-ba55-5f855dd0fb88\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"974c5e8b-45b9-4653-ba55-5f855dd0fb88\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Queue Data Message Processor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for peek, receive, and delete access to Azure Storage queue messages\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/read\",\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/process/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-01-28T22:27:04.8947111Z\",\r\n \"updatedOn\": \"2019-03-05T22:05:46.1259125Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8a0f0c08-91a1-4084-bc3d-661d67233fed\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8a0f0c08-91a1-4084-bc3d-661d67233fed\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Queue Data Message Sender\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for sending of Azure Storage queue messages\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/add/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-01-28T22:28:34.7459724Z\",\r\n \"updatedOn\": \"2019-03-05T22:11:49.6383892Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/c6a89b2d-59bc-44d0-9896-0f6e12d7b80a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c6a89b2d-59bc-44d0-9896-0f6e12d7b80a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Queue Data Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read access to Azure Storage queues and queue messages\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/queueServices/queues/messages/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-12-21T00:01:24.7972312Z\",\r\n \"updatedOn\": \"2019-03-05T22:17:32.1779262Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/19e7f393-937e-4f77-808e-94535e297925\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"19e7f393-937e-4f77-808e-94535e297925\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Support Request Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you create and manage Support requests\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2017-06-22T22:25:37.8053068Z\",\r\n \"updatedOn\": \"2017-06-23T01:06:24.2399631Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/cfd33db0-3dd1-45e3-aa9d-cdbdf3b6f24e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"cfd33db0-3dd1-45e3-aa9d-cdbdf3b6f24e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Traffic Manager Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Traffic Manager profiles, but does not let you control who has access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/trafficManagerProfiles/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-10-15T23:33:25.9730842Z\",\r\n \"updatedOn\": \"2016-05-31T23:13:44.1458854Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/a4b10055-b0c7-44c2-b00f-c7b5b3550cf7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a4b10055-b0c7-44c2-b00f-c7b5b3550cf7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Virtual Machine Administrator Login\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"View Virtual Machines in the portal and login as administrator\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Network/publicIPAddresses/read\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/loadBalancers/read\",\r\n \"Microsoft.Network/networkInterfaces/read\",\r\n \"Microsoft.Compute/virtualMachines/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Compute/virtualMachines/login/action\",\r\n \"Microsoft.Compute/virtualMachines/loginAsAdmin/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-02-09T18:36:13.3315744Z\",\r\n \"updatedOn\": \"2018-05-09T22:17:57.0514548Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/1c0163c0-47e6-4577-8991-ea5c82e286e4\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"1c0163c0-47e6-4577-8991-ea5c82e286e4\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"User Access Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage user access to Azure resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Authorization/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:12.6807454Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/18d7d88d-d35e-4fb5-a5c3-7773c20a72d9\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"18d7d88d-d35e-4fb5-a5c3-7773c20a72d9\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Virtual Machine User Login\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"View Virtual Machines in the portal and login as a regular user.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Network/publicIPAddresses/read\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/loadBalancers/read\",\r\n \"Microsoft.Network/networkInterfaces/read\",\r\n \"Microsoft.Compute/virtualMachines/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Compute/virtualMachines/login/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2018-02-09T18:36:13.3315744Z\",\r\n \"updatedOn\": \"2018-05-09T22:18:52.2780979Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/fb879df8-f326-4884-b1cf-06f3ad86be52\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"fb879df8-f326-4884-b1cf-06f3ad86be52\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Virtual Machine Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage virtual machines, but not access to them, and not the virtual network or storage account they're connected to.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Compute/availabilitySets/*\",\r\n \"Microsoft.Compute/locations/*\",\r\n \"Microsoft.Compute/virtualMachines/*\",\r\n \"Microsoft.Compute/virtualMachineScaleSets/*\",\r\n \"Microsoft.Compute/disks/write\",\r\n \"Microsoft.Compute/disks/read\",\r\n \"Microsoft.Compute/disks/delete\",\r\n \"Microsoft.DevTestLab/schedules/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Network/applicationGateways/backendAddressPools/join/action\",\r\n \"Microsoft.Network/loadBalancers/backendAddressPools/join/action\",\r\n \"Microsoft.Network/loadBalancers/inboundNatPools/join/action\",\r\n \"Microsoft.Network/loadBalancers/inboundNatRules/join/action\",\r\n \"Microsoft.Network/loadBalancers/probes/join/action\",\r\n \"Microsoft.Network/loadBalancers/read\",\r\n \"Microsoft.Network/locations/*\",\r\n \"Microsoft.Network/networkInterfaces/*\",\r\n \"Microsoft.Network/networkSecurityGroups/join/action\",\r\n \"Microsoft.Network/networkSecurityGroups/read\",\r\n \"Microsoft.Network/publicIPAddresses/join/action\",\r\n \"Microsoft.Network/publicIPAddresses/read\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/virtualNetworks/subnets/join/action\",\r\n \"Microsoft.RecoveryServices/locations/*\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/*/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/write\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/read\",\r\n \"Microsoft.RecoveryServices/Vaults/backupPolicies/write\",\r\n \"Microsoft.RecoveryServices/Vaults/read\",\r\n \"Microsoft.RecoveryServices/Vaults/usages/read\",\r\n \"Microsoft.RecoveryServices/Vaults/write\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.SqlVirtualMachine/*\",\r\n \"Microsoft.Storage/storageAccounts/listKeys/action\",\r\n \"Microsoft.Storage/storageAccounts/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-06-02T00:18:27.3542698Z\",\r\n \"updatedOn\": \"2020-02-03T19:38:21.2170228Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Web Plan Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage the web plans for websites, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Web/serverFarms/*\",\r\n \"Microsoft.Web/hostingEnvironments/Join/Action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-02-02T21:55:09.8806423Z\",\r\n \"updatedOn\": \"2019-03-26T18:17:34.5018645Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/2cc479cb-7b4d-49a8-b449-8c00fd0f0a4b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"2cc479cb-7b4d-49a8-b449-8c00fd0f0a4b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Website Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage websites (not web plans), but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Insights/components/*\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Web/certificates/*\",\r\n \"Microsoft.Web/listSitesAssignedToHostName/read\",\r\n \"Microsoft.Web/serverFarms/join/action\",\r\n \"Microsoft.Web/serverFarms/read\",\r\n \"Microsoft.Web/sites/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2015-05-12T23:10:23.6193952Z\",\r\n \"updatedOn\": \"2019-02-05T21:24:46.9407288Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/de139f84-1756-47ae-9be6-808fbbe84772\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"de139f84-1756-47ae-9be6-808fbbe84772\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Service Bus Data Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for full access to Azure Service Bus resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ServiceBus/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ServiceBus/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-16T21:33:36.7445745Z\",\r\n \"updatedOn\": \"2019-08-21T22:47:11.3982905Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/090c5cfd-751d-490a-894a-3ce6f1109419\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"090c5cfd-751d-490a-894a-3ce6f1109419\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Event Hubs Data Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for full access to Azure Event Hubs resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.EventHub/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.EventHub/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-16T21:34:29.8656362Z\",\r\n \"updatedOn\": \"2019-08-21T22:58:57.7584645Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/f526a384-b230-433a-b45c-95f59c4a2dec\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f526a384-b230-433a-b45c-95f59c4a2dec\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Attestation Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read write or delete the attestation provider instance\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Attestation/attestationProviders/attestation/read\",\r\n \"Microsoft.Attestation/attestationProviders/attestation/write\",\r\n \"Microsoft.Attestation/attestationProviders/attestation/delete\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-19T00:24:09.3354177Z\",\r\n \"updatedOn\": \"2019-05-10T17:59:06.3448436Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/bbf86eb8-f7b4-4cce-96e4-18cddf81d86e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"bbf86eb8-f7b4-4cce-96e4-18cddf81d86e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"HDInsight Cluster Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you read and modify HDInsight cluster configurations.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.HDInsight/*/read\",\r\n \"Microsoft.HDInsight/clusters/getGatewaySettings/action\",\r\n \"Microsoft.HDInsight/clusters/updateGatewaySettings/action\",\r\n \"Microsoft.HDInsight/clusters/configurations/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/operations/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-20T00:03:01.7110732Z\",\r\n \"updatedOn\": \"2019-04-28T02:34:17.4679314Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/61ed4efc-fab3-44fd-b111-e24485cc132a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"61ed4efc-fab3-44fd-b111-e24485cc132a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cosmos DB Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage Azure Cosmos DB accounts, but not access data in them. Prevents access to account keys and connection strings.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.DocumentDb/databaseAccounts/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.ResourceHealth/availabilityStatuses/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action\"\r\n ],\r\n \"notActions\": [\r\n \"Microsoft.DocumentDB/databaseAccounts/readonlyKeys/*\",\r\n \"Microsoft.DocumentDB/databaseAccounts/regenerateKey/*\",\r\n \"Microsoft.DocumentDB/databaseAccounts/listKeys/*\",\r\n \"Microsoft.DocumentDB/databaseAccounts/listConnectionStrings/*\"\r\n ],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-26T17:01:17.0169383Z\",\r\n \"updatedOn\": \"2019-11-21T01:34:13.3746345Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/230815da-be43-4aae-9cb4-875f7bd000aa\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"230815da-be43-4aae-9cb4-875f7bd000aa\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Hybrid Server Resource Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read, write, delete, and re-onboard Hybrid servers to the Hybrid Resource Provider.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.HybridCompute/machines/*\",\r\n \"Microsoft.HybridCompute/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-29T21:39:32.3132923Z\",\r\n \"updatedOn\": \"2019-05-06T20:08:25.3180258Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/48b40c6e-82e0-4eb3-90d5-19e40f49b624\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"48b40c6e-82e0-4eb3-90d5-19e40f49b624\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Hybrid Server Onboarding\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can onboard new Hybrid servers to the Hybrid Resource Provider.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.HybridCompute/machines/read\",\r\n \"Microsoft.HybridCompute/machines/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-04-29T22:36:28.1873756Z\",\r\n \"updatedOn\": \"2019-05-06T20:09:17.9364269Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5d1e5ee4-7c68-4a71-ac8b-0739630a3dfb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5d1e5ee4-7c68-4a71-ac8b-0739630a3dfb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Event Hubs Data Receiver\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows receive access to Azure Event Hubs resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.EventHub/*/eventhubs/consumergroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.EventHub/*/receive/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-05-10T06:25:21.1056666Z\",\r\n \"updatedOn\": \"2019-08-21T23:00:32.6225396Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/a638d3c7-ab3a-418d-83e6-5f17a39d4fde\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a638d3c7-ab3a-418d-83e6-5f17a39d4fde\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Event Hubs Data Sender\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows send access to Azure Event Hubs resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.EventHub/*/eventhubs/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.EventHub/*/send/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-05-10T06:26:12.4673714Z\",\r\n \"updatedOn\": \"2019-08-21T23:02:26.6155679Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/2b629674-e913-4c01-ae53-ef4638d8f975\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"2b629674-e913-4c01-ae53-ef4638d8f975\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Service Bus Data Receiver\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for receive access to Azure Service Bus resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ServiceBus/*/queues/read\",\r\n \"Microsoft.ServiceBus/*/topics/read\",\r\n \"Microsoft.ServiceBus/*/topics/subscriptions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ServiceBus/*/receive/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-05-10T06:43:01.6343849Z\",\r\n \"updatedOn\": \"2019-08-21T22:55:24.3423558Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/4f6d3b9b-027b-4f4c-9142-0e5a2a2247e0\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4f6d3b9b-027b-4f4c-9142-0e5a2a2247e0\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Service Bus Data Sender\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for send access to Azure Service Bus resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ServiceBus/*/queues/read\",\r\n \"Microsoft.ServiceBus/*/topics/read\",\r\n \"Microsoft.ServiceBus/*/topics/subscriptions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ServiceBus/*/send/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-05-10T06:43:46.7046934Z\",\r\n \"updatedOn\": \"2019-08-21T22:57:12.2555683Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/69a216fc-b8fb-44d8-bc22-1f3c2cd27a39\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"69a216fc-b8fb-44d8-bc22-1f3c2cd27a39\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage File Data SMB Share Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read access to Azure File Share over SMB\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-07-01T20:19:31.8620471Z\",\r\n \"updatedOn\": \"2019-08-07T01:00:41.9223409Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/aba4ae5f-2193-4029-9191-0cb91df5e314\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"aba4ae5f-2193-4029-9191-0cb91df5e314\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage File Data SMB Share Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read, write, and delete access in Azure Storage file shares over SMB\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read\",\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/write\",\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/delete\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-07-01T20:54:35.483431Z\",\r\n \"updatedOn\": \"2019-08-07T01:05:24.4309872Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/0c867c2a-1d8c-454a-a3db-ab2ea1bdc8bb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0c867c2a-1d8c-454a-a3db-ab2ea1bdc8bb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Private DNS Zone Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage private DNS zone resources, but not the virtual networks they are linked to.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Network/privateDnsZones/*\",\r\n \"Microsoft.Network/privateDnsOperationResults/*\",\r\n \"Microsoft.Network/privateDnsOperationStatuses/*\",\r\n \"Microsoft.Network/virtualNetworks/read\",\r\n \"Microsoft.Network/virtualNetworks/join/action\",\r\n \"Microsoft.Authorization/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-07-10T19:31:15.5645518Z\",\r\n \"updatedOn\": \"2019-07-11T21:12:01.7260648Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b12aa53e-6015-4669-85d0-8515ebb3ae7f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b12aa53e-6015-4669-85d0-8515ebb3ae7f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage Blob Delegator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for generation of a user delegation key which can be used to sign SAS tokens\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-07-23T00:51:16.3376761Z\",\r\n \"updatedOn\": \"2019-07-23T01:14:31.8778475Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/db58b8e5-c6ad-4a2a-8342-4190687cbf4a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"db58b8e5-c6ad-4a2a-8342-4190687cbf4a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Desktop Virtualization User\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows user to use the applications in an application group.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.DesktopVirtualization/applicationGroups/useApplications/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-07T00:29:03.8727621Z\",\r\n \"updatedOn\": \"2019-08-07T00:29:03.8727621Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/1d18fff3-a72a-46b5-b4a9-0b38a3cd7e63\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"1d18fff3-a72a-46b5-b4a9-0b38a3cd7e63\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Storage File Data SMB Share Elevated Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for read, write, delete and modify NTFS permission access in Azure Storage file shares over SMB\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read\",\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/write\",\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/delete\",\r\n \"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/modifypermissions/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-07T01:35:36.9935457Z\",\r\n \"updatedOn\": \"2019-08-07T01:35:36.9935457Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/a7264617-510b-434b-a828-9731dc254ea7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a7264617-510b-434b-a828-9731dc254ea7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Blueprint Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can manage blueprint definitions, but not assign them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Blueprint/blueprints/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-14T21:55:16.9683949Z\",\r\n \"updatedOn\": \"2019-08-17T00:10:55.7494677Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/41077137-e803-4205-871c-5a86e6a753b4\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"41077137-e803-4205-871c-5a86e6a753b4\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Blueprint Operator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can assign existing published blueprints, but cannot create new blueprints. NOTE: this only works if the assignment is done with a user-assigned managed identity.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Blueprint/blueprintAssignments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-14T21:56:48.7897875Z\",\r\n \"updatedOn\": \"2019-08-17T00:06:02.6509737Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/437d2ced-4a38-4302-8479-ed2bcb43d090\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"437d2ced-4a38-4302-8479-ed2bcb43d090\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Sentinel Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Azure Sentinel Contributor\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.SecurityInsights/*\",\r\n \"Microsoft.OperationalInsights/workspaces/analytics/query/action\",\r\n \"Microsoft.OperationalInsights/workspaces/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/savedSearches/*\",\r\n \"Microsoft.OperationsManagement/solutions/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/dataSources/read\",\r\n \"Microsoft.Insights/workbooks/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-28T16:39:03.8725173Z\",\r\n \"updatedOn\": \"2020-03-11T15:20:51.6768533Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/ab8e14d6-4a74-4a29-9ba8-549422addade\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ab8e14d6-4a74-4a29-9ba8-549422addade\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Sentinel Responder\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Azure Sentinel Responder\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.SecurityInsights/*/read\",\r\n \"Microsoft.SecurityInsights/dataConnectorsCheckRequirements/action\",\r\n \"Microsoft.SecurityInsights/cases/*\",\r\n \"Microsoft.SecurityInsights/incidents/*\",\r\n \"Microsoft.OperationalInsights/workspaces/analytics/query/action\",\r\n \"Microsoft.OperationalInsights/workspaces/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/dataSources/read\",\r\n \"Microsoft.OperationalInsights/workspaces/savedSearches/read\",\r\n \"Microsoft.OperationsManagement/solutions/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/dataSources/read\",\r\n \"Microsoft.Insights/workbooks/read\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-28T16:54:07.6467264Z\",\r\n \"updatedOn\": \"2020-04-02T08:42:10.2864085Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/3e150937-b8fe-4cfb-8069-0eaf05ecd056\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3e150937-b8fe-4cfb-8069-0eaf05ecd056\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Sentinel Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Azure Sentinel Reader\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.SecurityInsights/*/read\",\r\n \"Microsoft.SecurityInsights/dataConnectorsCheckRequirements/action\",\r\n \"Microsoft.OperationalInsights/workspaces/analytics/query/action\",\r\n \"Microsoft.OperationalInsights/workspaces/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/LinkedServices/read\",\r\n \"Microsoft.OperationalInsights/workspaces/savedSearches/read\",\r\n \"Microsoft.OperationsManagement/solutions/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/read\",\r\n \"Microsoft.OperationalInsights/workspaces/query/*/read\",\r\n \"Microsoft.OperationalInsights/workspaces/dataSources/read\",\r\n \"Microsoft.Insights/workbooks/read\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-28T16:58:50.1132117Z\",\r\n \"updatedOn\": \"2020-04-02T08:34:51.7222706Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8d289c81-5878-46d4-8554-54e1e3d8b5cb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8d289c81-5878-46d4-8554-54e1e3d8b5cb\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Workbook Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read workbooks.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"microsoft.insights/workbooks/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-28T20:56:17.680814Z\",\r\n \"updatedOn\": \"2019-08-28T21:43:05.0202124Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b279062a-9be3-42a0-92ae-8b3cf002ec4d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b279062a-9be3-42a0-92ae-8b3cf002ec4d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Workbook Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can save shared workbooks.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Insights/workbooks/write\",\r\n \"Microsoft.Insights/workbooks/delete\",\r\n \"Microsoft.Insights/workbooks/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-08-28T20:59:42.4820277Z\",\r\n \"updatedOn\": \"2020-01-22T00:05:20.938721Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/e8ddcd69-c73f-4f9f-9844-4100522f16ad\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e8ddcd69-c73f-4f9f-9844-4100522f16ad\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Policy Insights Data Writer (Preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows read access to resource policies and write access to resource component policy events.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/policyassignments/read\",\r\n \"Microsoft.Authorization/policydefinitions/read\",\r\n \"Microsoft.Authorization/policysetdefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.PolicyInsights/checkDataPolicyCompliance/action\",\r\n \"Microsoft.PolicyInsights/policyEvents/logDataEvents/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-09-19T19:35:20.9504127Z\",\r\n \"updatedOn\": \"2019-09-19T19:37:02.5331596Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/66bb4e9e-b016-4a94-8249-4c0511c2be84\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"66bb4e9e-b016-4a94-8249-4c0511c2be84\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SignalR AccessKey Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read SignalR Service Access Keys\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.SignalRService/*/read\",\r\n \"Microsoft.SignalRService/SignalR/listkeys/action\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-09-20T09:33:19.6236874Z\",\r\n \"updatedOn\": \"2019-09-20T09:33:19.6236874Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/04165923-9d83-45d5-8227-78b77b0a687e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"04165923-9d83-45d5-8227-78b77b0a687e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"SignalR Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Create, Read, Update, and Delete SignalR service resources\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.SignalRService/*\",\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-09-20T09:58:09.0009662Z\",\r\n \"updatedOn\": \"2019-09-20T09:58:09.0009662Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Connected Machine Onboarding\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can onboard Azure Connected Machines.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.HybridCompute/machines/read\",\r\n \"Microsoft.HybridCompute/machines/write\",\r\n \"Microsoft.GuestConfiguration/guestConfigurationAssignments/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-10-23T20:15:07.137287Z\",\r\n \"updatedOn\": \"2019-11-03T18:26:59.2060282Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b64e21ea-ac4e-4cdf-9dc9-5b892992bee7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b64e21ea-ac4e-4cdf-9dc9-5b892992bee7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Connected Machine Resource Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read, write, delete and re-onboard Azure Connected Machines.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.HybridCompute/machines/read\",\r\n \"Microsoft.HybridCompute/machines/write\",\r\n \"Microsoft.HybridCompute/machines/delete\",\r\n \"Microsoft.HybridCompute/machines/reconnect/action\",\r\n \"Microsoft.HybridCompute/machines/extensions/write\",\r\n \"Microsoft.HybridCompute/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-10-23T20:24:59.1474607Z\",\r\n \"updatedOn\": \"2020-03-19T22:39:54.1226122Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/cd570a14-e51a-42ad-bac8-bafd67325302\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"cd570a14-e51a-42ad-bac8-bafd67325302\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Services Registration assignment Delete Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Managed Services Registration Assignment Delete Role allows the managing tenant users to delete the registration assignment assigned to their tenant.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ManagedServices/registrationAssignments/read\",\r\n \"Microsoft.ManagedServices/registrationAssignments/delete\",\r\n \"Microsoft.ManagedServices/operationStatuses/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-10-23T22:33:33.1183469Z\",\r\n \"updatedOn\": \"2019-10-24T21:49:09.3875276Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/91c1777a-f3dc-4fae-b103-61d183457e46\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"91c1777a-f3dc-4fae-b103-61d183457e46\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"App Configuration Data Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows full access to App Configuration data.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.AppConfiguration/configurationStores/*/read\",\r\n \"Microsoft.AppConfiguration/configurationStores/*/write\",\r\n \"Microsoft.AppConfiguration/configurationStores/*/delete\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-10-25T18:41:40.1185063Z\",\r\n \"updatedOn\": \"2019-10-25T18:41:40.1185063Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5ae67dd6-50cb-40e7-96ff-dc2bfa4b606b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5ae67dd6-50cb-40e7-96ff-dc2bfa4b606b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"App Configuration Data Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows read access to App Configuration data.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.AppConfiguration/configurationStores/*/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-10-25T18:45:33.7975332Z\",\r\n \"updatedOn\": \"2019-10-25T18:45:33.7975332Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/516239f1-63e1-4d78-a4de-a74fb236a071\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"516239f1-63e1-4d78-a4de-a74fb236a071\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Kubernetes Cluster - Azure Arc Onboarding\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Role definition to authorize any user/service to create connectedClusters resource\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Kubernetes/connectedClusters/Write\",\r\n \"Microsoft.Kubernetes/connectedClusters/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-11-18T17:00:02.2087147Z\",\r\n \"updatedOn\": \"2020-02-10T22:40:48.3317559Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/34e09817-6cbe-4d01-b1a2-e0eac5743d41\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"34e09817-6cbe-4d01-b1a2-e0eac5743d41\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Experimentation Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Experimentation Contributor\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/read\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/experiment/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/emergencystop/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/read\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/write\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/delete\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-12-13T00:08:08.6679591Z\",\r\n \"updatedOn\": \"2020-07-07T20:17:06.8223079Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/7f646f1b-fa08-80eb-a22b-edd6ce5c915c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7f646f1b-fa08-80eb-a22b-edd6ce5c915c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services QnA Maker Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Let’s you read and test a KB only.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\",\r\n \"Microsoft.Authorization/roleAssignments/read\",\r\n \"Microsoft.Authorization/roleDefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-12-17T18:26:12.3329439Z\",\r\n \"updatedOn\": \"2020-05-08T12:03:46.9266538Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/466ccd10-b268-4a11-b098-b4849f024126\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"466ccd10-b268-4a11-b098-b4849f024126\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services QnA Maker Editor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Let’s you create, edit, import and export a KB. You cannot publish or delete a KB.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\",\r\n \"Microsoft.Authorization/roleAssignments/read\",\r\n \"Microsoft.Authorization/roleDefinitions/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/create/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/train/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/alterations/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/refreshkeys/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker/operations/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/create/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/train/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/refreshkeys/action\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/write\",\r\n \"Microsoft.CognitiveServices/accounts/QnAMaker.v2/operations/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-12-17T18:27:30.6434556Z\",\r\n \"updatedOn\": \"2020-05-08T12:02:34.0065552Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/f4cc2bf9-21be-47a1-bdf1-5c5804381025\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"f4cc2bf9-21be-47a1-bdf1-5c5804381025\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Experimentation Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Experimentation Administrator\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/admin/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/read\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/write\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/delete\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/experimentadmin/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/experiment/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/emergencystop/action\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/read\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/write\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/delete\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/admin/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2019-12-18T22:46:33.1116612Z\",\r\n \"updatedOn\": \"2020-04-22T20:10:20.1216929Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/7f646f1b-fa08-80eb-a33b-edd6ce5c915c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7f646f1b-fa08-80eb-a33b-edd6ce5c915c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Remote Rendering Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Provides user with conversion, manage session, rendering and diagnostics capabilities for Azure Remote Rendering\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/convert/action\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/convert/read\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/convert/delete\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/read\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/action\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/delete\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/render/read\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/diagnostic/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-01-23T18:15:31.3450348Z\",\r\n \"updatedOn\": \"2020-01-23T18:15:31.3450348Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/3df8b902-2a6f-47c7-8cc5-360e9b272a7e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3df8b902-2a6f-47c7-8cc5-360e9b272a7e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Remote Rendering Client\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Provides user with manage session, rendering and diagnostics capabilities for Azure Remote Rendering.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/read\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/action\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/delete\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/render/read\",\r\n \"Microsoft.MixedReality/RemoteRenderingAccounts/diagnostic/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-01-23T18:32:52.7069824Z\",\r\n \"updatedOn\": \"2020-01-23T18:32:52.7069824Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/d39065c4-c120-43c9-ab0a-63eed9795f0a\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"d39065c4-c120-43c9-ab0a-63eed9795f0a\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Managed Application Contributor Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows for creating managed application resources.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"*/read\",\r\n \"Microsoft.Solutions/applications/*\",\r\n \"Microsoft.Solutions/register/action\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/*\",\r\n \"Microsoft.Resources/deployments/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-08T03:39:11.8933879Z\",\r\n \"updatedOn\": \"2020-03-23T02:12:30.0853051Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/641177b8-a67a-45b9-a033-47bc880bb21e\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"641177b8-a67a-45b9-a033-47bc880bb21e\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Security Assessment Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you push assessments to Security Center\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Security/assessments/write\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-13T08:23:47.7656161Z\",\r\n \"updatedOn\": \"2020-02-13T08:23:47.7656161Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/612c2aa1-cb24-443b-ac28-3ab7272de6f5\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"612c2aa1-cb24-443b-ac28-3ab7272de6f5\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Tag Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage tags on entities, without providing access to the entities themselves.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/resources/read\",\r\n \"Microsoft.Resources/subscriptions/resources/read\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Resources/tags/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-18T23:19:19.2977644Z\",\r\n \"updatedOn\": \"2020-02-19T00:04:58.9214962Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/4a9ae827-6dc8-4573-8ac7-8239d42aa03f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4a9ae827-6dc8-4573-8ac7-8239d42aa03f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Integration Service Environment Developer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows developers to create and update workflows, integration accounts and API connections in integration service environments.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Logic/integrationServiceEnvironments/read\",\r\n \"Microsoft.Logic/integrationServiceEnvironments/join/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-20T21:09:00.5627875Z\",\r\n \"updatedOn\": \"2020-02-20T21:36:24.619073Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/c7aa55d3-1abb-444a-a5ca-5e51e485d6ec\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c7aa55d3-1abb-444a-a5ca-5e51e485d6ec\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Integration Service Environment Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage integration service environments, but not access to them.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.Logic/integrationServiceEnvironments/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-20T21:10:44.4008319Z\",\r\n \"updatedOn\": \"2020-02-20T21:41:56.7983599Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/a41e2c5b-bd99-4a07-88f4-9bf657a760b8\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a41e2c5b-bd99-4a07-88f4-9bf657a760b8\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Marketplace Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Administrator of marketplace resource provider\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Marketplace/privateStores/write\",\r\n \"Microsoft.Marketplace/privateStores/action\",\r\n \"Microsoft.Marketplace/privateStores/delete\",\r\n \"Microsoft.Marketplace/privateStores/offers/write\",\r\n \"Microsoft.Marketplace/privateStores/offers/action\",\r\n \"Microsoft.Marketplace/privateStores/offers/delete\",\r\n \"Microsoft.Authorization/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-26T14:19:50.9681015Z\",\r\n \"updatedOn\": \"2020-06-23T05:54:42.8370671Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/dd920d6d-f481-47f1-b461-f338c46b2d9f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"dd920d6d-f481-47f1-b461-f338c46b2d9f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service Contributor Role\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Grants access to read and write Azure Kubernetes Service clusters\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.ContainerService/managedClusters/read\",\r\n \"Microsoft.ContainerService/managedClusters/write\",\r\n \"Microsoft.Resources/deployments/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-02-27T19:27:15.073997Z\",\r\n \"updatedOn\": \"2020-02-28T02:34:14.5162305Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/ed7f3fbd-7b88-4dd4-9017-9adb7ce333f8\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"ed7f3fbd-7b88-4dd4-9017-9adb7ce333f8\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Digital Twins Reader (Preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read-only role for Digital Twins data-plane properties\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.DigitalTwins/digitaltwins/read\",\r\n \"Microsoft.DigitalTwins/digitaltwins/relationships/read\",\r\n \"Microsoft.DigitalTwins/eventroutes/read\",\r\n \"Microsoft.DigitalTwins/models/read\",\r\n \"Microsoft.DigitalTwins/query/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-10T23:48:14.7057381Z\",\r\n \"updatedOn\": \"2020-07-01T17:50:50.2393244Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/d57506d4-4c8d-48b1-8587-93c323f6a5a3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"d57506d4-4c8d-48b1-8587-93c323f6a5a3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Digital Twins Owner (Preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Full access role for Digital Twins data-plane\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.DigitalTwins/eventroutes/*\",\r\n \"Microsoft.DigitalTwins/digitaltwins/*\",\r\n \"Microsoft.DigitalTwins/digitaltwins/commands/*\",\r\n \"Microsoft.DigitalTwins/digitaltwins/relationships/*\",\r\n \"Microsoft.DigitalTwins/models/*\",\r\n \"Microsoft.DigitalTwins/query/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-10T23:49:33.782193Z\",\r\n \"updatedOn\": \"2020-03-10T23:49:33.782193Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/bcd981a7-7f74-457b-83e1-cceb9e632ffe\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"bcd981a7-7f74-457b-83e1-cceb9e632ffe\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Hierarchy Settings Administrator\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Allows users to edit and delete Hierarchy Settings\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Management/managementGroups/settings/write\",\r\n \"Microsoft.Management/managementGroups/settings/delete\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-13T23:55:11.0212387Z\",\r\n \"updatedOn\": \"2020-03-13T23:58:46.9249866Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/350f8d15-c687-4448-8ae1-157740a3936d\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"350f8d15-c687-4448-8ae1-157740a3936d\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"FHIR Data Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Role allows user or principal full access to FHIR Data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.HealthcareApis/services/fhir/resources/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-17T18:35:04.4949547Z\",\r\n \"updatedOn\": \"2020-03-17T18:35:04.4949547Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5a1fc7df-4bf1-4951-a576-89034ee01acd\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5a1fc7df-4bf1-4951-a576-89034ee01acd\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"FHIR Data Exporter\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Role allows user or principal to read and export FHIR Data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.HealthcareApis/services/fhir/resources/read\",\r\n \"Microsoft.HealthcareApis/services/fhir/resources/export/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-17T18:45:01.9764073Z\",\r\n \"updatedOn\": \"2020-03-19T20:29:56.9958536Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/3db33094-8700-4567-8da5-1501d4e7e843\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3db33094-8700-4567-8da5-1501d4e7e843\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"FHIR Data Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Role allows user or principal to read FHIR Data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.HealthcareApis/services/fhir/resources/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-17T18:49:04.8353499Z\",\r\n \"updatedOn\": \"2020-03-17T18:49:04.8353499Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/4c8d0bbc-75d3-4935-991f-5f3c56d81508\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4c8d0bbc-75d3-4935-991f-5f3c56d81508\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"FHIR Data Writer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Role allows user or principal to read and write FHIR Data\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.HealthcareApis/services/fhir/resources/*\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.HealthcareApis/services/fhir/resources/hardDelete/action\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-17T18:55:35.2413335Z\",\r\n \"updatedOn\": \"2020-03-17T18:55:35.2413335Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/3f88fce4-5892-4214-ae73-ba5294559913\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3f88fce4-5892-4214-ae73-ba5294559913\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Experimentation Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Experimentation Reader\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Experimentation/experimentWorkspaces/read\",\r\n \"Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-03-25T18:05:14.8375678Z\",\r\n \"updatedOn\": \"2020-04-22T21:20:46.2737555Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/49632ef5-d9ac-41f4-b8e7-bbe587fa74a1\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"49632ef5-d9ac-41f4-b8e7-bbe587fa74a1\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Object Understanding Account Owner\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Provides user with ingestion capabilities for Azure Object Understanding.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.MixedReality/ObjectUnderstandingAccounts/ingest/action\",\r\n \"Microsoft.MixedReality/ObjectUnderstandingAccounts/ingest/read\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-04-22T19:15:09.0697923Z\",\r\n \"updatedOn\": \"2020-04-22T19:15:09.0697923Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/4dd61c23-6743-42fe-a388-d8bdd41cb745\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4dd61c23-6743-42fe-a388-d8bdd41cb745\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Maps Data Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Grants access to read, write, and delete access to map related data from an Azure maps account.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Maps/accounts/*/read\",\r\n \"Microsoft.Maps/accounts/*/write\",\r\n \"Microsoft.Maps/accounts/*/delete\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-07T20:55:05.064541Z\",\r\n \"updatedOn\": \"2020-05-07T20:55:05.064541Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8f5e0ce6-4f7b-4dcf-bddf-e6f48634a204\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8f5e0ce6-4f7b-4dcf-bddf-e6f48634a204\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Custom Vision Contributor\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Full access to the project, including the ability to view, create, edit, or delete projects.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-08T23:47:07.0779345Z\",\r\n \"updatedOn\": \"2020-05-08T23:47:07.0779345Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/c1ff6cc2-c111-46fe-8896-e0ef812ad9f3\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"c1ff6cc2-c111-46fe-8896-e0ef812ad9f3\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Custom Vision Deployment\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Publish, unpublish or export models. Deployment can view the project but can’t update.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/*/read\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/publish/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/export/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/quicktest/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/classify/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/detect/*\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-09T01:31:05.952862Z\",\r\n \"updatedOn\": \"2020-05-09T01:31:05.952862Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5c4089e1-6d96-4d2f-b296-c1bc7137275f\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5c4089e1-6d96-4d2f-b296-c1bc7137275f\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Custom Vision Labeler\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"View, edit training images and create, add, remove, or delete the image tags. Labelers can view the project but can’t update anything other than training images and tags.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/*/read\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/images/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/tags/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/images/suggested/*\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/tagsandregions/suggestions/action\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-09T01:33:20.8278896Z\",\r\n \"updatedOn\": \"2020-05-09T01:33:20.8278896Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/88424f51-ebe7-446f-bc41-7fa16989e96c\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"88424f51-ebe7-446f-bc41-7fa16989e96c\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Custom Vision Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Read-only actions in the project. Readers can’t create or update the project.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/*/read\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-09T01:34:18.5328818Z\",\r\n \"updatedOn\": \"2020-05-09T01:34:18.5328818Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/93586559-c37d-4a6b-ba08-b9f0940c2d73\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"93586559-c37d-4a6b-ba08-b9f0940c2d73\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Cognitive Services Custom Vision Trainer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"View, edit projects and train the models, including the ability to publish, unpublish, export the models. Trainers can’t create or delete the project.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.CognitiveServices/*/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/*\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/action\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/delete\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/import/action\",\r\n \"Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-09T01:35:13.8147804Z\",\r\n \"updatedOn\": \"2020-05-09T01:35:13.8147804Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/0a5ae4ab-0d65-4eeb-be61-29fc9b54394b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"0a5ae4ab-0d65-4eeb-be61-29fc9b54394b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Administrator (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can perform any action on certificates, keys and secrets of a key vault, except manage permissions.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.KeyVault/checkNameAvailability/read\",\r\n \"Microsoft.KeyVault/deletedVaults/read\",\r\n \"Microsoft.KeyVault/locations/*/read\",\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:46.2349235Z\",\r\n \"updatedOn\": \"2020-05-20T19:40:18.9511304Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/00482a5a-887f-4fb3-b363-3b7fe8e74483\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"00482a5a-887f-4fb3-b363-3b7fe8e74483\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Crypto Officer (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can perform any action on the keys of a key vault, except manage permissions.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.KeyVault/checkNameAvailability/read\",\r\n \"Microsoft.KeyVault/deletedVaults/read\",\r\n \"Microsoft.KeyVault/locations/*/read\",\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/keys/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.0099249Z\",\r\n \"updatedOn\": \"2020-05-20T19:44:51.5886988Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/14b46e9e-c2b7-41b4-b07b-48a6ebf60603\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"14b46e9e-c2b7-41b4-b07b-48a6ebf60603\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Crypto User (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can perform cryptographic operations on keys and certificates.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/keys/read\",\r\n \"Microsoft.KeyVault/vaults/keys/update/action\",\r\n \"Microsoft.KeyVault/vaults/keys/backup/action\",\r\n \"Microsoft.KeyVault/vaults/keys/encrypt/action\",\r\n \"Microsoft.KeyVault/vaults/keys/decrypt/action\",\r\n \"Microsoft.KeyVault/vaults/keys/wrap/action\",\r\n \"Microsoft.KeyVault/vaults/keys/unwrap/action\",\r\n \"Microsoft.KeyVault/vaults/keys/sign/action\",\r\n \"Microsoft.KeyVault/vaults/keys/verify/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.0699268Z\",\r\n \"updatedOn\": \"2020-05-20T19:48:54.8672037Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/12338af0-0e69-4776-bea7-57ae8d297424\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"12338af0-0e69-4776-bea7-57ae8d297424\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Secrets Officer (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can perform any action on the secrets of a key vault, except manage permissions.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.KeyVault/checkNameAvailability/read\",\r\n \"Microsoft.KeyVault/deletedVaults/read\",\r\n \"Microsoft.KeyVault/locations/*/read\",\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/secrets/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.1449242Z\",\r\n \"updatedOn\": \"2020-05-20T19:51:40.033812Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b86a8fe4-44ce-4948-aee5-eccb2c155cd7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b86a8fe4-44ce-4948-aee5-eccb2c155cd7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Secrets User (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read secret contents.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/secrets/getSecret/action\",\r\n \"Microsoft.KeyVault/vaults/secrets/readMetadata/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.2049241Z\",\r\n \"updatedOn\": \"2020-05-20T19:53:53.9617292Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/4633458b-17de-408a-b874-0445c86b69e6\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"4633458b-17de-408a-b874-0445c86b69e6\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Certificates Officer (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can perform any action on the certificates of a key vault, except manage permissions.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.KeyVault/checkNameAvailability/read\",\r\n \"Microsoft.KeyVault/deletedVaults/read\",\r\n \"Microsoft.KeyVault/locations/*/read\",\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/certificatecas/*\",\r\n \"Microsoft.KeyVault/vaults/certificates/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.2499247Z\",\r\n \"updatedOn\": \"2020-05-20T19:56:22.0363761Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/a4417e6f-fecd-4de8-b567-7b0420556985\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a4417e6f-fecd-4de8-b567-7b0420556985\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Reader (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read metadata of key vaults and its certificates, keys and secrets. Cannot read sensitive values such as secret contents or key material.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/*\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.KeyVault/checkNameAvailability/read\",\r\n \"Microsoft.KeyVault/deletedVaults/read\",\r\n \"Microsoft.KeyVault/locations/*/read\",\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/operations/read\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/*/read\",\r\n \"Microsoft.KeyVault/vaults/secrets/readMetadata/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-19T17:52:47.2949294Z\",\r\n \"updatedOn\": \"2020-05-20T19:58:55.0084184Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/21090545-7ca7-4776-b22c-e363652d74d2\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"21090545-7ca7-4776-b22c-e363652d74d2\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Key Vault Crypto Service Encryption (preview)\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Can read metadata of keys and perform wrap/unwrap operations.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.KeyVault/vaults/keys/read\",\r\n \"Microsoft.KeyVault/vaults/keys/wrap/action\",\r\n \"Microsoft.KeyVault/vaults/keys/unwrap/action\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-05-20T20:55:19.239847Z\",\r\n \"updatedOn\": \"2020-05-20T20:55:19.239847Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/e147488a-f6f5-4113-8e2d-b22465e65bf6\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"e147488a-f6f5-4113-8e2d-b22465e65bf6\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Arc Kubernetes Viewer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you view all resources in cluster/namespace, except secrets.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/*/read\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/secrets/read\",\r\n \"Microsoft.Kubernetes/connectedClusters/clusterconfig.azure.com/azureclusteridentityrequests/read\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-12T20:51:12.8801199Z\",\r\n \"updatedOn\": \"2020-06-12T20:51:12.8801199Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/63f0a09d-1495-4db4-a681-037d84835eb4\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"63f0a09d-1495-4db4-a681-037d84835eb4\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Arc Kubernetes Writer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you update everything in cluster/namespace, except (cluster)roles and (cluster)role bindings.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/*/read\",\r\n \"Microsoft.Kubernetes/connectedClusters/*/write\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/rbac.authorization.k8s.io/*/read\",\r\n \"Microsoft.Kubernetes/connectedClusters/rbac.authorization.k8s.io/*/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/namespaces/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/resourcequotas/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/certificates.k8s.io/certificatesigningrequests/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/policy/podsecuritypolicies/write\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-12T20:53:50.6749823Z\",\r\n \"updatedOn\": \"2020-06-12T20:53:50.6749823Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/5b999177-9696-4545-85c7-50de3797e5a1\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"5b999177-9696-4545-85c7-50de3797e5a1\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Arc Kubernetes Cluster Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage all resources in the cluster.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-12T20:55:30.9910462Z\",\r\n \"updatedOn\": \"2020-06-12T20:55:30.9910462Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/8393591c-06b9-48a2-a542-1bd6b377f6a2\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"8393591c-06b9-48a2-a542-1bd6b377f6a2\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Arc Kubernetes Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage all resources under cluster/namespace, except update or delete resource quotas and namespaces.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/*\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.Kubernetes/connectedClusters/resourcequotas/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/resourcequotas/delete\",\r\n \"Microsoft.Kubernetes/connectedClusters/namespaces/write\",\r\n \"Microsoft.Kubernetes/connectedClusters/namespaces/delete\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-06-12T20:57:06.0391177Z\",\r\n \"updatedOn\": \"2020-06-12T20:57:06.0391177Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/dffb1e0c-446f-4dde-a09f-99eb5cc68b96\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"dffb1e0c-446f-4dde-a09f-99eb5cc68b96\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service RBAC Cluster Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage all resources in the cluster.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.ContainerService/managedClusters/listClusterUserCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-02T17:47:24.4071415Z\",\r\n \"updatedOn\": \"2020-07-02T17:47:24.4071415Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/b1ff04bb-8a4e-4dc4-8eb5-8693973ce19b\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"b1ff04bb-8a4e-4dc4-8eb5-8693973ce19b\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service RBAC Admin\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you manage all resources under cluster/namespace, except update or delete resource quotas and namespaces.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.ContainerService/managedClusters/listClusterUserCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/*\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/resourcequotas/write\",\r\n \"Microsoft.ContainerService/managedClusters/resourcequotas/delete\",\r\n \"Microsoft.ContainerService/managedClusters/namespaces/write\",\r\n \"Microsoft.ContainerService/managedClusters/namespaces/delete\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-02T17:50:30.4020311Z\",\r\n \"updatedOn\": \"2020-07-02T17:50:30.4020311Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/3498e952-d568-435e-9b2c-8d77e338d7f7\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"3498e952-d568-435e-9b2c-8d77e338d7f7\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service RBAC Reader\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you view all resources in cluster/namespace, except secrets.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.ContainerService/managedClusters/listClusterUserCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/*/read\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/rbac.authorization.k8s.io/*/read\",\r\n \"Microsoft.ContainerService/managedClusters/rbac.authorization.k8s.io/*/write\",\r\n \"Microsoft.ContainerService/managedClusters/secrets/*\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-02T17:53:05.5728294Z\",\r\n \"updatedOn\": \"2020-07-07T16:40:37.2744607Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/7f6c6a51-bcf8-42ba-9220-52d62157d7db\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"7f6c6a51-bcf8-42ba-9220-52d62157d7db\"\r\n },\r\n {\r\n \"properties\": {\r\n \"roleName\": \"Azure Kubernetes Service RBAC Writer\",\r\n \"type\": \"BuiltInRole\",\r\n \"description\": \"Lets you update everything in cluster/namespace, except resource quotas, namespaces, pod security policies, certificate signing requests, (cluster)roles and (cluster)role bindings.\",\r\n \"assignableScopes\": [\r\n \"/\"\r\n ],\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"Microsoft.Authorization/*/read\",\r\n \"Microsoft.Insights/alertRules/*\",\r\n \"Microsoft.Resources/deployments/write\",\r\n \"Microsoft.Resources/subscriptions/operationresults/read\",\r\n \"Microsoft.Resources/subscriptions/read\",\r\n \"Microsoft.Resources/subscriptions/resourceGroups/read\",\r\n \"Microsoft.Support/*\",\r\n \"Microsoft.ContainerService/managedClusters/listClusterUserCredential/action\"\r\n ],\r\n \"notActions\": [],\r\n \"dataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/*/read\",\r\n \"Microsoft.ContainerService/managedClusters/*/write\"\r\n ],\r\n \"notDataActions\": [\r\n \"Microsoft.ContainerService/managedClusters/rbac.authorization.k8s.io/*/read\",\r\n \"Microsoft.ContainerService/managedClusters/rbac.authorization.k8s.io/*/write\",\r\n \"Microsoft.ContainerService/managedClusters/namespaces/write\",\r\n \"Microsoft.ContainerService/managedClusters/resourcequotas/write\",\r\n \"Microsoft.ContainerService/managedClusters/certificates.k8s.io/certificatesigningrequests/write\",\r\n \"Microsoft.ContainerService/managedClusters/policy/podsecuritypolicies/write\"\r\n ]\r\n }\r\n ],\r\n \"createdOn\": \"2020-07-02T17:54:51.9644983Z\",\r\n \"updatedOn\": \"2020-07-02T17:54:51.9644983Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/a7ffa36f-339b-4b5c-8bdf-e2c188b2c0eb\",\r\n \"type\": \"Microsoft.Authorization/roleDefinitions\",\r\n \"name\": \"a7ffa36f-339b-4b5c-8bdf-e2c188b2c0eb\"\r\n }\r\n ]\r\n}", + "StatusCode": 200 + }, + { + "RequestUri": "//subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments/734de5f5-c680-41c0-8beb-67b98c3539d2?api-version=2020-04-01-preview", + "EncodedRequestUri": "Ly9zdWJzY3JpcHRpb25zLzQwMDRhOWZkLWQ1OGUtNDhkYy1hZWIyLTRhNGFlYzU4NjA2Zi9yZXNvdXJjZUdyb3Vwcy9kYW9yb3pjb19idWdfcmVwcm8vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3JvbGVBc3NpZ25tZW50cy83MzRkZTVmNS1jNjgwLTQxYzAtOGJlYi02N2I5OGMzNTM5ZDI/YXBpLXZlcnNpb249MjAyMC0wNC0wMS1wcmV2aWV3", + "RequestMethod": "DELETE", + "RequestBody": "", + "RequestHeaders": { + "x-ms-client-request-id": [ + "a9370535-a843-42cc-88e0-09d4098af15b" + ], + "Accept-Language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.29017.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.12.0.0" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-request-id": [ + "11167ef6-b789-434c-9cfa-645e0a76d877" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "Set-Cookie": [ + "x-ms-gateway-slice=Production; path=/; secure; HttpOnly; SameSite=None" + ], + "x-ms-ratelimit-remaining-subscription-deletes": [ + "14999" + ], + "x-ms-correlation-request-id": [ + "a53087e5-077e-4cba-b519-70bb68585179" + ], + "x-ms-routing-request-id": [ + "WESTUS:20200717T010332Z:a53087e5-077e-4cba-b519-70bb68585179" + ], + "Date": [ + "Fri, 17 Jul 2020 01:03:32 GMT" + ], + "Content-Length": [ + "1075" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ], + "Retry-After": [ + "0" + ] + }, + "ResponseBody": "{\r\n \"properties\": {\r\n \"roleDefinitionId\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7\",\r\n \"principalId\": \"01072e9b-c4a1-4246-a756-031b529bbf66\",\r\n \"principalType\": \"User\",\r\n \"scope\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg\",\r\n \"condition\": \"@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:Name] StringEqualsIgnoreCase 'foo_storage_container'\",\r\n \"conditionVersion\": \"2.0\",\r\n \"createdOn\": \"2020-07-17T01:03:22.9503355Z\",\r\n \"updatedOn\": \"2020-07-17T01:03:29.1742508Z\",\r\n \"createdBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"updatedBy\": \"f8d526a0-54eb-4941-ae69-ebf4a334d0f0\",\r\n \"canDelegate\": false,\r\n \"delegatedManagedIdentityResourceId\": null,\r\n \"description\": \"This test should not fail\"\r\n },\r\n \"id\": \"/subscriptions/4e5329a6-39ce-4e13-b12e-11b30f015986/resourceGroups/contoso_rg/providers/Microsoft.Authorization/roleAssignments/734de5f5-c680-41c0-8beb-67b98c3539d2\",\r\n \"type\": \"Microsoft.Authorization/roleAssignments\",\r\n \"name\": \"734de5f5-c680-41c0-8beb-67b98c3539d2\"\r\n}", + "StatusCode": 200 + } + ], + "Names": {}, + "Variables": { + "SubscriptionId": "4004a9fd-d58e-48dc-aeb2-4a4aec58606f" + } +} \ No newline at end of file diff --git a/src/Resources/Resources/ChangeLog.md b/src/Resources/Resources/ChangeLog.md index ec41a6efbf62..b3bf95029677 100644 --- a/src/Resources/Resources/ChangeLog.md +++ b/src/Resources/Resources/ChangeLog.md @@ -18,6 +18,8 @@ - Additional information about change #1 --> ## Upcoming Release +* Added properties "Condition", "ConditionVersion" and "Description" to `New-AzRoleAssignment` + - This included all the relevant changes to the data models ## Version 2.3.0 * Updated `Save-AzResourceGroupDeploymentTemplate` to use the SDK. diff --git a/src/Resources/Resources/Models.Authorization/AuthorizationClient.cs b/src/Resources/Resources/Models.Authorization/AuthorizationClient.cs index 21e8bff36aa0..0ef10067a655 100644 --- a/src/Resources/Resources/Models.Authorization/AuthorizationClient.cs +++ b/src/Resources/Resources/Models.Authorization/AuthorizationClient.cs @@ -133,11 +133,17 @@ public IEnumerable FilterRoleDefinitionsByCustom(string scope, string roleDefinitionId = !string.IsNullOrEmpty(parameters.RoleDefinitionName) ? AuthorizationHelper.ConstructFullyQualifiedRoleDefinitionIdFromScopeAndIdAsGuid(scope, GetSingleRoleDefinitionByName(parameters.RoleDefinitionName, scope).Id) : AuthorizationHelper.ConstructFullyQualifiedRoleDefinitionIdFromScopeAndIdAsGuid(scope, parameters.RoleDefinitionId); + parameters.Description = string.IsNullOrWhiteSpace(parameters.Description) ? null : parameters.Description; + parameters.Condition = string.IsNullOrWhiteSpace(parameters.Condition) ? null : parameters.Condition; + parameters.ConditionVersion = string.IsNullOrWhiteSpace(parameters.ConditionVersion) ? null : parameters.ConditionVersion; var createParameters = new RoleAssignmentCreateParameters { PrincipalId = principalId.ToString(), RoleDefinitionId = roleDefinitionId, - CanDelegate = parameters.CanDelegate + CanDelegate = parameters.CanDelegate, + Description = parameters.Description, + Condition = parameters.Condition, + ConditionVersion = parameters.ConditionVersion }; RoleAssignment assignment = AuthorizationManagementClient.RoleAssignments.Create( diff --git a/src/Resources/Resources/Models.Authorization/AuthorizationClientExtensions.cs b/src/Resources/Resources/Models.Authorization/AuthorizationClientExtensions.cs index 47bec28105cb..b9bd6e7cd7c4 100644 --- a/src/Resources/Resources/Models.Authorization/AuthorizationClientExtensions.cs +++ b/src/Resources/Resources/Models.Authorization/AuthorizationClientExtensions.cs @@ -269,7 +269,10 @@ private static IEnumerable ToPSRoleAssignments(this IEnumerabl SignInName = ((PSADUser)adObject).UserPrincipalName, ObjectId = adObject.Id, ObjectType = adObject.Type, - CanDelegate = delegationFlag + CanDelegate = delegationFlag, + Description = assignment.Description, + Condition = assignment.Condition, + ConditionVersion = assignment.ConditionVersion, }); } else if (adObject is PSADGroup) @@ -283,7 +286,10 @@ private static IEnumerable ToPSRoleAssignments(this IEnumerabl Scope = assignment.Scope, ObjectId = adObject.Id, ObjectType = adObject.Type, - CanDelegate = delegationFlag + CanDelegate = delegationFlag, + Description = assignment.Description, + Condition = assignment.Condition, + ConditionVersion = assignment.ConditionVersion, }); } else if (adObject is PSADServicePrincipal) @@ -297,7 +303,10 @@ private static IEnumerable ToPSRoleAssignments(this IEnumerabl Scope = assignment.Scope, ObjectId = adObject.Id, ObjectType = adObject.Type, - CanDelegate = delegationFlag + CanDelegate = delegationFlag, + Description = assignment.Description, + Condition = assignment.Condition, + ConditionVersion = assignment.ConditionVersion, }); } else if (adObject is PSErrorHelperObject && ((PSErrorHelperObject)adObject).ErrorType == ErrorTypeEnum.MalformedQuery) @@ -309,7 +318,10 @@ private static IEnumerable ToPSRoleAssignments(this IEnumerabl RoleDefinitionId = roleDefinition.Id, RoleDefinitionName = roleDefinition.Name, Scope = assignment.Scope, - ObjectType = assignment.Type + ObjectType = assignment.Type, + Description = assignment.Description, + Condition = assignment.Condition, + ConditionVersion = assignment.ConditionVersion, }); } else if (!excludeAssignmentsForDeletedPrincipals) @@ -323,7 +335,10 @@ private static IEnumerable ToPSRoleAssignments(this IEnumerabl Scope = assignment.Scope, ObjectId = adObject.Id, CanDelegate = delegationFlag, - ObjectType = DeletedObject + ObjectType = DeletedObject, + Description = assignment.Description, + Condition = assignment.Condition, + ConditionVersion = assignment.ConditionVersion, }); } diff --git a/src/Resources/Resources/Models.Authorization/FilterRoleAssignmentsOptions.cs b/src/Resources/Resources/Models.Authorization/FilterRoleAssignmentsOptions.cs index fb7b41b6ae93..3a288e7bc34a 100644 --- a/src/Resources/Resources/Models.Authorization/FilterRoleAssignmentsOptions.cs +++ b/src/Resources/Resources/Models.Authorization/FilterRoleAssignmentsOptions.cs @@ -26,6 +26,9 @@ public class FilterRoleAssignmentsOptions public string RoleDefinitionId { get; set; } private string scope; + public string Description { get; set; } + public string Condition { get; set; } + public string ConditionVersion { get; set; } public string Scope { diff --git a/src/Resources/Resources/Models.Authorization/PSRoleAssignment.cs b/src/Resources/Resources/Models.Authorization/PSRoleAssignment.cs index 7883030c6d70..095ae51e7218 100644 --- a/src/Resources/Resources/Models.Authorization/PSRoleAssignment.cs +++ b/src/Resources/Resources/Models.Authorization/PSRoleAssignment.cs @@ -35,5 +35,11 @@ public class PSRoleAssignment public string ObjectType { get; set; } public bool CanDelegate { get; set; } + + public string Description { get; set; } + + public string ConditionVersion { get; set; } + + public string Condition { get; set; } } } diff --git a/src/Resources/Resources/Resources.csproj b/src/Resources/Resources/Resources.csproj index 70b9c5f54350..ba0c364245f2 100644 --- a/src/Resources/Resources/Resources.csproj +++ b/src/Resources/Resources/Resources.csproj @@ -12,7 +12,7 @@ - + diff --git a/src/Resources/Resources/RoleAssignments/NewAzureRoleAssignmentCommand.cs b/src/Resources/Resources/RoleAssignments/NewAzureRoleAssignmentCommand.cs index c70f2f118386..f6c746d06623 100644 --- a/src/Resources/Resources/RoleAssignments/NewAzureRoleAssignmentCommand.cs +++ b/src/Resources/Resources/RoleAssignments/NewAzureRoleAssignmentCommand.cs @@ -137,6 +137,75 @@ public class NewAzureRoleAssignmentCommand : ResourcesBaseCmdlet [ValidateNotNullOrEmpty] public string RoleDefinitionName { get; set; } + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.Empty, + HelpMessage = "Brief description of the role assignment.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ResourceGroupWithObjectId, + HelpMessage = "Brief description of the role assignment.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ResourceGroupWithSignInName, + HelpMessage = "Brief description of the role assignment.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ResourceGroupWithSPN, + HelpMessage = "Brief description of the role assignment.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ResourceWithObjectId, + HelpMessage = "Brief description of the role assignment.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ResourceWithSignInName, + HelpMessage = "Brief description of the role assignment.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ResourceWithSPN, + HelpMessage = "Brief description of the role assignment.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.RoleIdWithScopeAndObjectId, + HelpMessage = "Brief description of the role assignment.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ScopeWithSignInName, + HelpMessage = "Brief description of the role assignment.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ScopeWithSPN, + HelpMessage = "Brief description of the role assignment.")] + [ValidateNotNullOrEmpty] + public string Description { get; set; } + + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.Empty, + HelpMessage = "Condition to be applied to the RoleAssignment.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ResourceGroupWithObjectId, + HelpMessage = "Condition to be applied to the RoleAssignment.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ResourceGroupWithSignInName, + HelpMessage = "Condition to be applied to the RoleAssignment.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ResourceGroupWithSPN, + HelpMessage = "Condition to be applied to the RoleAssignment.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ResourceWithObjectId, + HelpMessage = "Condition to be applied to the RoleAssignment.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ResourceWithSignInName, + HelpMessage = "Condition to be applied to the RoleAssignment.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ResourceWithSPN, + HelpMessage = "Condition to be applied to the RoleAssignment.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.RoleIdWithScopeAndObjectId, + HelpMessage = "Condition to be applied to the RoleAssignment.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ScopeWithSignInName, + HelpMessage = "Condition to be applied to the RoleAssignment.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ScopeWithSPN, + HelpMessage = "Condition to be applied to the RoleAssignment.")] + [ValidateNotNullOrEmpty] + public string Condition { get; set; } + + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.Empty, + HelpMessage = "Version of the condition.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ResourceGroupWithObjectId, + HelpMessage = "Version of the condition.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ResourceGroupWithSignInName, + HelpMessage = "Version of the condition.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ResourceGroupWithSPN, + HelpMessage = "Version of the condition.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ResourceWithObjectId, + HelpMessage = "Version of the condition.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ResourceWithSignInName, + HelpMessage = "Version of the condition.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ResourceWithSPN, + HelpMessage = "Version of the condition.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.RoleIdWithScopeAndObjectId, + HelpMessage = "Version of the condition.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ScopeWithSignInName, + HelpMessage = "Version of the condition.")] + [Parameter(Mandatory = false, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.ScopeWithSPN, + HelpMessage = "Version of the condition.")] + [ValidateNotNullOrEmpty] + public string ConditionVersion { get; set; } + [Parameter(Mandatory = true, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.RoleIdWithScopeAndObjectId, HelpMessage = "Role Id the principal is assigned to.")] [ValidateGuidNotEmpty] @@ -152,6 +221,26 @@ public class NewAzureRoleAssignmentCommand : ResourcesBaseCmdlet public override void ExecuteCmdlet() { + if (string.IsNullOrEmpty(Condition) ^ string.IsNullOrEmpty(ConditionVersion)) + { + if (!string.IsNullOrEmpty(Condition)) + { + ConditionVersion = "2.0"; + WriteDebug("-Condition was set but -ConditionVersion was not, defaulting to lowest publicly available version: '2.0'"); + } + else + { + WriteExceptionError(new ArgumentException("If -ConditionVersion is set -Condition can not be empty.")); + return; + } + + } + double _conditionVersion = double.Parse((ConditionVersion ?? "2.0")); + if (_conditionVersion < 2.0) + { + WriteExceptionError(new ArgumentException("Argument -ConditionVersion must be greater or equal than 2.0")); + return; + } FilterRoleAssignmentsOptions parameters = new FilterRoleAssignmentsOptions() { Scope = Scope, @@ -172,6 +261,9 @@ public override void ExecuteCmdlet() Subscription = DefaultProfile.DefaultContext.Subscription.Id, }, CanDelegate = AllowDelegation.IsPresent ? true : false, + Description = Description, + Condition = Condition, + ConditionVersion = ConditionVersion, }; AuthorizationClient.ValidateScope(parameters.Scope, false); diff --git a/src/Resources/Resources/RoleAssignments/RemoveAzureRoleAssignmentCommand.cs b/src/Resources/Resources/RoleAssignments/RemoveAzureRoleAssignmentCommand.cs index ab22e535664b..d6e9a01a03af 100644 --- a/src/Resources/Resources/RoleAssignments/RemoveAzureRoleAssignmentCommand.cs +++ b/src/Resources/Resources/RoleAssignments/RemoveAzureRoleAssignmentCommand.cs @@ -28,7 +28,7 @@ namespace Microsoft.Azure.Commands.Resources /// /// Removes a given role assignment. /// - [Cmdlet("Remove", ResourceManager.Common.AzureRMConstants.AzureRMPrefix + "RoleAssignment", SupportsShouldProcess = true,DefaultParameterSetName = ParameterSet.Empty), OutputType(typeof(PSRoleAssignment))] + [Cmdlet("Remove", ResourceManager.Common.AzureRMConstants.AzureRMPrefix + "RoleAssignment", SupportsShouldProcess = true, DefaultParameterSetName = ParameterSet.Empty), OutputType(typeof(PSRoleAssignment))] public class RemoveAzureRoleAssignmentCommand : ResourcesBaseCmdlet { [Parameter(Mandatory = true, ValueFromPipelineByPropertyName = true, ParameterSetName = ParameterSet.Empty, diff --git a/src/Resources/Resources/help/New-AzRoleAssignment.md b/src/Resources/Resources/help/New-AzRoleAssignment.md index 711bc3fb221d..b629ff78f2c6 100644 --- a/src/Resources/Resources/help/New-AzRoleAssignment.md +++ b/src/Resources/Resources/help/New-AzRoleAssignment.md @@ -15,64 +15,74 @@ Assigns the specified RBAC role to the specified principal, at the specified sco ### EmptyParameterSet (Default) ``` -New-AzRoleAssignment -ObjectId [-Scope ] -RoleDefinitionName [-AllowDelegation] +New-AzRoleAssignment -ObjectId [-Scope ] -RoleDefinitionName [-Description ] + [-Condition ] [-ConditionVersion ] [-AllowDelegation] [-DefaultProfile ] [] ``` ### ResourceGroupWithObjectIdParameterSet ``` New-AzRoleAssignment -ObjectId -ResourceGroupName -RoleDefinitionName - [-AllowDelegation] [-DefaultProfile ] [] + [-Description ] [-Condition ] [-ConditionVersion ] [-AllowDelegation] + [-DefaultProfile ] [] ``` ### ResourceWithObjectIdParameterSet ``` New-AzRoleAssignment -ObjectId -ResourceGroupName -ResourceName - -ResourceType [-ParentResource ] -RoleDefinitionName [-AllowDelegation] + -ResourceType [-ParentResource ] -RoleDefinitionName [-Description ] + [-Condition ] [-ConditionVersion ] [-AllowDelegation] [-DefaultProfile ] [] ``` ### RoleIdWithScopeAndObjectIdParameterSet ``` -New-AzRoleAssignment -ObjectId -Scope -RoleDefinitionId [-AllowDelegation] +New-AzRoleAssignment -ObjectId -Scope [-Description ] [-Condition ] + [-ConditionVersion ] -RoleDefinitionId [-AllowDelegation] [-DefaultProfile ] [] ``` ### ResourceGroupWithSignInNameParameterSet ``` New-AzRoleAssignment -SignInName -ResourceGroupName -RoleDefinitionName - [-AllowDelegation] [-DefaultProfile ] [] + [-Description ] [-Condition ] [-ConditionVersion ] [-AllowDelegation] + [-DefaultProfile ] [] ``` ### ResourceWithSignInNameParameterSet ``` New-AzRoleAssignment -SignInName -ResourceGroupName -ResourceName - -ResourceType [-ParentResource ] -RoleDefinitionName [-AllowDelegation] + -ResourceType [-ParentResource ] -RoleDefinitionName [-Description ] + [-Condition ] [-ConditionVersion ] [-AllowDelegation] [-DefaultProfile ] [] ``` ### ScopeWithSignInNameParameterSet ``` -New-AzRoleAssignment -SignInName [-Scope ] -RoleDefinitionName [-AllowDelegation] +New-AzRoleAssignment -SignInName [-Scope ] -RoleDefinitionName + [-Description ] [-Condition ] [-ConditionVersion ] [-AllowDelegation] [-DefaultProfile ] [] ``` ### ResourceGroupWithSPNParameterSet ``` New-AzRoleAssignment -ApplicationId -ResourceGroupName -RoleDefinitionName - [-AllowDelegation] [-DefaultProfile ] [] + [-Description ] [-Condition ] [-ConditionVersion ] [-AllowDelegation] + [-DefaultProfile ] [] ``` ### ResourceWithSPNParameterSet ``` New-AzRoleAssignment -ApplicationId -ResourceGroupName -ResourceName - -ResourceType [-ParentResource ] -RoleDefinitionName [-AllowDelegation] + -ResourceType [-ParentResource ] -RoleDefinitionName [-Description ] + [-Condition ] [-ConditionVersion ] [-AllowDelegation] [-DefaultProfile ] [] ``` ### ScopeWithSPNParameterSet ``` -New-AzRoleAssignment -ApplicationId [-Scope ] -RoleDefinitionName [-AllowDelegation] +New-AzRoleAssignment -ApplicationId [-Scope ] -RoleDefinitionName + [-Description ] [-Condition ] [-ConditionVersion ] [-AllowDelegation] [-DefaultProfile ] [] ``` @@ -172,6 +182,36 @@ Accept pipeline input: True (ByPropertyName) Accept wildcard characters: False ``` +### -Condition +Condition to be applied to the RoleAssignment. + +```yaml +Type: System.String +Parameter Sets: (All) +Aliases: + +Required: False +Position: Named +Default value: None +Accept pipeline input: True (ByPropertyName) +Accept wildcard characters: False +``` + +### -ConditionVersion +Version of the condition. + +```yaml +Type: System.String +Parameter Sets: (All) +Aliases: + +Required: False +Position: Named +Default value: None +Accept pipeline input: True (ByPropertyName) +Accept wildcard characters: False +``` + ### -DefaultProfile The credentials, account, tenant, and subscription used for communication with azure @@ -187,6 +227,21 @@ Accept pipeline input: False Accept wildcard characters: False ``` +### -Description +Brief description of the role assignment. + +```yaml +Type: System.String +Parameter Sets: (All) +Aliases: + +Required: False +Position: Named +Default value: None +Accept pipeline input: True (ByPropertyName) +Accept wildcard characters: False +``` + ### -ObjectId Azure AD Objectid of the user, group or service principal.