From b7450f19002e7a67940c1d4537354a2197f85b11 Mon Sep 17 00:00:00 2001
From: mgeeky <mb@binary-offensive.com>
Date: Tue, 25 Jan 2022 12:59:19 +0100
Subject: [PATCH] Added Azure Roles.

---
 clouds/azure/Azure Roles/Dump-AzureRoles.ps1 |   22 +-
 clouds/azure/Azure Roles/README.md           | 5393 ------------------
 2 files changed, 5 insertions(+), 5410 deletions(-)

diff --git a/clouds/azure/Azure Roles/Dump-AzureRoles.ps1 b/clouds/azure/Azure Roles/Dump-AzureRoles.ps1
index 99746f2..a6df568 100644
--- a/clouds/azure/Azure Roles/Dump-AzureRoles.ps1	
+++ b/clouds/azure/Azure Roles/Dump-AzureRoles.ps1	
@@ -1,14 +1,3 @@
-#
-# This script collects Azure RBAC and Azure AD Roles, their definitions and associated permissions.
-# Then lists them in a nice Markdown report.
-#
-# Usage:
-#   PS C:\> powershell -c '. .\Dump-AzureRoles.ps1 ; Dump-AzureRoles' | Out-File roles.md
-#
-# mgeeky / Mariusz Banach, '22
-# <mb [at] binary-offensive.com
-#
-
 Function Get-ARTADRolePermissions {
     <#
     .SYNOPSIS
@@ -163,10 +152,9 @@ Second part contains full definitions of each role along with their permissions
 
 | # | RoleName | RoleDescription | RoleId |
 |---|----------|-----------------|--------|
-
 "@
 
-    $azureRbacRoles = Get-AzRoleDefinition | ? { $_.IsCustom -eq $false } | sort -property displayname
+    $azureRbacRoles = Get-AzRoleDefinition | ? { $_.IsCustom -eq $false } | sort -property Name
 
     $count = 0
     $azureRbacRoles | % {
@@ -196,11 +184,11 @@ Second part contains full definitions of each role along with their permissions
 
 --- 
 
-## Role Definitions
+## Role Permissions
 
 This section contains detailed definitions of each role along with their assigned permissions sets.
 
-### Azure RBAC Role Definitions
+### Azure RBAC Role Permissions
 
 "@
 
@@ -212,11 +200,11 @@ This section contains detailed definitions of each role along with their assigne
 
 ---
     
-### Azure AD Role Definitions
+### Azure AD Role Permissions
 
 "@
 
     $azureADRoles | % {
         Get-ARTADRolePermissions -RoleName $_.DisplayName
     }
-}
+}
\ No newline at end of file
diff --git a/clouds/azure/Azure Roles/README.md b/clouds/azure/Azure Roles/README.md
index e31e32b..f4b5945 100644
--- a/clouds/azure/Azure Roles/README.md	
+++ b/clouds/azure/Azure Roles/README.md	
@@ -11,7 +11,6 @@ Second part contains full definitions of each role along with their permissions
 
 | # | RoleName | RoleDescription | RoleId |
 |---|----------|-----------------|--------|
-
 | 1 | `Experimentation Metric Contributor` | _Allows for creation, writes and reads to the metric set via the metrics service APIs._ | `6188b7c9-7d01-4f99-a59f-c88b630326c0` |
 | 2 | `Project Babylon Data Curator` | _The Microsoft.ProjectBabylon data curator can create, read, modify and delete catalog data objects and establish relationships between objects. This role is in preview and subject to change._ | `9ef4ef9c-a049-46b0-82ab-dd8ac094c889` |
 | 3 | `Storage Account Backup Contributor Role` | _Storage Account Backup Contributors are allowed to perform backup and restore of Storage Account._ | `e5e2a7ff-d759-4cd2-bb51-3152d37e2eb1` |
@@ -428,7 +427,6 @@ Second part contains full definitions of each role along with their permissions
 | 86 | `Windows Update Deployment Administrator` | _Can create and manage all aspects of Windows Update deployments through the Windows Update for Business deployment service._ | `32696413-001a-46ae-978c-ce0f6b3620d2` |
 | 87 | `Workplace Device Join` | _Workplace Device Join_ | `c34f683f-4d5a-4403-affd-6615e00e3a7f` |
 
-
 --- 
 
 ## Role Definitions
@@ -437,5319 +435,8 @@ This section contains detailed definitions of each role along with their assigne
 
 ### Azure RBAC Role Definitions
 
----
-
-#### `Experimentation Metric Contributor`
-
-
-- Actions:
-  - `Microsoft.Experimentation/experimentWorkspaces/read`
-
-- DataActions:
-  - `Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/read`
-  - `Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/metricwrite/action`
-  - `Microsoft.Experimentation/experimentWorkspaces/metricwrite/action`
-  - `Microsoft.Experimentation/experimentWorkspaces/read`
-
----
-
-#### `Project Babylon Data Curator`
-
-
-- Actions:
-  - `Microsoft.ProjectBabylon/accounts/read`
-
-- DataActions:
-  - `Microsoft.ProjectBabylon/accounts/data/read`
-  - `Microsoft.ProjectBabylon/accounts/data/write`
-
----
-
-#### `Storage Account Backup Contributor Role`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Authorization/locks/read`
-  - `Microsoft.Authorization/locks/write`
-  - `Microsoft.Authorization/locks/delete`
-  - `Microsoft.Features/features/read`
-  - `Microsoft.Features/providers/features/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Storage/operations/read`
-  - `Microsoft.Storage/storageAccounts/blobServices/containers/read`
-  - `Microsoft.Storage/storageAccounts/blobServices/read`
-  - `Microsoft.Storage/storageAccounts/blobServices/write`
-  - `Microsoft.Storage/storageAccounts/read`
-  - `Microsoft.Storage/storageAccounts/restoreBlobRanges/action`
-
----
-
-#### `Reservation Purchaser`
-
-
-- Actions:
-  - `Microsoft.Resources/subscriptions/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Capacity/register/action`
-  - `Microsoft.Compute/register/action`
-  - `Microsoft.SQL/register/action`
-  - `Microsoft.Consumption/register/action`
-  - `Microsoft.Capacity/catalogs/read`
-  - `Microsoft.Authorization/roleAssignments/read`
-  - `Microsoft.Consumption/reservationRecommendations/read`
-  - `Microsoft.Support/supporttickets/write`
-
----
-
-#### `AzureML Metrics Writer (preview)`
-
-
-- Actions:
-  - `Microsoft.MachineLearningServices/workspaces/metrics/*/write`
-
----
-
-#### `Purview role 3 (Deprecated)`
-
-
-- Actions:
-  - `Microsoft.Purview/accounts/read`
-
-- DataActions:
-  - `Microsoft.Purview/accounts/data/read`
-
----
-
-#### `Purview role 2 (Deprecated)`
-
-
-- Actions:
-  - `Microsoft.Purview/accounts/read`
-
-- DataActions:
-  - `Microsoft.Purview/accounts/scan/read`
-  - `Microsoft.Purview/accounts/scan/write`
-
----
-
-#### `Purview role 1 (Deprecated)`
-
-
-- Actions:
-  - `Microsoft.Purview/accounts/read`
-
-- DataActions:
-  - `Microsoft.Purview/accounts/data/read`
-  - `Microsoft.Purview/accounts/data/write`
-
----
-
-#### `Project Babylon Data Reader`
-
-
-- Actions:
-  - `Microsoft.ProjectBabylon/accounts/read`
-
-- DataActions:
-  - `Microsoft.ProjectBabylon/accounts/data/read`
-
----
-
-#### `Project Babylon Data Source Administrator`
-
-
-- Actions:
-  - `Microsoft.ProjectBabylon/accounts/read`
-
-- DataActions:
-  - `Microsoft.ProjectBabylon/accounts/scan/read`
-  - `Microsoft.ProjectBabylon/accounts/scan/write`
-
----
-
-#### `AgFood Platform Service Reader`
-
-
-- DataActions:
-  - `Microsoft.AgFoodPlatform/*/read`
-
----
-
-#### `AgFood Platform Service Contributor`
-
-
-- DataActions:
-  - `Microsoft.AgFoodPlatform/*/action`
-  - `Microsoft.AgFoodPlatform/*/read`
-  - `Microsoft.AgFoodPlatform/*/write`
-
-- NotDataActions:
-  - `Microsoft.AgFoodPlatform/farmers/write`
-  - `Microsoft.AgFoodPlatform/deletionJobs/*/write`
-
----
-
-#### `Schema Registry Contributor (Preview)`
-
-
-- Actions:
-  - `Microsoft.EventHub/namespaces/schemagroups/*`
-
-- DataActions:
-  - `Microsoft.EventHub/namespaces/schemas/*`
-
----
-
-#### `Cognitive Services Metrics Advisor User`
-
-
-- Actions:
-  - `Microsoft.CognitiveServices/*/read`
-
-- DataActions:
-  - `Microsoft.CognitiveServices/accounts/MetricsAdvisor/*`
-
-- NotDataActions:
-  - `Microsoft.CognitiveServices/accounts/MetricsAdvisor/stats/*`
-
----
-
-#### `Schema Registry Reader (Preview)`
-
-
-- Actions:
-  - `Microsoft.EventHub/namespaces/schemagroups/read`
-
-- DataActions:
-  - `Microsoft.EventHub/namespaces/schemas/read`
-
----
-
-#### `SignalR REST API Reader`
-
-
-- DataActions:
-  - `Microsoft.SignalRService/SignalR/group/read`
-  - `Microsoft.SignalRService/SignalR/clientConnection/read`
-  - `Microsoft.SignalRService/SignalR/user/read`
-
----
-
-#### `SignalR Service Owner`
-
-
-- DataActions:
-  - `Microsoft.SignalRService/SignalR/auth/accessKey/action`
-  - `Microsoft.SignalRService/SignalR/auth/clientToken/action`
-  - `Microsoft.SignalRService/SignalR/hub/send/action`
-  - `Microsoft.SignalRService/SignalR/group/send/action`
-  - `Microsoft.SignalRService/SignalR/group/read`
-  - `Microsoft.SignalRService/SignalR/group/write`
-  - `Microsoft.SignalRService/SignalR/clientConnection/send/action`
-  - `Microsoft.SignalRService/SignalR/clientConnection/read`
-  - `Microsoft.SignalRService/SignalR/clientConnection/write`
-  - `Microsoft.SignalRService/SignalR/serverConnection/write`
-  - `Microsoft.SignalRService/SignalR/user/send/action`
-  - `Microsoft.SignalRService/SignalR/user/read`
-  - `Microsoft.SignalRService/SignalR/user/write`
-
----
-
-#### `Security Detonation Chamber Submitter`
-
-
-- DataActions:
-  - `Microsoft.SecurityDetonation/chambers/submissions/delete`
-  - `Microsoft.SecurityDetonation/chambers/submissions/write`
-  - `Microsoft.SecurityDetonation/chambers/submissions/read`
-  - `Microsoft.SecurityDetonation/chambers/submissions/files/read`
-  - `Microsoft.SecurityDetonation/chambers/submissions/accesskeyview/read`
-  - `Microsoft.SecurityDetonation/chambers/platforms/metadata/read`
-  - `Microsoft.SecurityDetonation/chambers/workflows/metadata/read`
-  - `Microsoft.SecurityDetonation/chambers/toolsets/metadata/read`
-
----
-
-#### `AgFood Platform Service Admin`
-
-
-- DataActions:
-  - `Microsoft.AgFoodPlatform/*`
-
----
-
-#### `Managed HSM contributor`
-
-
-- Actions:
-  - `Microsoft.KeyVault/managedHSMs/*`
-
----
-
-#### `Autonomous Development Platform Data Reader (Preview)`
-
-
-- Actions:
-  - `Microsoft.AutonomousDevelopmentPlatform/*/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-
-- DataActions:
-  - `Microsoft.AutonomousDevelopmentPlatform/*/read`
-
----
-
-#### `Autonomous Development Platform Data Owner (Preview)`
-
-
-- Actions:
-  - `Microsoft.AutonomousDevelopmentPlatform/*/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-
-- DataActions:
-  - `Microsoft.AutonomousDevelopmentPlatform/*`
-
----
-
-#### `Autonomous Development Platform Data Contributor (Preview)`
-
-
-- Actions:
-  - `Microsoft.AutonomousDevelopmentPlatform/*/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-
-- DataActions:
-  - `Microsoft.AutonomousDevelopmentPlatform/accounts/dataPools/discoveries/*`
-  - `Microsoft.AutonomousDevelopmentPlatform/accounts/dataPools/uploads/*`
-  - `Microsoft.AutonomousDevelopmentPlatform/accounts/dataPools/measurements/states/new/*`
-  - `Microsoft.AutonomousDevelopmentPlatform/accounts/dataPools/measurementCollections/*`
-  - `Microsoft.AutonomousDevelopmentPlatform/accounts/measurementCollections/*`
-  - `Microsoft.AutonomousDevelopmentPlatform/workspaces/discoveries/*`
-  - `Microsoft.AutonomousDevelopmentPlatform/workspaces/uploads/*`
-  - `Microsoft.AutonomousDevelopmentPlatform/workspaces/measurements/states/new/*`
-  - `Microsoft.AutonomousDevelopmentPlatform/workspaces/measurementCollections/*`
-
-- NotDataActions:
-  - `Microsoft.AutonomousDevelopmentPlatform/accounts/dataPools/measurements/states/new/changeState/action`
-  - `Microsoft.AutonomousDevelopmentPlatform/workspaces/measurements/states/new/changeState/action`
-
----
-
-#### `Desktop Virtualization Workspace Reader`
-
-
-- Actions:
-  - `Microsoft.DesktopVirtualization/workspaces/read`
-  - `Microsoft.DesktopVirtualization/applicationgroups/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/deployments/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Disk Backup Reader`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Compute/disks/read`
-  - `Microsoft.Compute/disks/beginGetAccess/action`
-
----
-
-#### `Security Detonation Chamber Submission Manager`
-
-
-- DataActions:
-  - `Microsoft.SecurityDetonation/chambers/submissions/delete`
-  - `Microsoft.SecurityDetonation/chambers/submissions/write`
-  - `Microsoft.SecurityDetonation/chambers/submissions/read`
-  - `Microsoft.SecurityDetonation/chambers/submissions/files/read`
-  - `Microsoft.SecurityDetonation/chambers/submissions/accesskeyview/read`
-  - `Microsoft.SecurityDetonation/chambers/submissions/adminview/read`
-  - `Microsoft.SecurityDetonation/chambers/submissions/analystview/read`
-  - `Microsoft.SecurityDetonation/chambers/submissions/publicview/read`
-  - `Microsoft.SecurityDetonation/chambers/platforms/metadata/read`
-  - `Microsoft.SecurityDetonation/chambers/workflows/metadata/read`
-  - `Microsoft.SecurityDetonation/chambers/toolsets/metadata/read`
-
----
-
-#### `Security Detonation Chamber Publisher`
-
-
-- DataActions:
-  - `Microsoft.SecurityDetonation/chambers/platforms/read`
-  - `Microsoft.SecurityDetonation/chambers/platforms/write`
-  - `Microsoft.SecurityDetonation/chambers/platforms/delete`
-  - `Microsoft.SecurityDetonation/chambers/platforms/metadata/read`
-  - `Microsoft.SecurityDetonation/chambers/workflows/read`
-  - `Microsoft.SecurityDetonation/chambers/workflows/write`
-  - `Microsoft.SecurityDetonation/chambers/workflows/delete`
-  - `Microsoft.SecurityDetonation/chambers/workflows/metadata/read`
-  - `Microsoft.SecurityDetonation/chambers/toolsets/read`
-  - `Microsoft.SecurityDetonation/chambers/toolsets/write`
-  - `Microsoft.SecurityDetonation/chambers/toolsets/delete`
-  - `Microsoft.SecurityDetonation/chambers/toolsets/metadata/read`
-  - `Microsoft.SecurityDetonation/chambers/publishRequests/read`
-  - `Microsoft.SecurityDetonation/chambers/publishRequests/cancel/action`
-
----
-
-#### `Microsoft.Kubernetes connected cluster role`
-
-
-- Actions:
-  - `Microsoft.Kubernetes/connectedClusters/read`
-  - `Microsoft.Kubernetes/connectedClusters/write`
-  - `Microsoft.Kubernetes/connectedClusters/delete`
-  - `Microsoft.Kubernetes/registeredSubscriptions/read`
-
----
-
-#### `Disk Restore Operator`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Compute/disks/write`
-  - `Microsoft.Compute/disks/read`
-
----
-
-#### `Disk Snapshot Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Compute/snapshots/delete`
-  - `Microsoft.Compute/snapshots/write`
-  - `Microsoft.Compute/snapshots/read`
-  - `Microsoft.Compute/snapshots/beginGetAccess/action`
-  - `Microsoft.Compute/snapshots/endGetAccess/action`
-  - `Microsoft.Compute/disks/beginGetAccess/action`
-  - `Microsoft.Storage/storageAccounts/listkeys/action`
-  - `Microsoft.Storage/storageAccounts/write`
-  - `Microsoft.Storage/storageAccounts/read`
-  - `Microsoft.Storage/storageAccounts/delete`
-
----
-
-#### `Desktop Virtualization Workspace Contributor`
-
-
-- Actions:
-  - `Microsoft.DesktopVirtualization/workspaces/*`
-  - `Microsoft.DesktopVirtualization/applicationgroups/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Support/*`
-
----
-
-#### `Desktop Virtualization User Session Operator`
-
-
-- Actions:
-  - `Microsoft.DesktopVirtualization/hostpools/read`
-  - `Microsoft.DesktopVirtualization/hostpools/sessionhosts/read`
-  - `Microsoft.DesktopVirtualization/hostpools/sessionhosts/usersessions/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Support/*`
-
----
-
-#### `Desktop Virtualization Contributor`
-
-
-- Actions:
-  - `Microsoft.DesktopVirtualization/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Support/*`
-
----
-
-#### `Application Group Contributor`
-
-
-- Actions:
-  - `Microsoft.DesktopVirtualization/applicationgroups/*`
-  - `Microsoft.DesktopVirtualization/hostpools/read`
-  - `Microsoft.DesktopVirtualization/hostpools/sessionhosts/read`
-  - `Microsoft.DesktopVirtualization/workspaces/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Support/*`
-
----
-
-#### `Desktop Virtualization Reader`
-
-
-- Actions:
-  - `Microsoft.DesktopVirtualization/*/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/deployments/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Desktop Virtualization Application Group Reader`
-
-
-- Actions:
-  - `Microsoft.DesktopVirtualization/applicationgroups/*/read`
-  - `Microsoft.DesktopVirtualization/applicationgroups/read`
-  - `Microsoft.DesktopVirtualization/hostpools/read`
-  - `Microsoft.DesktopVirtualization/hostpools/sessionhosts/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/deployments/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Desktop Virtualization Application Group Contributor`
-
-
-- Actions:
-  - `Microsoft.DesktopVirtualization/applicationgroups/*`
-  - `Microsoft.DesktopVirtualization/hostpools/read`
-  - `Microsoft.DesktopVirtualization/hostpools/sessionhosts/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Support/*`
-
----
-
-#### `Desktop Virtualization Host Pool Contributor`
-
-
-- Actions:
-  - `Microsoft.DesktopVirtualization/hostpools/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Support/*`
-
----
-
-#### `Desktop Virtualization Session Host Operator`
-
-
-- Actions:
-  - `Microsoft.DesktopVirtualization/hostpools/read`
-  - `Microsoft.DesktopVirtualization/hostpools/sessionhosts/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Support/*`
-
----
-
-#### `Desktop Virtualization Host Pool Reader`
-
-
-- Actions:
-  - `Microsoft.DesktopVirtualization/hostpools/*/read`
-  - `Microsoft.DesktopVirtualization/hostpools/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/deployments/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Key Vault Crypto User`
-
-
-- DataActions:
-  - `Microsoft.KeyVault/vaults/keys/read`
-  - `Microsoft.KeyVault/vaults/keys/update/action`
-  - `Microsoft.KeyVault/vaults/keys/backup/action`
-  - `Microsoft.KeyVault/vaults/keys/encrypt/action`
-  - `Microsoft.KeyVault/vaults/keys/decrypt/action`
-  - `Microsoft.KeyVault/vaults/keys/wrap/action`
-  - `Microsoft.KeyVault/vaults/keys/unwrap/action`
-  - `Microsoft.KeyVault/vaults/keys/sign/action`
-  - `Microsoft.KeyVault/vaults/keys/verify/action`
-
----
-
-#### `Key Vault Secrets Officer`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.KeyVault/checkNameAvailability/read`
-  - `Microsoft.KeyVault/deletedVaults/read`
-  - `Microsoft.KeyVault/locations/*/read`
-  - `Microsoft.KeyVault/vaults/*/read`
-  - `Microsoft.KeyVault/operations/read`
-
-- DataActions:
-  - `Microsoft.KeyVault/vaults/secrets/*`
-
----
-
-#### `Key Vault Crypto Officer`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.KeyVault/checkNameAvailability/read`
-  - `Microsoft.KeyVault/deletedVaults/read`
-  - `Microsoft.KeyVault/locations/*/read`
-  - `Microsoft.KeyVault/vaults/*/read`
-  - `Microsoft.KeyVault/operations/read`
-
-- DataActions:
-  - `Microsoft.KeyVault/vaults/keys/*`
-  - `Microsoft.KeyVault/vaults/keyrotationpolicies/*`
-
----
-
-#### `Cognitive Services Custom Vision Trainer`
-
-
-- Actions:
-  - `Microsoft.CognitiveServices/*/read`
-
-- DataActions:
-  - `Microsoft.CognitiveServices/accounts/CustomVision/*`
-
-- NotDataActions:
-  - `Microsoft.CognitiveServices/accounts/CustomVision/projects/action`
-  - `Microsoft.CognitiveServices/accounts/CustomVision/projects/delete`
-  - `Microsoft.CognitiveServices/accounts/CustomVision/projects/import/action`
-  - `Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read`
-
----
-
-#### `Key Vault Administrator`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.KeyVault/checkNameAvailability/read`
-  - `Microsoft.KeyVault/deletedVaults/read`
-  - `Microsoft.KeyVault/locations/*/read`
-  - `Microsoft.KeyVault/vaults/*/read`
-  - `Microsoft.KeyVault/operations/read`
-
-- DataActions:
-  - `Microsoft.KeyVault/vaults/*`
-
----
-
-#### `Key Vault Crypto Service Encryption User`
-
-
-- Actions:
-  - `Microsoft.EventGrid/eventSubscriptions/write`
-  - `Microsoft.EventGrid/eventSubscriptions/read`
-  - `Microsoft.EventGrid/eventSubscriptions/delete`
-
-- DataActions:
-  - `Microsoft.KeyVault/vaults/keys/read`
-  - `Microsoft.KeyVault/vaults/keys/wrap/action`
-  - `Microsoft.KeyVault/vaults/keys/unwrap/action`
-
----
-
-#### `Azure Arc Kubernetes Viewer`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/write`
-  - `Microsoft.Resources/subscriptions/operationresults/read`
-  - `Microsoft.Resources/subscriptions/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
-- DataActions:
-  - `Microsoft.Kubernetes/connectedClusters/apps/controllerrevisions/read`
-  - `Microsoft.Kubernetes/connectedClusters/apps/daemonsets/read`
-  - `Microsoft.Kubernetes/connectedClusters/apps/deployments/read`
-  - `Microsoft.Kubernetes/connectedClusters/apps/replicasets/read`
-  - `Microsoft.Kubernetes/connectedClusters/apps/statefulsets/read`
-  - `Microsoft.Kubernetes/connectedClusters/autoscaling/horizontalpodautoscalers/read`
-  - `Microsoft.Kubernetes/connectedClusters/batch/cronjobs/read`
-  - `Microsoft.Kubernetes/connectedClusters/batch/jobs/read`
-  - `Microsoft.Kubernetes/connectedClusters/configmaps/read`
-  - `Microsoft.Kubernetes/connectedClusters/endpoints/read`
-  - `Microsoft.Kubernetes/connectedClusters/events.k8s.io/events/read`
-  - `Microsoft.Kubernetes/connectedClusters/events/read`
-  - `Microsoft.Kubernetes/connectedClusters/extensions/daemonsets/read`
-  - `Microsoft.Kubernetes/connectedClusters/extensions/deployments/read`
-  - `Microsoft.Kubernetes/connectedClusters/extensions/ingresses/read`
-  - `Microsoft.Kubernetes/connectedClusters/extensions/networkpolicies/read`
-  - `Microsoft.Kubernetes/connectedClusters/extensions/replicasets/read`
-  - `Microsoft.Kubernetes/connectedClusters/limitranges/read`
-  - `Microsoft.Kubernetes/connectedClusters/namespaces/read`
-  - `Microsoft.Kubernetes/connectedClusters/networking.k8s.io/ingresses/read`
-  - `Microsoft.Kubernetes/connectedClusters/networking.k8s.io/networkpolicies/read`
-  - `Microsoft.Kubernetes/connectedClusters/persistentvolumeclaims/read`
-  - `Microsoft.Kubernetes/connectedClusters/pods/read`
-  - `Microsoft.Kubernetes/connectedClusters/policy/poddisruptionbudgets/read`
-  - `Microsoft.Kubernetes/connectedClusters/replicationcontrollers/read`
-  - `Microsoft.Kubernetes/connectedClusters/replicationcontrollers/read`
-  - `Microsoft.Kubernetes/connectedClusters/resourcequotas/read`
-  - `Microsoft.Kubernetes/connectedClusters/serviceaccounts/read`
-  - `Microsoft.Kubernetes/connectedClusters/services/read`
-
----
-
-#### `Key Vault Reader`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.KeyVault/checkNameAvailability/read`
-  - `Microsoft.KeyVault/deletedVaults/read`
-  - `Microsoft.KeyVault/locations/*/read`
-  - `Microsoft.KeyVault/vaults/*/read`
-  - `Microsoft.KeyVault/operations/read`
-
-- DataActions:
-  - `Microsoft.KeyVault/vaults/*/read`
-  - `Microsoft.KeyVault/vaults/secrets/readMetadata/action`
-
----
-
-#### `Key Vault Secrets User`
-
-
-- DataActions:
-  - `Microsoft.KeyVault/vaults/secrets/getSecret/action`
-  - `Microsoft.KeyVault/vaults/secrets/readMetadata/action`
-
----
-
-#### `Key Vault Certificates Officer`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.KeyVault/checkNameAvailability/read`
-  - `Microsoft.KeyVault/deletedVaults/read`
-  - `Microsoft.KeyVault/locations/*/read`
-  - `Microsoft.KeyVault/vaults/*/read`
-  - `Microsoft.KeyVault/operations/read`
-
-- DataActions:
-  - `Microsoft.KeyVault/vaults/certificatecas/*`
-  - `Microsoft.KeyVault/vaults/certificates/*`
-
----
-
-#### `Experimentation Reader`
-
-
-- Actions:
-  - `Microsoft.Experimentation/experimentWorkspaces/read`
-
-- DataActions:
-  - `Microsoft.Experimentation/experimentWorkspaces/read`
-  - `Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/read`
-
----
-
-#### `Object Understanding Account Owner`
-
-
-- DataActions:
-  - `Microsoft.MixedReality/ObjectUnderstandingAccounts/ingest/action`
-  - `Microsoft.MixedReality/ObjectUnderstandingAccounts/ingest/read`
-
----
-
-#### `FHIR Data Writer`
-
-
-- DataActions:
-  - `Microsoft.HealthcareApis/services/fhir/resources/*`
-  - `Microsoft.HealthcareApis/workspaces/fhirservices/resources/*`
-
-- NotDataActions:
-  - `Microsoft.HealthcareApis/services/fhir/resources/hardDelete/action`
-  - `Microsoft.HealthcareApis/workspaces/fhirservices/resources/hardDelete/action`
-
----
-
-#### `FHIR Data Exporter`
-
-
-- DataActions:
-  - `Microsoft.HealthcareApis/services/fhir/resources/read`
-  - `Microsoft.HealthcareApis/services/fhir/resources/export/action`
-  - `Microsoft.HealthcareApis/workspaces/fhirservices/resources/read`
-  - `Microsoft.HealthcareApis/workspaces/fhirservices/resources/export/action`
-
----
-
-#### `FHIR Data Reader`
-
-
-- DataActions:
-  - `Microsoft.HealthcareApis/services/fhir/resources/read`
-  - `Microsoft.HealthcareApis/workspaces/fhirservices/resources/read`
-
----
-
-#### `Cognitive Services Custom Vision Labeler`
-
-
-- Actions:
-  - `Microsoft.CognitiveServices/*/read`
-
-- DataActions:
-  - `Microsoft.CognitiveServices/accounts/CustomVision/*/read`
-  - `Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action`
-  - `Microsoft.CognitiveServices/accounts/CustomVision/projects/images/*`
-  - `Microsoft.CognitiveServices/accounts/CustomVision/projects/tags/*`
-  - `Microsoft.CognitiveServices/accounts/CustomVision/projects/images/suggested/*`
-  - `Microsoft.CognitiveServices/accounts/CustomVision/projects/tagsandregions/suggestions/action`
-
-- NotDataActions:
-  - `Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read`
-
----
-
-#### `Cognitive Services Custom Vision Reader`
-
-
-- Actions:
-  - `Microsoft.CognitiveServices/*/read`
-
-- DataActions:
-  - `Microsoft.CognitiveServices/accounts/CustomVision/*/read`
-  - `Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/query/action`
-
-- NotDataActions:
-  - `Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read`
-
----
-
-#### `Cognitive Services Custom Vision Deployment`
-
-
-- Actions:
-  - `Microsoft.CognitiveServices/*/read`
-
-- DataActions:
-  - `Microsoft.CognitiveServices/accounts/CustomVision/*/read`
-  - `Microsoft.CognitiveServices/accounts/CustomVision/projects/predictions/*`
-  - `Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/publish/*`
-  - `Microsoft.CognitiveServices/accounts/CustomVision/projects/iterations/export/*`
-  - `Microsoft.CognitiveServices/accounts/CustomVision/projects/quicktest/*`
-  - `Microsoft.CognitiveServices/accounts/CustomVision/classify/*`
-  - `Microsoft.CognitiveServices/accounts/CustomVision/detect/*`
-
-- NotDataActions:
-  - `Microsoft.CognitiveServices/accounts/CustomVision/projects/export/read`
-
----
-
-#### `Azure Maps Data Contributor`
-
-
-- DataActions:
-  - `Microsoft.Maps/accounts/*/read`
-  - `Microsoft.Maps/accounts/*/write`
-  - `Microsoft.Maps/accounts/*/delete`
-  - `Microsoft.Maps/accounts/*/action`
-
----
-
-#### `Cognitive Services Custom Vision Contributor`
-
-
-- Actions:
-  - `Microsoft.CognitiveServices/*/read`
-
-- DataActions:
-  - `Microsoft.CognitiveServices/accounts/CustomVision/*`
-
----
-
-#### `Device Update Reader`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.Insights/alertRules/*`
-
-- DataActions:
-  - `Microsoft.DeviceUpdate/accounts/instances/updates/read`
-  - `Microsoft.DeviceUpdate/accounts/instances/management/read`
-
----
-
-#### `Device Update Administrator`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.Insights/alertRules/*`
-
-- DataActions:
-  - `Microsoft.DeviceUpdate/accounts/instances/updates/read`
-  - `Microsoft.DeviceUpdate/accounts/instances/updates/write`
-  - `Microsoft.DeviceUpdate/accounts/instances/updates/delete`
-  - `Microsoft.DeviceUpdate/accounts/instances/management/read`
-  - `Microsoft.DeviceUpdate/accounts/instances/management/write`
-  - `Microsoft.DeviceUpdate/accounts/instances/management/delete`
-
----
-
-#### `Collaborative Data Contributor`
-
-
-- Actions:
-  - `Microsoft.IndustryDataLifecycle/custodianCollaboratives/*/read`
-  - `Microsoft.IndustryDataLifecycle/memberCollaboratives/*/read`
-  - `Microsoft.IndustryDataLifecycle/locations/dataPackages/*`
-  - `Microsoft.IndustryDataLifecycle/custodianCollaboratives/receivedDataPackages/*`
-  - `Microsoft.IndustryDataLifecycle/custodianCollaboratives/rejectDataPackage/action`
-  - `Microsoft.IndustryDataLifecycle/memberCollaboratives/sharedDataPackages/*`
-  - `Microsoft.IndustryDataLifecycle/custodianCollaboratives/dataModels/*`
-  - `Microsoft.IndustryDataLifecycle/custodianCollaboratives/auditLogs/action`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `SignalR App Server`
-
-
-- DataActions:
-  - `Microsoft.SignalRService/SignalR/auth/accessKey/action`
-  - `Microsoft.SignalRService/SignalR/serverConnection/write`
-  - `Microsoft.SignalRService/SignalR/clientConnection/write`
-
----
-
-#### `SignalR REST API Owner`
-
-
-- DataActions:
-  - `Microsoft.SignalRService/SignalR/auth/clientToken/action`
-  - `Microsoft.SignalRService/SignalR/hub/send/action`
-  - `Microsoft.SignalRService/SignalR/group/send/action`
-  - `Microsoft.SignalRService/SignalR/group/read`
-  - `Microsoft.SignalRService/SignalR/group/write`
-  - `Microsoft.SignalRService/SignalR/clientConnection/send/action`
-  - `Microsoft.SignalRService/SignalR/clientConnection/read`
-  - `Microsoft.SignalRService/SignalR/clientConnection/write`
-  - `Microsoft.SignalRService/SignalR/user/send/action`
-  - `Microsoft.SignalRService/SignalR/user/read`
-  - `Microsoft.SignalRService/SignalR/user/write`
-
----
-
-#### `Device Update Content Reader`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.Insights/alertRules/*`
-
-- DataActions:
-  - `Microsoft.DeviceUpdate/accounts/instances/updates/read`
-
----
-
-#### `Cognitive Services Metrics Advisor Administrator`
-
-
-- Actions:
-  - `Microsoft.CognitiveServices/*/read`
-
-- DataActions:
-  - `Microsoft.CognitiveServices/accounts/MetricsAdvisor/*`
-
----
-
-#### `Device Update Deployments Reader`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.Insights/alertRules/*`
-
-- DataActions:
-  - `Microsoft.DeviceUpdate/accounts/instances/management/read`
-  - `Microsoft.DeviceUpdate/accounts/instances/updates/read`
-
----
-
-#### `Device Update Content Administrator`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.Insights/alertRules/*`
-
-- DataActions:
-  - `Microsoft.DeviceUpdate/accounts/instances/updates/read`
-  - `Microsoft.DeviceUpdate/accounts/instances/updates/write`
-  - `Microsoft.DeviceUpdate/accounts/instances/updates/delete`
-
----
-
-#### `Device Update Deployments Administrator`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.Insights/alertRules/*`
-
-- DataActions:
-  - `Microsoft.DeviceUpdate/accounts/instances/management/read`
-  - `Microsoft.DeviceUpdate/accounts/instances/management/write`
-  - `Microsoft.DeviceUpdate/accounts/instances/management/delete`
-  - `Microsoft.DeviceUpdate/accounts/instances/updates/read`
-
----
-
-#### `Azure Kubernetes Service RBAC Cluster Admin`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/write`
-  - `Microsoft.Resources/subscriptions/operationresults/read`
-  - `Microsoft.Resources/subscriptions/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.ContainerService/managedClusters/listClusterUserCredential/action`
-
-- DataActions:
-  - `Microsoft.ContainerService/managedClusters/*`
-
----
-
-#### `Azure Kubernetes Service RBAC Admin`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/write`
-  - `Microsoft.Resources/subscriptions/operationresults/read`
-  - `Microsoft.Resources/subscriptions/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.ContainerService/managedClusters/listClusterUserCredential/action`
-
-- DataActions:
-  - `Microsoft.ContainerService/managedClusters/*`
-
-- NotDataActions:
-  - `Microsoft.ContainerService/managedClusters/resourcequotas/write`
-  - `Microsoft.ContainerService/managedClusters/resourcequotas/delete`
-  - `Microsoft.ContainerService/managedClusters/namespaces/write`
-  - `Microsoft.ContainerService/managedClusters/namespaces/delete`
-
----
-
-#### `Azure Arc Kubernetes Admin`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/write`
-  - `Microsoft.Resources/subscriptions/operationresults/read`
-  - `Microsoft.Resources/subscriptions/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
-- DataActions:
-  - `Microsoft.Kubernetes/connectedClusters/apps/controllerrevisions/read`
-  - `Microsoft.Kubernetes/connectedClusters/apps/daemonsets/*`
-  - `Microsoft.Kubernetes/connectedClusters/apps/deployments/*`
-  - `Microsoft.Kubernetes/connectedClusters/apps/replicasets/*`
-  - `Microsoft.Kubernetes/connectedClusters/apps/statefulsets/*`
-  - `Microsoft.Kubernetes/connectedClusters/authorization.k8s.io/localsubjectaccessreviews/write`
-  - `Microsoft.Kubernetes/connectedClusters/autoscaling/horizontalpodautoscalers/*`
-  - `Microsoft.Kubernetes/connectedClusters/batch/cronjobs/*`
-  - `Microsoft.Kubernetes/connectedClusters/batch/jobs/*`
-  - `Microsoft.Kubernetes/connectedClusters/configmaps/*`
-  - `Microsoft.Kubernetes/connectedClusters/endpoints/*`
-  - `Microsoft.Kubernetes/connectedClusters/events.k8s.io/events/read`
-  - `Microsoft.Kubernetes/connectedClusters/events/read`
-  - `Microsoft.Kubernetes/connectedClusters/extensions/daemonsets/*`
-  - `Microsoft.Kubernetes/connectedClusters/extensions/deployments/*`
-  - `Microsoft.Kubernetes/connectedClusters/extensions/ingresses/*`
-  - `Microsoft.Kubernetes/connectedClusters/extensions/networkpolicies/*`
-  - `Microsoft.Kubernetes/connectedClusters/extensions/replicasets/*`
-  - `Microsoft.Kubernetes/connectedClusters/limitranges/read`
-  - `Microsoft.Kubernetes/connectedClusters/namespaces/read`
-  - `Microsoft.Kubernetes/connectedClusters/networking.k8s.io/ingresses/*`
-  - `Microsoft.Kubernetes/connectedClusters/networking.k8s.io/networkpolicies/*`
-  - `Microsoft.Kubernetes/connectedClusters/persistentvolumeclaims/*`
-  - `Microsoft.Kubernetes/connectedClusters/pods/*`
-  - `Microsoft.Kubernetes/connectedClusters/policy/poddisruptionbudgets/*`
-  - `Microsoft.Kubernetes/connectedClusters/rbac.authorization.k8s.io/rolebindings/*`
-  - `Microsoft.Kubernetes/connectedClusters/rbac.authorization.k8s.io/roles/*`
-  - `Microsoft.Kubernetes/connectedClusters/replicationcontrollers/*`
-  - `Microsoft.Kubernetes/connectedClusters/replicationcontrollers/*`
-  - `Microsoft.Kubernetes/connectedClusters/resourcequotas/read`
-  - `Microsoft.Kubernetes/connectedClusters/secrets/*`
-  - `Microsoft.Kubernetes/connectedClusters/serviceaccounts/*`
-  - `Microsoft.Kubernetes/connectedClusters/services/*`
-
----
-
-#### `Azure Arc Kubernetes Writer`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/write`
-  - `Microsoft.Resources/subscriptions/operationresults/read`
-  - `Microsoft.Resources/subscriptions/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
-- DataActions:
-  - `Microsoft.Kubernetes/connectedClusters/apps/controllerrevisions/read`
-  - `Microsoft.Kubernetes/connectedClusters/apps/daemonsets/*`
-  - `Microsoft.Kubernetes/connectedClusters/apps/deployments/*`
-  - `Microsoft.Kubernetes/connectedClusters/apps/replicasets/*`
-  - `Microsoft.Kubernetes/connectedClusters/apps/statefulsets/*`
-  - `Microsoft.Kubernetes/connectedClusters/autoscaling/horizontalpodautoscalers/*`
-  - `Microsoft.Kubernetes/connectedClusters/batch/cronjobs/*`
-  - `Microsoft.Kubernetes/connectedClusters/batch/jobs/*`
-  - `Microsoft.Kubernetes/connectedClusters/configmaps/*`
-  - `Microsoft.Kubernetes/connectedClusters/endpoints/*`
-  - `Microsoft.Kubernetes/connectedClusters/events.k8s.io/events/read`
-  - `Microsoft.Kubernetes/connectedClusters/events/read`
-  - `Microsoft.Kubernetes/connectedClusters/extensions/daemonsets/*`
-  - `Microsoft.Kubernetes/connectedClusters/extensions/deployments/*`
-  - `Microsoft.Kubernetes/connectedClusters/extensions/ingresses/*`
-  - `Microsoft.Kubernetes/connectedClusters/extensions/networkpolicies/*`
-  - `Microsoft.Kubernetes/connectedClusters/extensions/replicasets/*`
-  - `Microsoft.Kubernetes/connectedClusters/limitranges/read`
-  - `Microsoft.Kubernetes/connectedClusters/namespaces/read`
-  - `Microsoft.Kubernetes/connectedClusters/networking.k8s.io/ingresses/*`
-  - `Microsoft.Kubernetes/connectedClusters/networking.k8s.io/networkpolicies/*`
-  - `Microsoft.Kubernetes/connectedClusters/persistentvolumeclaims/*`
-  - `Microsoft.Kubernetes/connectedClusters/pods/*`
-  - `Microsoft.Kubernetes/connectedClusters/policy/poddisruptionbudgets/*`
-  - `Microsoft.Kubernetes/connectedClusters/replicationcontrollers/*`
-  - `Microsoft.Kubernetes/connectedClusters/replicationcontrollers/*`
-  - `Microsoft.Kubernetes/connectedClusters/resourcequotas/read`
-  - `Microsoft.Kubernetes/connectedClusters/secrets/*`
-  - `Microsoft.Kubernetes/connectedClusters/serviceaccounts/*`
-  - `Microsoft.Kubernetes/connectedClusters/services/*`
-
----
-
-#### `Azure Arc Kubernetes Cluster Admin`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/write`
-  - `Microsoft.Resources/subscriptions/operationresults/read`
-  - `Microsoft.Resources/subscriptions/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
-- DataActions:
-  - `Microsoft.Kubernetes/connectedClusters/*`
-
----
-
-#### `Object Understanding Account Reader`
-
-
-- DataActions:
-  - `Microsoft.MixedReality/ObjectUnderstandingAccounts/ingest/read`
-
----
-
-#### `Azure Arc Enabled Kubernetes Cluster User Role`
-
-
-- Actions:
-  - `Microsoft.Resources/deployments/write`
-  - `Microsoft.Resources/subscriptions/operationresults/read`
-  - `Microsoft.Resources/subscriptions/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Kubernetes/connectedClusters/listClusterUserCredentials/action`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Support/*`
-
----
-
-#### `Services Hub Operator`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.ServicesHub/connectors/write`
-  - `Microsoft.ServicesHub/connectors/read`
-  - `Microsoft.ServicesHub/connectors/delete`
-  - `Microsoft.ServicesHub/connectors/checkAssessmentEntitlement/action`
-  - `Microsoft.ServicesHub/supportOfferingEntitlement/read`
-  - `Microsoft.ServicesHub/workspaces/read`
-
----
-
-#### `Azure Kubernetes Service RBAC Reader`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/write`
-  - `Microsoft.Resources/subscriptions/operationresults/read`
-  - `Microsoft.Resources/subscriptions/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
-- DataActions:
-  - `Microsoft.ContainerService/managedClusters/apps/controllerrevisions/read`
-  - `Microsoft.ContainerService/managedClusters/apps/daemonsets/read`
-  - `Microsoft.ContainerService/managedClusters/apps/deployments/read`
-  - `Microsoft.ContainerService/managedClusters/apps/replicasets/read`
-  - `Microsoft.ContainerService/managedClusters/apps/statefulsets/read`
-  - `Microsoft.ContainerService/managedClusters/autoscaling/horizontalpodautoscalers/read`
-  - `Microsoft.ContainerService/managedClusters/batch/cronjobs/read`
-  - `Microsoft.ContainerService/managedClusters/batch/jobs/read`
-  - `Microsoft.ContainerService/managedClusters/configmaps/read`
-  - `Microsoft.ContainerService/managedClusters/endpoints/read`
-  - `Microsoft.ContainerService/managedClusters/events.k8s.io/events/read`
-  - `Microsoft.ContainerService/managedClusters/events/read`
-  - `Microsoft.ContainerService/managedClusters/extensions/daemonsets/read`
-  - `Microsoft.ContainerService/managedClusters/extensions/deployments/read`
-  - `Microsoft.ContainerService/managedClusters/extensions/ingresses/read`
-  - `Microsoft.ContainerService/managedClusters/extensions/networkpolicies/read`
-  - `Microsoft.ContainerService/managedClusters/extensions/replicasets/read`
-  - `Microsoft.ContainerService/managedClusters/limitranges/read`
-  - `Microsoft.ContainerService/managedClusters/namespaces/read`
-  - `Microsoft.ContainerService/managedClusters/networking.k8s.io/ingresses/read`
-  - `Microsoft.ContainerService/managedClusters/networking.k8s.io/networkpolicies/read`
-  - `Microsoft.ContainerService/managedClusters/persistentvolumeclaims/read`
-  - `Microsoft.ContainerService/managedClusters/pods/read`
-  - `Microsoft.ContainerService/managedClusters/policy/poddisruptionbudgets/read`
-  - `Microsoft.ContainerService/managedClusters/replicationcontrollers/read`
-  - `Microsoft.ContainerService/managedClusters/replicationcontrollers/read`
-  - `Microsoft.ContainerService/managedClusters/resourcequotas/read`
-  - `Microsoft.ContainerService/managedClusters/serviceaccounts/read`
-  - `Microsoft.ContainerService/managedClusters/services/read`
-
----
-
-#### `Azure Kubernetes Service RBAC Writer`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/write`
-  - `Microsoft.Resources/subscriptions/operationresults/read`
-  - `Microsoft.Resources/subscriptions/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
-- DataActions:
-  - `Microsoft.ContainerService/managedClusters/apps/controllerrevisions/read`
-  - `Microsoft.ContainerService/managedClusters/apps/daemonsets/*`
-  - `Microsoft.ContainerService/managedClusters/apps/deployments/*`
-  - `Microsoft.ContainerService/managedClusters/apps/replicasets/*`
-  - `Microsoft.ContainerService/managedClusters/apps/statefulsets/*`
-  - `Microsoft.ContainerService/managedClusters/autoscaling/horizontalpodautoscalers/*`
-  - `Microsoft.ContainerService/managedClusters/batch/cronjobs/*`
-  - `Microsoft.ContainerService/managedClusters/batch/jobs/*`
-  - `Microsoft.ContainerService/managedClusters/configmaps/*`
-  - `Microsoft.ContainerService/managedClusters/endpoints/*`
-  - `Microsoft.ContainerService/managedClusters/events.k8s.io/events/read`
-  - `Microsoft.ContainerService/managedClusters/events/read`
-  - `Microsoft.ContainerService/managedClusters/extensions/daemonsets/*`
-  - `Microsoft.ContainerService/managedClusters/extensions/deployments/*`
-  - `Microsoft.ContainerService/managedClusters/extensions/ingresses/*`
-  - `Microsoft.ContainerService/managedClusters/extensions/networkpolicies/*`
-  - `Microsoft.ContainerService/managedClusters/extensions/replicasets/*`
-  - `Microsoft.ContainerService/managedClusters/limitranges/read`
-  - `Microsoft.ContainerService/managedClusters/namespaces/read`
-  - `Microsoft.ContainerService/managedClusters/networking.k8s.io/ingresses/*`
-  - `Microsoft.ContainerService/managedClusters/networking.k8s.io/networkpolicies/*`
-  - `Microsoft.ContainerService/managedClusters/persistentvolumeclaims/*`
-  - `Microsoft.ContainerService/managedClusters/pods/*`
-  - `Microsoft.ContainerService/managedClusters/policy/poddisruptionbudgets/*`
-  - `Microsoft.ContainerService/managedClusters/replicationcontrollers/*`
-  - `Microsoft.ContainerService/managedClusters/replicationcontrollers/*`
-  - `Microsoft.ContainerService/managedClusters/resourcequotas/read`
-  - `Microsoft.ContainerService/managedClusters/secrets/*`
-  - `Microsoft.ContainerService/managedClusters/serviceaccounts/*`
-  - `Microsoft.ContainerService/managedClusters/services/*`
-
----
-
-#### `Azure VM Managed identities restore Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-
----
-
-#### `Azure Maps Search and Render Data Reader`
-
-
-- DataActions:
-  - `Microsoft.Maps/accounts/services/render/read`
-  - `Microsoft.Maps/accounts/services/search/read`
-
----
-
-#### `Azure Spring Cloud Config Server Contributor`
-
-
-- DataActions:
-  - `Microsoft.AppPlatform/Spring/configService/read`
-  - `Microsoft.AppPlatform/Spring/configService/write`
-  - `Microsoft.AppPlatform/Spring/configService/delete`
-
----
-
-#### `Azure Spring Cloud Service Registry Contributor`
-
-
-- DataActions:
-  - `Microsoft.AppPlatform/Spring/eurekaService/read`
-  - `Microsoft.AppPlatform/Spring/eurekaService/write`
-  - `Microsoft.AppPlatform/Spring/eurekaService/delete`
-
----
-
-#### `Azure Spring Cloud Config Server Reader`
-
-
-- DataActions:
-  - `Microsoft.AppPlatform/Spring/configService/read`
-
----
-
-#### `Azure Arc VMware Administrator role `
-
-
-- Actions:
-  - `Microsoft.ConnectedVMwarevSphere/*`
-  - `Microsoft.Insights/AlertRules/Write`
-  - `Microsoft.Insights/AlertRules/Delete`
-  - `Microsoft.Insights/AlertRules/Read`
-  - `Microsoft.Insights/AlertRules/Activated/Action`
-  - `Microsoft.Insights/AlertRules/Resolved/Action`
-  - `Microsoft.Insights/AlertRules/Throttled/Action`
-  - `Microsoft.Insights/AlertRules/Incidents/Read`
-  - `Microsoft.Resources/deployments/read`
-  - `Microsoft.Resources/deployments/write`
-  - `Microsoft.Resources/deployments/delete`
-  - `Microsoft.Resources/deployments/cancel/action`
-  - `Microsoft.Resources/deployments/validate/action`
-  - `Microsoft.Resources/deployments/whatIf/action`
-  - `Microsoft.Resources/deployments/exportTemplate/action`
-  - `Microsoft.Resources/deployments/operations/read`
-  - `Microsoft.Resources/deployments/operationstatuses/read`
-  - `Microsoft.Resources/subscriptions/resourcegroups/deployments/read`
-  - `Microsoft.Resources/subscriptions/resourcegroups/deployments/write`
-  - `Microsoft.Resources/subscriptions/resourcegroups/deployments/operations/read`
-  - `Microsoft.Resources/subscriptions/resourcegroups/deployments/operationstatuses/read`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/subscriptions/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/subscriptions/operationresults/read`
-
----
-
-#### `Azure Arc VMware Private Clouds Onboarding`
-
-
-- Actions:
-  - `Microsoft.ConnectedVMwarevSphere/vcenters/Write`
-  - `Microsoft.ConnectedVMwarevSphere/vcenters/Read`
-  - `Microsoft.ConnectedVMwarevSphere/vcenters/Delete`
-  - `Microsoft.Insights/AlertRules/Write`
-  - `Microsoft.Insights/AlertRules/Delete`
-  - `Microsoft.Insights/AlertRules/Read`
-  - `Microsoft.Insights/AlertRules/Activated/Action`
-  - `Microsoft.Insights/AlertRules/Resolved/Action`
-  - `Microsoft.Insights/AlertRules/Throttled/Action`
-  - `Microsoft.Insights/AlertRules/Incidents/Read`
-  - `Microsoft.Resources/deployments/read`
-  - `Microsoft.Resources/deployments/write`
-  - `Microsoft.Resources/deployments/delete`
-  - `Microsoft.Resources/deployments/cancel/action`
-  - `Microsoft.Resources/deployments/validate/action`
-  - `Microsoft.Resources/deployments/whatIf/action`
-  - `Microsoft.Resources/deployments/exportTemplate/action`
-  - `Microsoft.Resources/deployments/operations/read`
-  - `Microsoft.Resources/deployments/operationstatuses/read`
-  - `Microsoft.Resources/subscriptions/resourcegroups/deployments/read`
-  - `Microsoft.Resources/subscriptions/resourcegroups/deployments/write`
-  - `Microsoft.Resources/subscriptions/resourcegroups/deployments/operations/read`
-  - `Microsoft.Resources/subscriptions/resourcegroups/deployments/operationstatuses/read`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/subscriptions/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/subscriptions/operationresults/read`
-  - `Microsoft.KubernetesConfiguration/extensions/Write`
-  - `Microsoft.KubernetesConfiguration/extensions/Read`
-  - `Microsoft.KubernetesConfiguration/extensions/Delete`
-  - `Microsoft.KubernetesConfiguration/operations/read`
-  - `Microsoft.ExtendedLocation/customLocations/Read`
-  - `Microsoft.ExtendedLocation/customLocations/Write`
-  - `Microsoft.ExtendedLocation/customLocations/Delete`
-  - `Microsoft.ExtendedLocation/customLocations/deploy/action`
-  - `Microsoft.ResourceConnector/appliances/Read`
-  - `Microsoft.ResourceConnector/appliances/Write`
-  - `Microsoft.ResourceConnector/appliances/Delete`
-
----
-
-#### `Azure Arc VMware Private Cloud User`
-
-
-- Actions:
-  - `Microsoft.Insights/AlertRules/Write`
-  - `Microsoft.Insights/AlertRules/Delete`
-  - `Microsoft.Insights/AlertRules/Read`
-  - `Microsoft.Insights/AlertRules/Activated/Action`
-  - `Microsoft.Insights/AlertRules/Resolved/Action`
-  - `Microsoft.Insights/AlertRules/Throttled/Action`
-  - `Microsoft.Insights/AlertRules/Incidents/Read`
-  - `Microsoft.Resources/deployments/read`
-  - `Microsoft.Resources/deployments/write`
-  - `Microsoft.Resources/deployments/delete`
-  - `Microsoft.Resources/deployments/cancel/action`
-  - `Microsoft.Resources/deployments/validate/action`
-  - `Microsoft.Resources/deployments/whatIf/action`
-  - `Microsoft.Resources/deployments/exportTemplate/action`
-  - `Microsoft.Resources/deployments/operations/read`
-  - `Microsoft.Resources/deployments/operationstatuses/read`
-  - `Microsoft.Resources/subscriptions/resourcegroups/deployments/read`
-  - `Microsoft.Resources/subscriptions/resourcegroups/deployments/write`
-  - `Microsoft.Resources/subscriptions/resourcegroups/deployments/operations/read`
-  - `Microsoft.Resources/subscriptions/resourcegroups/deployments/operationstatuses/read`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/subscriptions/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/subscriptions/operationresults/read`
-  - `Microsoft.ConnectedVMwarevSphere/virtualnetworks/join/action`
-  - `Microsoft.ConnectedVMwarevSphere/virtualnetworks/Read`
-  - `Microsoft.ConnectedVMwarevSphere/virtualmachinetemplates/clone/action`
-  - `Microsoft.ConnectedVMwarevSphere/virtualmachinetemplates/Read`
-  - `Microsoft.ConnectedVMwarevSphere/resourcepools/deploy/action`
-  - `Microsoft.ConnectedVMwarevSphere/resourcepools/Read`
-  - `Microsoft.ConnectedVMwarevSphere/hosts/deploy/action`
-  - `Microsoft.ConnectedVMwarevSphere/hosts/Read`
-  - `Microsoft.ConnectedVMwarevSphere/clusters/deploy/action`
-  - `Microsoft.ConnectedVMwarevSphere/clusters/Read`
-  - `Microsoft.ConnectedVMwarevSphere/datastores/allocateSpace/action`
-  - `Microsoft.ConnectedVMwarevSphere/datastores/Read`
-
----
-
-#### `Azure Maps Contributor`
-
-
-- Actions:
-  - `Microsoft.Maps/*`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-
----
-
-#### `Azure Arc VMware VM Contributor`
-
-
-- Actions:
-  - `Microsoft.ConnectedVMwarevSphere/virtualmachines/*`
-  - `Microsoft.Insights/AlertRules/Write`
-  - `Microsoft.Insights/AlertRules/Delete`
-  - `Microsoft.Insights/AlertRules/Read`
-  - `Microsoft.Insights/AlertRules/Activated/Action`
-  - `Microsoft.Insights/AlertRules/Resolved/Action`
-  - `Microsoft.Insights/AlertRules/Throttled/Action`
-  - `Microsoft.Insights/AlertRules/Incidents/Read`
-  - `Microsoft.Resources/deployments/read`
-  - `Microsoft.Resources/deployments/write`
-  - `Microsoft.Resources/deployments/delete`
-  - `Microsoft.Resources/deployments/cancel/action`
-  - `Microsoft.Resources/deployments/validate/action`
-  - `Microsoft.Resources/deployments/whatIf/action`
-  - `Microsoft.Resources/deployments/exportTemplate/action`
-  - `Microsoft.Resources/deployments/operations/read`
-  - `Microsoft.Resources/deployments/operationstatuses/read`
-  - `Microsoft.Resources/subscriptions/resourcegroups/deployments/read`
-  - `Microsoft.Resources/subscriptions/resourcegroups/deployments/write`
-  - `Microsoft.Resources/subscriptions/resourcegroups/deployments/operations/read`
-  - `Microsoft.Resources/subscriptions/resourcegroups/deployments/operationstatuses/read`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/subscriptions/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/subscriptions/operationresults/read`
-
----
-
-#### `Grafana Editor`
-
-
-- DataActions:
-  - `Microsoft.Dashboard/grafana/ActAsGrafanaEditor/action`
-
----
-
-#### `Automation Contributor`
-
-
-- Actions:
-  - `Microsoft.Automation/automationAccounts/*`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.Insights/ActionGroups/*`
-  - `Microsoft.Insights/ActivityLogAlerts/*`
-  - `Microsoft.Insights/MetricAlerts/*`
-  - `Microsoft.Insights/ScheduledQueryRules/*`
-  - `Microsoft.Insights/diagnosticSettings/*`
-  - `Microsoft.OperationalInsights/workspaces/sharedKeys/action`
-
----
-
-#### `Grafana Viewer`
-
-
-- DataActions:
-  - `Microsoft.Dashboard/grafana/ActAsGrafanaViewer/action`
-
----
-
-#### `Azure Relay Owner`
-
-
-- Actions:
-  - `Microsoft.Relay/*`
-
-- DataActions:
-  - `Microsoft.Relay/*`
-
----
-
-#### `Azure Relay Listener`
-
-
-- Actions:
-  - `Microsoft.Relay/*/wcfRelays/read`
-  - `Microsoft.Relay/*/hybridConnections/read`
-
-- DataActions:
-  - `Microsoft.Relay/*/listen/action`
-
----
-
-#### `CodeSigning Certificate Profile Signer`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-
-- DataActions:
-  - `Microsoft.CodeSigning/certificateProfiles/Sign/action`
-
----
-
-#### `Azure Spring Cloud Service Registry Reader`
-
-
-- DataActions:
-  - `Microsoft.AppPlatform/Spring/eurekaService/read`
-
----
-
-#### `Device Provisioning Service Data Contributor`
-
-
-- DataActions:
-  - `Microsoft.Devices/provisioningServices/*`
-
----
-
-#### `Kubernetes Extension Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.KubernetesConfiguration/extensions/write`
-  - `Microsoft.KubernetesConfiguration/extensions/read`
-  - `Microsoft.KubernetesConfiguration/extensions/delete`
-  - `Microsoft.KubernetesConfiguration/extensions/operations/read`
-
----
-
-#### `Device Provisioning Service Data Reader`
-
-
-- DataActions:
-  - `Microsoft.Devices/provisioningServices/*/read`
-
----
-
-#### `Lab Services Reader`
-
-
-- Actions:
-  - `Microsoft.LabServices/*/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-
----
-
-#### `Lab Assistant`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.LabServices/labPlans/images/read`
-  - `Microsoft.LabServices/labPlans/read`
-  - `Microsoft.LabServices/labs/read`
-  - `Microsoft.LabServices/labs/schedules/read`
-  - `Microsoft.LabServices/labs/users/read`
-  - `Microsoft.LabServices/labs/users/invite/action`
-  - `Microsoft.LabServices/labs/virtualMachines/read`
-  - `Microsoft.LabServices/labs/virtualMachines/start/action`
-  - `Microsoft.LabServices/labs/virtualMachines/stop/action`
-  - `Microsoft.LabServices/labs/virtualMachines/reimage/action`
-  - `Microsoft.LabServices/labs/virtualMachines/redeploy/action`
-  - `Microsoft.LabServices/locations/usages/read`
-  - `Microsoft.LabServices/skus/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-
----
-
-#### `Lab Services Contributor`
-
-
-- Actions:
-  - `Microsoft.LabServices/*`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-
-- DataActions:
-  - `Microsoft.LabServices/labPlans/createLab/action`
-
----
-
-#### `Load Test Reader`
-
-
-- Actions:
-  - `Microsoft.LoadTestService/*/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Insights/alertRules/*`
-
-- DataActions:
-  - `Microsoft.LoadTestService/loadtests/readTest/action`
-
----
-
-#### `Cognitive Services Immersive Reader User`
-
-
-- DataActions:
-  - `Microsoft.CognitiveServices/accounts/ImmersiveReader/getcontentmodelforreader/action`
-
----
-
-#### `Chamber Admin`
-
-
-- Actions:
-  - `Microsoft.HpcWorkbench/*/read`
-  - `Microsoft.HpcWorkbench/instances/chambers/*`
-  - `Microsoft.HpcWorkbench/instances/consortiums/*/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-
----
-
-#### `Guest Configuration Resource Contributor`
-
-
-- Actions:
-  - `Microsoft.GuestConfiguration/guestConfigurationAssignments/write`
-  - `Microsoft.GuestConfiguration/guestConfigurationAssignments/read`
-  - `Microsoft.GuestConfiguration/guestConfigurationAssignments/*/read`
-
----
-
-#### `Chamber User`
-
-
-- Actions:
-  - `Microsoft.HpcWorkbench/instances/chambers/*/read`
-  - `Microsoft.HpcWorkbench/instances/consortiums/*/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-
----
-
-#### `Lab Operator`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.LabServices/labPlans/images/read`
-  - `Microsoft.LabServices/labPlans/read`
-  - `Microsoft.LabServices/labPlans/saveImage/action`
-  - `Microsoft.LabServices/labs/publish/action`
-  - `Microsoft.LabServices/labs/read`
-  - `Microsoft.LabServices/labs/schedules/read`
-  - `Microsoft.LabServices/labs/schedules/write`
-  - `Microsoft.LabServices/labs/schedules/delete`
-  - `Microsoft.LabServices/labs/users/read`
-  - `Microsoft.LabServices/labs/users/write`
-  - `Microsoft.LabServices/labs/users/delete`
-  - `Microsoft.LabServices/labs/users/invite/action`
-  - `Microsoft.LabServices/labs/virtualMachines/read`
-  - `Microsoft.LabServices/labs/virtualMachines/start/action`
-  - `Microsoft.LabServices/labs/virtualMachines/stop/action`
-  - `Microsoft.LabServices/labs/virtualMachines/reimage/action`
-  - `Microsoft.LabServices/labs/virtualMachines/redeploy/action`
-  - `Microsoft.LabServices/labs/virtualMachines/resetPassword/action`
-  - `Microsoft.LabServices/locations/usages/read`
-  - `Microsoft.LabServices/skus/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-
----
-
-#### `Lab Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.LabServices/labPlans/images/read`
-  - `Microsoft.LabServices/labPlans/read`
-  - `Microsoft.LabServices/labPlans/saveImage/action`
-  - `Microsoft.LabServices/labs/read`
-  - `Microsoft.LabServices/labs/write`
-  - `Microsoft.LabServices/labs/delete`
-  - `Microsoft.LabServices/labs/publish/action`
-  - `Microsoft.LabServices/labs/syncGroup/action`
-  - `Microsoft.LabServices/labs/schedules/read`
-  - `Microsoft.LabServices/labs/schedules/write`
-  - `Microsoft.LabServices/labs/schedules/delete`
-  - `Microsoft.LabServices/labs/users/read`
-  - `Microsoft.LabServices/labs/users/write`
-  - `Microsoft.LabServices/labs/users/delete`
-  - `Microsoft.LabServices/labs/users/invite/action`
-  - `Microsoft.LabServices/labs/virtualMachines/read`
-  - `Microsoft.LabServices/labs/virtualMachines/start/action`
-  - `Microsoft.LabServices/labs/virtualMachines/stop/action`
-  - `Microsoft.LabServices/labs/virtualMachines/reimage/action`
-  - `Microsoft.LabServices/labs/virtualMachines/redeploy/action`
-  - `Microsoft.LabServices/labs/virtualMachines/resetPassword/action`
-  - `Microsoft.LabServices/locations/usages/read`
-  - `Microsoft.LabServices/skus/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-
-- DataActions:
-  - `Microsoft.LabServices/labPlans/createLab/action`
-
----
-
-#### `Cognitive Services Language Owner`
-
-
-- Actions:
-  - `Microsoft.CognitiveServices/*/read`
-  - `Microsoft.CognitiveServices/accounts/listkeys/action`
-  - `Microsoft.Authorization/roleAssignments/read`
-  - `Microsoft.Authorization/roleDefinitions/read`
-
-- DataActions:
-  - `Microsoft.CognitiveServices/accounts/LanguageAuthoring/*`
-  - `Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/*`
-
----
-
-#### `Cognitive Services LUIS Reader`
-
-
-- Actions:
-  - `Microsoft.CognitiveServices/*/read`
-  - `Microsoft.Authorization/roleAssignments/read`
-  - `Microsoft.Authorization/roleDefinitions/read`
-
-- DataActions:
-  - `Microsoft.CognitiveServices/accounts/LUIS/*/read`
-  - `Microsoft.CognitiveServices/accounts/LUIS/apps/testdatasets/write`
-
----
-
-#### `Cognitive Services Language Writer`
-
-
-- Actions:
-  - `Microsoft.CognitiveServices/*/read`
-  - `Microsoft.Authorization/roleAssignments/read`
-  - `Microsoft.Authorization/roleDefinitions/read`
-
-- DataActions:
-  - `Microsoft.CognitiveServices/accounts/LanguageAuthoring/*`
-  - `Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/*`
-
-- NotDataActions:
-  - `Microsoft.CognitiveServices/accounts/LanguageAuthoring/projects/publish/action`
-  - `Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/projects/deployments/write`
-
----
-
-#### `Cognitive Services LUIS Owner`
-
-
-- Actions:
-  - `Microsoft.CognitiveServices/*/read`
-  - `Microsoft.CognitiveServices/accounts/listkeys/action`
-  - `Microsoft.Authorization/roleAssignments/read`
-  - `Microsoft.Authorization/roleDefinitions/read`
-
-- DataActions:
-  - `Microsoft.CognitiveServices/accounts/LUIS/*`
-
----
-
-#### `Cognitive Services Language Reader`
-
-
-- Actions:
-  - `Microsoft.CognitiveServices/*/read`
-  - `Microsoft.Authorization/roleAssignments/read`
-  - `Microsoft.Authorization/roleDefinitions/read`
-
-- DataActions:
-  - `Microsoft.CognitiveServices/accounts/LanguageAuthoring/*/read`
-  - `Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/*/read`
-  - `Microsoft.CognitiveServices/accounts/ConversationalLanguageUnderstanding/projects/export/action`
-
----
-
-#### `Load Test Owner`
-
-
-- Actions:
-  - `Microsoft.LoadTestService/*`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Insights/alertRules/*`
-
-- DataActions:
-  - `Microsoft.LoadTestService/*`
-
----
-
-#### `PlayFab Contributor`
-
-
-- Actions:
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.PlayFab/*/read`
-  - `Microsoft.PlayFab/*/write`
-  - `Microsoft.PlayFab/*/delete`
-
----
-
-#### `Load Test Contributor`
-
-
-- Actions:
-  - `Microsoft.LoadTestService/*/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Insights/alertRules/*`
-
-- DataActions:
-  - `Microsoft.LoadTestService/loadtests/*`
-
----
-
-#### `Cognitive Services LUIS Writer`
-
-
-- Actions:
-  - `Microsoft.CognitiveServices/*/read`
-  - `Microsoft.Authorization/roleAssignments/read`
-  - `Microsoft.Authorization/roleDefinitions/read`
-
-- DataActions:
-  - `Microsoft.CognitiveServices/accounts/LUIS/*`
-
-- NotDataActions:
-  - `Microsoft.CognitiveServices/accounts/LUIS/apps/delete`
-  - `Microsoft.CognitiveServices/accounts/LUIS/apps/move/action`
-  - `Microsoft.CognitiveServices/accounts/LUIS/apps/publish/action`
-  - `Microsoft.CognitiveServices/accounts/LUIS/apps/settings/write`
-  - `Microsoft.CognitiveServices/accounts/LUIS/apps/azureaccounts/action`
-  - `Microsoft.CognitiveServices/accounts/LUIS/apps/azureaccounts/delete`
-
----
-
-#### `PlayFab Reader`
-
-
-- Actions:
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.PlayFab/*/read`
-
----
-
-#### `Cognitive Services Speech User`
-
-
-- Actions:
-  - `Microsoft.CognitiveServices/*/read`
-
-- DataActions:
-  - `Microsoft.CognitiveServices/accounts/SpeechServices/*/read`
-  - `Microsoft.CognitiveServices/accounts/SpeechServices/*/transcriptions/write`
-  - `Microsoft.CognitiveServices/accounts/SpeechServices/*/transcriptions/delete`
-  - `Microsoft.CognitiveServices/accounts/SpeechServices/*/transcriptions/read`
-  - `Microsoft.CognitiveServices/accounts/SpeechServices/*/frontend/action`
-  - `Microsoft.CognitiveServices/accounts/SpeechServices/text-dependent/*/action`
-  - `Microsoft.CognitiveServices/accounts/SpeechServices/text-independent/*/action`
-  - `Microsoft.CognitiveServices/accounts/CustomVoice/*/read`
-  - `Microsoft.CognitiveServices/accounts/CustomVoice/evaluations/*`
-  - `Microsoft.CognitiveServices/accounts/CustomVoice/longaudiosynthesis/*`
-
-- NotDataActions:
-  - `Microsoft.CognitiveServices/accounts/CustomVoice/trainingsets/files/read`
-  - `Microsoft.CognitiveServices/accounts/CustomVoice/datasets/files/read`
-  - `Microsoft.CognitiveServices/accounts/CustomVoice/trainingsets/utterances/read`
-
----
-
-#### `Cognitive Services Speech Contributor`
-
-
-- Actions:
-  - `Microsoft.CognitiveServices/*/read`
-
-- DataActions:
-  - `Microsoft.CognitiveServices/accounts/SpeechServices/*`
-  - `Microsoft.CognitiveServices/accounts/CustomVoice/*`
-
----
-
-#### `Azure Spring Cloud Data Reader`
-
-
-- DataActions:
-  - `Microsoft.AppPlatform/Spring/*/read`
-
----
-
-#### `Web PubSub Service Owner (Preview)`
-
-
-- DataActions:
-  - `Microsoft.SignalRService/WebPubSub/*`
-
----
-
-#### `Web PubSub Service Reader (Preview)`
-
-
-- DataActions:
-  - `Microsoft.SignalRService/WebPubSub/*/read`
-
----
-
-#### `Media Services Media Operator`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Insights/metrics/read`
-  - `Microsoft.Insights/metricDefinitions/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Media/mediaservices/*/read`
-  - `Microsoft.Media/mediaservices/assets/*`
-  - `Microsoft.Media/mediaservices/assets/assetfilters/*`
-  - `Microsoft.Media/mediaservices/streamingLocators/*`
-  - `Microsoft.Media/mediaservices/transforms/jobs/*`
-
-- NotActions:
-  - `Microsoft.Media/mediaservices/assets/getEncryptionKey/action`
-  - `Microsoft.Media/mediaservices/streamingLocators/listContentKeys/action`
-
----
-
-#### `Media Services Policy Administrator`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Insights/metrics/read`
-  - `Microsoft.Insights/metricDefinitions/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Media/mediaservices/*/read`
-  - `Microsoft.Media/mediaservices/assets/listStreamingLocators/action`
-  - `Microsoft.Media/mediaservices/streamingLocators/listPaths/action`
-  - `Microsoft.Media/mediaservices/accountFilters/*`
-  - `Microsoft.Media/mediaservices/streamingPolicies/*`
-  - `Microsoft.Media/mediaservices/contentKeyPolicies/*`
-  - `Microsoft.Media/mediaservices/transforms/*`
-
-- NotActions:
-  - `Microsoft.Media/mediaservices/contentKeyPolicies/getPolicyPropertiesWithSecrets/action`
-
----
-
-#### `Media Services Live Events Administrator`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Insights/metrics/read`
-  - `Microsoft.Insights/metricDefinitions/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Media/mediaservices/*/read`
-  - `Microsoft.Media/mediaservices/assets/*`
-  - `Microsoft.Media/mediaservices/assets/assetfilters/*`
-  - `Microsoft.Media/mediaservices/streamingLocators/*`
-  - `Microsoft.Media/mediaservices/liveEvents/*`
-
-- NotActions:
-  - `Microsoft.Media/mediaservices/assets/getEncryptionKey/action`
-  - `Microsoft.Media/mediaservices/streamingLocators/listContentKeys/action`
-
----
-
-#### `Cognitive Services Face Recognizer`
-
-
-- DataActions:
-  - `Microsoft.CognitiveServices/accounts/Face/detect/action`
-  - `Microsoft.CognitiveServices/accounts/Face/verify/action`
-  - `Microsoft.CognitiveServices/accounts/Face/identify/action`
-  - `Microsoft.CognitiveServices/accounts/Face/group/action`
-  - `Microsoft.CognitiveServices/accounts/Face/findsimilars/action`
-
----
-
-#### `Media Services Account Administrator`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Insights/metrics/read`
-  - `Microsoft.Insights/metricDefinitions/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Media/mediaservices/*/read`
-  - `Microsoft.Media/mediaservices/assets/listStreamingLocators/action`
-  - `Microsoft.Media/mediaservices/streamingLocators/listPaths/action`
-  - `Microsoft.Media/mediaservices/write`
-  - `Microsoft.Media/mediaservices/delete`
-  - `Microsoft.Media/mediaservices/privateEndpointConnectionsApproval/action`
-  - `Microsoft.Media/mediaservices/privateEndpointConnections/*`
-
----
-
-#### `Microsoft Sentinel Automation Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Logic/workflows/triggers/read`
-  - `Microsoft.Logic/workflows/triggers/listCallbackUrl/action`
-  - `Microsoft.Logic/workflows/runs/read`
-
----
-
-#### `Quota Request Operator`
-
-
-- Actions:
-  - `Microsoft.Capacity/resourceProviders/locations/serviceLimits/read`
-  - `Microsoft.Capacity/resourceProviders/locations/serviceLimits/write`
-  - `Microsoft.Capacity/resourceProviders/locations/serviceLimitsRequests/read`
-  - `Microsoft.Capacity/register/action`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `FHIR Data Converter`
-
-
-- DataActions:
-  - `Microsoft.HealthcareApis/services/fhir/resources/convertData/action`
-  - `Microsoft.HealthcareApis/workspaces/fhirservices/resources/convertData/action`
-
----
-
-#### `Collaborative Runtime Operator`
-
-
-- Actions:
-  - `Microsoft.IndustryDataLifecycle/derivedModels/*`
-  - `Microsoft.IndustryDataLifecycle/pipelineSets/*`
-  - `Microsoft.IndustryDataLifecycle/modelMappings/*`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `CosmosRestoreOperator`
-
-
-- Actions:
-  - `Microsoft.DocumentDB/locations/restorableDatabaseAccounts/restore/action`
-  - `Microsoft.DocumentDB/locations/restorableDatabaseAccounts/*/read`
-  - `Microsoft.DocumentDB/locations/restorableDatabaseAccounts/read`
-
----
-
-#### `Object Anchors Account Owner`
-
-
-- DataActions:
-  - `Microsoft.MixedReality/ObjectAnchorsAccounts/ingest/action`
-  - `Microsoft.MixedReality/ObjectAnchorsAccounts/ingest/read`
-
----
-
-#### `WorkloadBuilder Migration Agent Role`
-
-
-- Actions:
-  - `Microsoft.WorkloadBuilder/migrationAgents/Read`
-  - `Microsoft.WorkloadBuilder/migrationAgents/Write`
-
----
-
-#### `Object Anchors Account Reader`
-
-
-- DataActions:
-  - `Microsoft.MixedReality/ObjectAnchorsAccounts/ingest/read`
-
----
-
-#### `EventGrid Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.EventGrid/*`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Security Detonation Chamber Reader`
-
-
-- DataActions:
-  - `Microsoft.SecurityDetonation/chambers/submissions/read`
-  - `Microsoft.SecurityDetonation/chambers/submissions/files/read`
-
----
-
-#### `DICOM Data Owner`
-
-
-- DataActions:
-  - `Microsoft.HealthcareApis/workspaces/dicomservices/resources/*`
-
----
-
-#### `EventGrid Data Sender`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.EventGrid/topics/read`
-  - `Microsoft.EventGrid/domains/read`
-  - `Microsoft.EventGrid/partnerNamespaces/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-
-- DataActions:
-  - `Microsoft.EventGrid/events/send/action`
-
----
-
-#### `DICOM Data Reader`
-
-
-- DataActions:
-  - `Microsoft.HealthcareApis/workspaces/dicomservices/resources/read`
-
----
-
-#### `Storage Table Data Reader`
-
-
-- Actions:
-  - `Microsoft.Storage/storageAccounts/tableServices/tables/read`
-
-- DataActions:
-  - `Microsoft.Storage/storageAccounts/tableServices/tables/entities/read`
-
----
-
-#### `Storage Table Data Contributor`
-
-
-- Actions:
-  - `Microsoft.Storage/storageAccounts/tableServices/tables/read`
-  - `Microsoft.Storage/storageAccounts/tableServices/tables/write`
-  - `Microsoft.Storage/storageAccounts/tableServices/tables/delete`
-
-- DataActions:
-  - `Microsoft.Storage/storageAccounts/tableServices/tables/entities/read`
-  - `Microsoft.Storage/storageAccounts/tableServices/tables/entities/write`
-  - `Microsoft.Storage/storageAccounts/tableServices/tables/entities/delete`
-  - `Microsoft.Storage/storageAccounts/tableServices/tables/entities/add/action`
-  - `Microsoft.Storage/storageAccounts/tableServices/tables/entities/update/action`
-
----
-
-#### `Azure Connected SQL Server Onboarding`
-
-
-- Actions:
-  - `Microsoft.AzureArcData/sqlServerInstances/read`
-  - `Microsoft.AzureArcData/sqlServerInstances/write`
-
----
-
-#### `Azure Relay Sender`
-
-
-- Actions:
-  - `Microsoft.Relay/*/wcfRelays/read`
-  - `Microsoft.Relay/*/hybridConnections/read`
-
-- DataActions:
-  - `Microsoft.Relay/*/send/action`
-
----
-
-#### `Grafana Admin`
-
-
-- DataActions:
-  - `Microsoft.Dashboard/grafana/ActAsGrafanaAdmin/action`
-
----
-
-#### `Disk Pool Operator`
-
-
-- Actions:
-  - `Microsoft.Compute/disks/write`
-  - `Microsoft.Compute/disks/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-
----
-
-#### `AzureML Data Scientist`
-
-
-- Actions:
-  - `Microsoft.MachineLearningServices/workspaces/*/read`
-  - `Microsoft.MachineLearningServices/workspaces/*/action`
-  - `Microsoft.MachineLearningServices/workspaces/*/delete`
-  - `Microsoft.MachineLearningServices/workspaces/*/write`
-
-- NotActions:
-  - `Microsoft.MachineLearningServices/workspaces/delete`
-  - `Microsoft.MachineLearningServices/workspaces/write`
-  - `Microsoft.MachineLearningServices/workspaces/computes/*/write`
-  - `Microsoft.MachineLearningServices/workspaces/computes/*/delete`
-  - `Microsoft.MachineLearningServices/workspaces/computes/listKeys/action`
-  - `Microsoft.MachineLearningServices/workspaces/listKeys/action`
-
----
-
-#### `IoT Hub Data Reader`
-
-
-- DataActions:
-  - `Microsoft.Devices/IotHubs/*/read`
-  - `Microsoft.Devices/IotHubs/fileUpload/notifications/action`
-
----
-
-#### `IoT Hub Twin Contributor`
-
-
-- DataActions:
-  - `Microsoft.Devices/IotHubs/twins/*`
-
----
-
-#### `AnyBuild Builder`
-
-
-- DataActions:
-  - `Microsoft.AnyBuild/clusters/build/write`
-  - `Microsoft.AnyBuild/clusters/build/read`
-
----
-
-#### `Media Services Streaming Endpoints Administrator`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Insights/metrics/read`
-  - `Microsoft.Insights/metricDefinitions/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Media/mediaservices/*/read`
-  - `Microsoft.Media/mediaservices/assets/listStreamingLocators/action`
-  - `Microsoft.Media/mediaservices/streamingLocators/listPaths/action`
-  - `Microsoft.Media/mediaservices/streamingEndpoints/*`
-
----
-
-#### `Stream Analytics Query Tester`
-
-
-- Actions:
-  - `Microsoft.StreamAnalytics/locations/TestQuery/action`
-  - `Microsoft.StreamAnalytics/locations/OperationResults/read`
-  - `Microsoft.StreamAnalytics/locations/SampleInput/action`
-  - `Microsoft.StreamAnalytics/locations/CompileQuery/action`
-
----
-
-#### `Search Index Data Reader`
-
-
-- DataActions:
-  - `Microsoft.Search/searchServices/indexes/documents/read`
-
----
-
-#### `Search Index Data Contributor`
-
-
-- DataActions:
-  - `Microsoft.Search/searchServices/indexes/documents/*`
-
----
-
-#### `Test Base Reader`
-
-
-- Actions:
-  - `Microsoft.TestBase/testBaseAccounts/packages/testResults/getDownloadUrl/action`
-  - `Microsoft.TestBase/testBaseAccounts/packages/testResults/getVideoDownloadUrl/action`
-  - `Microsoft.TestBase/testBaseAccounts/packages/getDownloadUrl/action`
-  - `Microsoft.TestBase/*/read`
-  - `Microsoft.TestBase/testBaseAccounts/customerEvents/write`
-  - `Microsoft.TestBase/testBaseAccounts/customerEvents/delete`
-
----
-
-#### `IoT Hub Registry Contributor`
-
-
-- DataActions:
-  - `Microsoft.Devices/IotHubs/devices/*`
-
----
-
-#### `IoT Hub Data Contributor`
-
-
-- DataActions:
-  - `Microsoft.Devices/IotHubs/*`
-
----
-
-#### `FHIR Data Contributor`
-
-
-- DataActions:
-  - `Microsoft.HealthcareApis/services/fhir/resources/*`
-  - `Microsoft.HealthcareApis/workspaces/fhirservices/resources/*`
-
----
-
-#### `EventGrid EventSubscription Reader`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.EventGrid/eventSubscriptions/read`
-  - `Microsoft.EventGrid/topicTypes/eventSubscriptions/read`
-  - `Microsoft.EventGrid/locations/eventSubscriptions/read`
-  - `Microsoft.EventGrid/locations/topicTypes/eventSubscriptions/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-
----
-
-#### `Graph Owner`
-
-
-- Actions:
-  - `Microsoft.EnterpriseKnowledgeGraph/services/conflation/read`
-  - `Microsoft.EnterpriseKnowledgeGraph/services/conflation/write`
-  - `Microsoft.EnterpriseKnowledgeGraph/services/sourceschema/read`
-  - `Microsoft.EnterpriseKnowledgeGraph/services/sourceschema/write`
-  - `Microsoft.EnterpriseKnowledgeGraph/services/knowledge/read`
-  - `Microsoft.EnterpriseKnowledgeGraph/services/knowledge/write`
-  - `Microsoft.EnterpriseKnowledgeGraph/services/intentclassification/read`
-  - `Microsoft.EnterpriseKnowledgeGraph/services/intentclassification/write`
-  - `Microsoft.EnterpriseKnowledgeGraph/services/ingestion/read`
-  - `Microsoft.EnterpriseKnowledgeGraph/services/ingestion/write`
-  - `Microsoft.EnterpriseKnowledgeGraph/services/ontology/read`
-  - `Microsoft.EnterpriseKnowledgeGraph/services/ontology/write`
-  - `Microsoft.EnterpriseKnowledgeGraph/services/delete`
-  - `Microsoft.EnterpriseKnowledgeGraph/operations/read`
-
----
-
-#### `EventGrid EventSubscription Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.EventGrid/eventSubscriptions/*`
-  - `Microsoft.EventGrid/topicTypes/eventSubscriptions/read`
-  - `Microsoft.EventGrid/locations/eventSubscriptions/read`
-  - `Microsoft.EventGrid/locations/topicTypes/eventSubscriptions/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `DocumentDB Account Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.DocumentDb/databaseAccounts/*`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action`
-
----
-
-#### `DNS Zone Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Network/dnsZones/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Knowledge Consumer`
-
-
-- Actions:
-  - `Microsoft.EnterpriseKnowledgeGraph/services/knowledge/read`
-
----
-
-#### `Lab Creator`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.LabServices/labAccounts/*/read`
-  - `Microsoft.LabServices/labAccounts/createLab/action`
-  - `Microsoft.LabServices/labAccounts/getPricingAndAvailability/action`
-  - `Microsoft.LabServices/labAccounts/getRestrictionsAndUsage/action`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.LabServices/labPlans/images/read`
-  - `Microsoft.LabServices/labPlans/read`
-  - `Microsoft.LabServices/labPlans/saveImage/action`
-  - `Microsoft.LabServices/labs/read`
-  - `Microsoft.LabServices/labs/schedules/read`
-  - `Microsoft.LabServices/labs/users/read`
-  - `Microsoft.LabServices/labs/virtualMachines/read`
-  - `Microsoft.LabServices/locations/usages/read`
-  - `Microsoft.LabServices/skus/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
-- DataActions:
-  - `Microsoft.LabServices/labPlans/createLab/action`
-
----
-
-#### `Key Vault Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.KeyVault/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
-- NotActions:
-  - `Microsoft.KeyVault/locations/deletedVaults/purge/action`
-  - `Microsoft.KeyVault/hsmPools/*`
-  - `Microsoft.KeyVault/managedHsms/*`
-
----
-
-#### `HDInsight Domain Services Contributor`
-
-
-- Actions:
-  - `Microsoft.AAD/*/read`
-  - `Microsoft.AAD/domainServices/*/read`
-  - `Microsoft.AAD/domainServices/oucontainer/*`
-
----
-
-#### `Intelligent Systems Account Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.IntelligentSystems/accounts/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Cost Management Reader`
-
-
-- Actions:
-  - `Microsoft.Consumption/*/read`
-  - `Microsoft.CostManagement/*/read`
-  - `Microsoft.Billing/billingPeriods/read`
-  - `Microsoft.Resources/subscriptions/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.Advisor/configurations/read`
-  - `Microsoft.Advisor/recommendations/read`
-  - `Microsoft.Management/managementGroups/read`
-  - `Microsoft.Billing/billingProperty/read`
-
----
-
-#### `Data Box Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.Databox/*`
-
----
-
-#### `Cost Management Contributor`
-
-
-- Actions:
-  - `Microsoft.Consumption/*`
-  - `Microsoft.CostManagement/*`
-  - `Microsoft.Billing/billingPeriods/read`
-  - `Microsoft.Resources/subscriptions/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.Advisor/configurations/read`
-  - `Microsoft.Advisor/recommendations/read`
-  - `Microsoft.Management/managementGroups/read`
-  - `Microsoft.Billing/billingProperty/read`
-
----
-
-#### `Contributor`
-
-
-- Actions:
-  - `*`
-
-- NotActions:
-  - `Microsoft.Authorization/*/Delete`
-  - `Microsoft.Authorization/*/Write`
-  - `Microsoft.Authorization/elevateAccess/Action`
-  - `Microsoft.Blueprint/blueprintAssignments/write`
-  - `Microsoft.Blueprint/blueprintAssignments/delete`
-  - `Microsoft.Compute/galleries/share/action`
-
----
-
-#### `Cosmos DB Account Reader Role`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.DocumentDB/*/read`
-  - `Microsoft.DocumentDB/databaseAccounts/readonlykeys/action`
-  - `Microsoft.Insights/MetricDefinitions/read`
-  - `Microsoft.Insights/Metrics/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Data Lake Analytics Developer`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.BigAnalytics/accounts/*`
-  - `Microsoft.DataLakeAnalytics/accounts/*`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
-- NotActions:
-  - `Microsoft.BigAnalytics/accounts/Delete`
-  - `Microsoft.BigAnalytics/accounts/TakeOwnership/action`
-  - `Microsoft.BigAnalytics/accounts/Write`
-  - `Microsoft.DataLakeAnalytics/accounts/Delete`
-  - `Microsoft.DataLakeAnalytics/accounts/TakeOwnership/action`
-  - `Microsoft.DataLakeAnalytics/accounts/Write`
-  - `Microsoft.DataLakeAnalytics/accounts/dataLakeStoreAccounts/Write`
-  - `Microsoft.DataLakeAnalytics/accounts/dataLakeStoreAccounts/Delete`
-  - `Microsoft.DataLakeAnalytics/accounts/storageAccounts/Write`
-  - `Microsoft.DataLakeAnalytics/accounts/storageAccounts/Delete`
-  - `Microsoft.DataLakeAnalytics/accounts/firewallRules/Write`
-  - `Microsoft.DataLakeAnalytics/accounts/firewallRules/Delete`
-  - `Microsoft.DataLakeAnalytics/accounts/computePolicies/Write`
-  - `Microsoft.DataLakeAnalytics/accounts/computePolicies/Delete`
-
----
-
-#### `DevTest Labs User`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Compute/availabilitySets/read`
-  - `Microsoft.Compute/virtualMachines/*/read`
-  - `Microsoft.Compute/virtualMachines/deallocate/action`
-  - `Microsoft.Compute/virtualMachines/read`
-  - `Microsoft.Compute/virtualMachines/restart/action`
-  - `Microsoft.Compute/virtualMachines/start/action`
-  - `Microsoft.DevTestLab/*/read`
-  - `Microsoft.DevTestLab/labs/claimAnyVm/action`
-  - `Microsoft.DevTestLab/labs/createEnvironment/action`
-  - `Microsoft.DevTestLab/labs/ensureCurrentUserProfile/action`
-  - `Microsoft.DevTestLab/labs/formulas/delete`
-  - `Microsoft.DevTestLab/labs/formulas/read`
-  - `Microsoft.DevTestLab/labs/formulas/write`
-  - `Microsoft.DevTestLab/labs/policySets/evaluatePolicies/action`
-  - `Microsoft.DevTestLab/labs/virtualMachines/claim/action`
-  - `Microsoft.DevTestLab/labs/virtualmachines/listApplicableSchedules/action`
-  - `Microsoft.DevTestLab/labs/virtualMachines/getRdpFileContents/action`
-  - `Microsoft.Network/loadBalancers/backendAddressPools/join/action`
-  - `Microsoft.Network/loadBalancers/inboundNatRules/join/action`
-  - `Microsoft.Network/networkInterfaces/*/read`
-  - `Microsoft.Network/networkInterfaces/join/action`
-  - `Microsoft.Network/networkInterfaces/read`
-  - `Microsoft.Network/networkInterfaces/write`
-  - `Microsoft.Network/publicIPAddresses/*/read`
-  - `Microsoft.Network/publicIPAddresses/join/action`
-  - `Microsoft.Network/publicIPAddresses/read`
-  - `Microsoft.Network/virtualNetworks/subnets/join/action`
-  - `Microsoft.Resources/deployments/operations/read`
-  - `Microsoft.Resources/deployments/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Storage/storageAccounts/listKeys/action`
-
-- NotActions:
-  - `Microsoft.Compute/virtualMachines/vmSizes/read`
-
----
-
-#### `Data Purger`
-
-
-- Actions:
-  - `Microsoft.Insights/components/*/read`
-  - `Microsoft.Insights/components/purge/action`
-  - `Microsoft.OperationalInsights/workspaces/*/read`
-  - `Microsoft.OperationalInsights/workspaces/purge/action`
-
----
-
-#### `Data Box Reader`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Databox/*/read`
-  - `Microsoft.Databox/jobs/listsecrets/action`
-  - `Microsoft.Databox/jobs/listcredentials/action`
-  - `Microsoft.Databox/locations/availableSkus/action`
-  - `Microsoft.Databox/locations/validateInputs/action`
-  - `Microsoft.Databox/locations/regionConfiguration/action`
-  - `Microsoft.Databox/locations/validateAddress/action`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Data Factory Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.DataFactory/dataFactories/*`
-  - `Microsoft.DataFactory/factories/*`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.EventGrid/eventSubscriptions/write`
-
----
-
-#### `Monitoring Contributor`
-
-
-- Actions:
-  - `*/read`
-  - `Microsoft.AlertsManagement/alerts/*`
-  - `Microsoft.AlertsManagement/alertsSummary/*`
-  - `Microsoft.Insights/actiongroups/*`
-  - `Microsoft.Insights/activityLogAlerts/*`
-  - `Microsoft.Insights/AlertRules/*`
-  - `Microsoft.Insights/components/*`
-  - `Microsoft.Insights/dataCollectionEndpoints/*`
-  - `Microsoft.Insights/dataCollectionRules/*`
-  - `Microsoft.Insights/dataCollectionRuleAssociations/*`
-  - `Microsoft.Insights/DiagnosticSettings/*`
-  - `Microsoft.Insights/eventtypes/*`
-  - `Microsoft.Insights/LogDefinitions/*`
-  - `Microsoft.Insights/metricalerts/*`
-  - `Microsoft.Insights/MetricDefinitions/*`
-  - `Microsoft.Insights/Metrics/*`
-  - `Microsoft.Insights/Register/Action`
-  - `Microsoft.Insights/scheduledqueryrules/*`
-  - `Microsoft.Insights/webtests/*`
-  - `Microsoft.Insights/workbooks/*`
-  - `Microsoft.Insights/workbooktemplates/*`
-  - `Microsoft.Insights/privateLinkScopes/*`
-  - `Microsoft.Insights/privateLinkScopeOperationStatuses/*`
-  - `Microsoft.OperationalInsights/workspaces/write`
-  - `Microsoft.OperationalInsights/workspaces/intelligencepacks/*`
-  - `Microsoft.OperationalInsights/workspaces/savedSearches/*`
-  - `Microsoft.OperationalInsights/workspaces/search/action`
-  - `Microsoft.OperationalInsights/workspaces/sharedKeys/action`
-  - `Microsoft.OperationalInsights/workspaces/storageinsightconfigs/*`
-  - `Microsoft.Support/*`
-  - `Microsoft.WorkloadMonitor/monitors/*`
-  - `Microsoft.AlertsManagement/smartDetectorAlertRules/*`
-  - `Microsoft.AlertsManagement/actionRules/*`
-  - `Microsoft.AlertsManagement/smartGroups/*`
-
----
-
-#### `New Relic APM Account Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `NewRelic.APM/accounts/*`
-
----
-
-#### `Network Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Network/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Monitoring Metrics Publisher`
-
-
-- Actions:
-  - `Microsoft.Insights/Register/Action`
-  - `Microsoft.Support/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-
-- DataActions:
-  - `Microsoft.Insights/Metrics/Write`
-  - `Microsoft.Insights/Telemetry/Write`
-
----
-
-#### `Monitoring Reader`
-
-
-- Actions:
-  - `*/read`
-  - `Microsoft.OperationalInsights/workspaces/search/action`
-  - `Microsoft.Support/*`
-
----
-
-#### `Reader and Data Access`
-
-
-- Actions:
-  - `Microsoft.Storage/storageAccounts/listKeys/action`
-  - `Microsoft.Storage/storageAccounts/ListAccountSas/action`
-  - `Microsoft.Storage/storageAccounts/read`
-
----
-
-#### `Resource Policy Contributor`
-
-
-- Actions:
-  - `*/read`
-  - `Microsoft.Authorization/policyassignments/*`
-  - `Microsoft.Authorization/policydefinitions/*`
-  - `Microsoft.Authorization/policyexemptions/*`
-  - `Microsoft.Authorization/policysetdefinitions/*`
-  - `Microsoft.PolicyInsights/*`
-  - `Microsoft.Support/*`
-
----
-
-#### `Redis Cache Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Cache/register/action`
-  - `Microsoft.Cache/redis/*`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Owner`
-
-
-- Actions:
-  - `*`
-
----
-
-#### `Reader`
-
-
-- Actions:
-  - `*/read`
-
----
-
-#### `Logic App Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.ClassicStorage/storageAccounts/listKeys/action`
-  - `Microsoft.ClassicStorage/storageAccounts/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Insights/metricAlerts/*`
-  - `Microsoft.Insights/diagnosticSettings/*`
-  - `Microsoft.Insights/logdefinitions/*`
-  - `Microsoft.Insights/metricDefinitions/*`
-  - `Microsoft.Logic/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/operationresults/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Storage/storageAccounts/listkeys/action`
-  - `Microsoft.Storage/storageAccounts/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.Web/connectionGateways/*`
-  - `Microsoft.Web/connections/*`
-  - `Microsoft.Web/customApis/*`
-  - `Microsoft.Web/serverFarms/join/action`
-  - `Microsoft.Web/serverFarms/read`
-  - `Microsoft.Web/sites/functions/listSecrets/action`
-
----
-
-#### `Managed Application Operator Role`
-
-
-- Actions:
-  - `*/read`
-  - `Microsoft.Solutions/applications/read`
-  - `Microsoft.Solutions/*/action`
-
----
-
-#### `Logic App Operator`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*/read`
-  - `Microsoft.Insights/metricAlerts/*/read`
-  - `Microsoft.Insights/diagnosticSettings/*/read`
-  - `Microsoft.Insights/metricDefinitions/*/read`
-  - `Microsoft.Logic/*/read`
-  - `Microsoft.Logic/workflows/disable/action`
-  - `Microsoft.Logic/workflows/enable/action`
-  - `Microsoft.Logic/workflows/validate/action`
-  - `Microsoft.Resources/deployments/operations/read`
-  - `Microsoft.Resources/subscriptions/operationresults/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.Web/connectionGateways/*/read`
-  - `Microsoft.Web/connections/*/read`
-  - `Microsoft.Web/customApis/*/read`
-  - `Microsoft.Web/serverFarms/read`
-
----
-
-#### `Log Analytics Reader`
-
-
-- Actions:
-  - `*/read`
-  - `Microsoft.OperationalInsights/workspaces/analytics/query/action`
-  - `Microsoft.OperationalInsights/workspaces/search/action`
-  - `Microsoft.Support/*`
-
-- NotActions:
-  - `Microsoft.OperationalInsights/workspaces/sharedKeys/read`
-
----
-
-#### `Log Analytics Contributor`
-
-
-- Actions:
-  - `*/read`
-  - `Microsoft.ClassicCompute/virtualMachines/extensions/*`
-  - `Microsoft.ClassicStorage/storageAccounts/listKeys/action`
-  - `Microsoft.Compute/virtualMachines/extensions/*`
-  - `Microsoft.HybridCompute/machines/extensions/write`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Insights/diagnosticSettings/*`
-  - `Microsoft.OperationalInsights/*`
-  - `Microsoft.OperationsManagement/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourcegroups/deployments/*`
-  - `Microsoft.Storage/storageAccounts/listKeys/action`
-  - `Microsoft.Support/*`
-
----
-
-#### `Management Group Contributor`
-
-
-- Actions:
-  - `Microsoft.Management/managementGroups/delete`
-  - `Microsoft.Management/managementGroups/read`
-  - `Microsoft.Management/managementGroups/subscriptions/delete`
-  - `Microsoft.Management/managementGroups/subscriptions/write`
-  - `Microsoft.Management/managementGroups/write`
-  - `Microsoft.Management/managementGroups/subscriptions/read`
-
----
-
-#### `Management Group Reader`
-
-
-- Actions:
-  - `Microsoft.Management/managementGroups/read`
-  - `Microsoft.Management/managementGroups/subscriptions/read`
-
----
-
-#### `Managed Identity Contributor`
-
-
-- Actions:
-  - `Microsoft.ManagedIdentity/userAssignedIdentities/read`
-  - `Microsoft.ManagedIdentity/userAssignedIdentities/write`
-  - `Microsoft.ManagedIdentity/userAssignedIdentities/delete`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Support/*`
-
----
-
-#### `Managed Applications Reader`
-
-
-- Actions:
-  - `*/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Solutions/jitRequests/*`
-
----
-
-#### `Managed Identity Operator`
-
-
-- Actions:
-  - `Microsoft.ManagedIdentity/userAssignedIdentities/*/read`
-  - `Microsoft.ManagedIdentity/userAssignedIdentities/*/assign/action`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Support/*`
-
----
-
-#### `Automation Runbook Operator`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Automation/automationAccounts/runbooks/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Automation Operator`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Automation/automationAccounts/hybridRunbookWorkerGroups/read`
-  - `Microsoft.Automation/automationAccounts/jobs/read`
-  - `Microsoft.Automation/automationAccounts/jobs/resume/action`
-  - `Microsoft.Automation/automationAccounts/jobs/stop/action`
-  - `Microsoft.Automation/automationAccounts/jobs/streams/read`
-  - `Microsoft.Automation/automationAccounts/jobs/suspend/action`
-  - `Microsoft.Automation/automationAccounts/jobs/write`
-  - `Microsoft.Automation/automationAccounts/jobSchedules/read`
-  - `Microsoft.Automation/automationAccounts/jobSchedules/write`
-  - `Microsoft.Automation/automationAccounts/linkedWorkspace/read`
-  - `Microsoft.Automation/automationAccounts/read`
-  - `Microsoft.Automation/automationAccounts/runbooks/read`
-  - `Microsoft.Automation/automationAccounts/schedules/read`
-  - `Microsoft.Automation/automationAccounts/schedules/write`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Automation/automationAccounts/jobs/output/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Automation Job Operator`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Automation/automationAccounts/hybridRunbookWorkerGroups/read`
-  - `Microsoft.Automation/automationAccounts/jobs/read`
-  - `Microsoft.Automation/automationAccounts/jobs/resume/action`
-  - `Microsoft.Automation/automationAccounts/jobs/stop/action`
-  - `Microsoft.Automation/automationAccounts/jobs/streams/read`
-  - `Microsoft.Automation/automationAccounts/jobs/suspend/action`
-  - `Microsoft.Automation/automationAccounts/jobs/write`
-  - `Microsoft.Automation/automationAccounts/jobs/output/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Application Insights Snapshot Debugger`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Insights/components/*/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Attestation Reader`
-
-
-- Actions:
-  - `Microsoft.Attestation/attestationProviders/attestation/read`
-
----
-
-#### `Azure Kubernetes Service Cluster User Role`
-
-
-- Actions:
-  - `Microsoft.ContainerService/managedClusters/listClusterUserCredential/action`
-  - `Microsoft.ContainerService/managedClusters/read`
-
----
-
-#### `Azure Maps Data Reader`
-
-
-- DataActions:
-  - `Microsoft.Maps/accounts/*/read`
-
----
-
-#### `Azure Kubernetes Service Cluster Admin Role`
-
-
-- Actions:
-  - `Microsoft.ContainerService/managedClusters/listClusterAdminCredential/action`
-  - `Microsoft.ContainerService/managedClusters/accessProfiles/listCredential/action`
-  - `Microsoft.ContainerService/managedClusters/read`
-
----
-
-#### `Avere Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Compute/*/read`
-  - `Microsoft.Compute/availabilitySets/*`
-  - `Microsoft.Compute/proximityPlacementGroups/*`
-  - `Microsoft.Compute/virtualMachines/*`
-  - `Microsoft.Compute/disks/*`
-  - `Microsoft.Network/*/read`
-  - `Microsoft.Network/networkInterfaces/*`
-  - `Microsoft.Network/virtualNetworks/read`
-  - `Microsoft.Network/virtualNetworks/subnets/read`
-  - `Microsoft.Network/virtualNetworks/subnets/join/action`
-  - `Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action`
-  - `Microsoft.Network/networkSecurityGroups/join/action`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Storage/*/read`
-  - `Microsoft.Storage/storageAccounts/*`
-  - `Microsoft.Support/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/resources/read`
-
-- DataActions:
-  - `Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete`
-  - `Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read`
-  - `Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write`
-
----
-
-#### `Avere Operator`
-
-
-- Actions:
-  - `Microsoft.Compute/virtualMachines/read`
-  - `Microsoft.Network/networkInterfaces/read`
-  - `Microsoft.Network/networkInterfaces/write`
-  - `Microsoft.Network/virtualNetworks/read`
-  - `Microsoft.Network/virtualNetworks/subnets/read`
-  - `Microsoft.Network/virtualNetworks/subnets/join/action`
-  - `Microsoft.Network/networkSecurityGroups/join/action`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Storage/storageAccounts/blobServices/containers/delete`
-  - `Microsoft.Storage/storageAccounts/blobServices/containers/read`
-  - `Microsoft.Storage/storageAccounts/blobServices/containers/write`
-
-- DataActions:
-  - `Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete`
-  - `Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read`
-  - `Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write`
-
----
-
-#### `AcrImageSigner`
-
-
-- Actions:
-  - `Microsoft.ContainerRegistry/registries/sign/write`
-
-- DataActions:
-  - `Microsoft.ContainerRegistry/registries/trustedCollections/write`
-
----
-
-#### `AcrDelete`
-
-
-- Actions:
-  - `Microsoft.ContainerRegistry/registries/artifacts/delete`
-
----
-
-#### `AcrPull`
-
-
-- Actions:
-  - `Microsoft.ContainerRegistry/registries/pull/read`
-
----
-
-#### `AcrPush`
-
-
-- Actions:
-  - `Microsoft.ContainerRegistry/registries/pull/read`
-  - `Microsoft.ContainerRegistry/registries/push/write`
-
----
-
-#### `API Management Service Contributor`
-
-
-- Actions:
-  - `Microsoft.ApiManagement/service/*`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `API Management Service Reader Role`
-
-
-- Actions:
-  - `Microsoft.ApiManagement/service/*/read`
-  - `Microsoft.ApiManagement/service/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
-- NotActions:
-  - `Microsoft.ApiManagement/service/users/keys/read`
-
----
-
-#### `Application Insights Component Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Insights/generateLiveToken/read`
-  - `Microsoft.Insights/metricAlerts/*`
-  - `Microsoft.Insights/components/*`
-  - `Microsoft.Insights/scheduledqueryrules/*`
-  - `Microsoft.Insights/topology/read`
-  - `Microsoft.Insights/transactions/read`
-  - `Microsoft.Insights/webtests/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `API Management Service Operator Role`
-
-
-- Actions:
-  - `Microsoft.ApiManagement/service/*/read`
-  - `Microsoft.ApiManagement/service/backup/action`
-  - `Microsoft.ApiManagement/service/delete`
-  - `Microsoft.ApiManagement/service/managedeployments/action`
-  - `Microsoft.ApiManagement/service/read`
-  - `Microsoft.ApiManagement/service/restore/action`
-  - `Microsoft.ApiManagement/service/updatecertificate/action`
-  - `Microsoft.ApiManagement/service/updatehostname/action`
-  - `Microsoft.ApiManagement/service/write`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
-- NotActions:
-  - `Microsoft.ApiManagement/service/users/keys/read`
-
----
-
-#### `AcrQuarantineReader`
-
-
-- Actions:
-  - `Microsoft.ContainerRegistry/registries/quarantine/read`
-
-- DataActions:
-  - `Microsoft.ContainerRegistry/registries/quarantinedArtifacts/read`
-
----
-
-#### `AcrQuarantineWriter`
-
-
-- Actions:
-  - `Microsoft.ContainerRegistry/registries/quarantine/read`
-  - `Microsoft.ContainerRegistry/registries/quarantine/write`
-
-- DataActions:
-  - `Microsoft.ContainerRegistry/registries/quarantinedArtifacts/read`
-  - `Microsoft.ContainerRegistry/registries/quarantinedArtifacts/write`
-
----
-
-#### `Classic Storage Account Key Operator Service Role`
-
-
-- Actions:
-  - `Microsoft.ClassicStorage/storageAccounts/listkeys/action`
-  - `Microsoft.ClassicStorage/storageAccounts/regeneratekey/action`
-
----
-
-#### `ClearDB MySQL DB Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `successbricks.cleardb/databases/*`
-
----
-
-#### `Classic Storage Account Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.ClassicStorage/storageAccounts/*`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `CDN Profile Reader`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Cdn/edgenodes/read`
-  - `Microsoft.Cdn/operationresults/*`
-  - `Microsoft.Cdn/profiles/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Classic Network Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.ClassicNetwork/*`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Cognitive Services Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.CognitiveServices/*`
-  - `Microsoft.Features/features/read`
-  - `Microsoft.Features/providers/features/read`
-  - `Microsoft.Features/providers/features/register/action`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Insights/diagnosticSettings/*`
-  - `Microsoft.Insights/logDefinitions/read`
-  - `Microsoft.Insights/metricdefinitions/read`
-  - `Microsoft.Insights/metrics/read`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/deployments/operations/read`
-  - `Microsoft.Resources/subscriptions/operationresults/read`
-  - `Microsoft.Resources/subscriptions/read`
-  - `Microsoft.Resources/subscriptions/resourcegroups/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `CosmosBackupOperator`
-
-
-- Actions:
-  - `Microsoft.DocumentDB/databaseAccounts/backup/action`
-  - `Microsoft.DocumentDB/databaseAccounts/restore/action`
-
----
-
-#### `Cognitive Services Data Reader (Preview)`
-
-
-- DataActions:
-  - `Microsoft.CognitiveServices/*/read`
-
----
-
-#### `Classic Virtual Machine Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.ClassicCompute/domainNames/*`
-  - `Microsoft.ClassicCompute/virtualMachines/*`
-  - `Microsoft.ClassicNetwork/networkSecurityGroups/join/action`
-  - `Microsoft.ClassicNetwork/reservedIps/link/action`
-  - `Microsoft.ClassicNetwork/reservedIps/read`
-  - `Microsoft.ClassicNetwork/virtualNetworks/join/action`
-  - `Microsoft.ClassicNetwork/virtualNetworks/read`
-  - `Microsoft.ClassicStorage/storageAccounts/disks/read`
-  - `Microsoft.ClassicStorage/storageAccounts/images/read`
-  - `Microsoft.ClassicStorage/storageAccounts/listKeys/action`
-  - `Microsoft.ClassicStorage/storageAccounts/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Cognitive Services User`
-
-
-- Actions:
-  - `Microsoft.CognitiveServices/*/read`
-  - `Microsoft.CognitiveServices/accounts/listkeys/action`
-  - `Microsoft.Insights/alertRules/read`
-  - `Microsoft.Insights/diagnosticSettings/read`
-  - `Microsoft.Insights/logDefinitions/read`
-  - `Microsoft.Insights/metricdefinitions/read`
-  - `Microsoft.Insights/metrics/read`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/operations/read`
-  - `Microsoft.Resources/subscriptions/operationresults/read`
-  - `Microsoft.Resources/subscriptions/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
-- DataActions:
-  - `Microsoft.CognitiveServices/*`
-
----
-
-#### `Backup Operator`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Network/virtualNetworks/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/operationResults/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/backup/action`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationResults/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationsStatus/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/provisionInstantItemRecovery/action`
-  - `Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/accessToken/action`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/restore/action`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/revokeInstantItemRecovery/action`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/write`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/refreshContainers/action`
-  - `Microsoft.RecoveryServices/Vaults/backupJobs/*`
-  - `Microsoft.RecoveryServices/Vaults/backupJobsExport/action`
-  - `Microsoft.RecoveryServices/Vaults/backupOperationResults/*`
-  - `Microsoft.RecoveryServices/Vaults/backupPolicies/operationResults/read`
-  - `Microsoft.RecoveryServices/Vaults/backupPolicies/read`
-  - `Microsoft.RecoveryServices/Vaults/backupProtectableItems/*`
-  - `Microsoft.RecoveryServices/Vaults/backupProtectedItems/read`
-  - `Microsoft.RecoveryServices/Vaults/backupProtectionContainers/read`
-  - `Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read`
-  - `Microsoft.RecoveryServices/Vaults/certificates/write`
-  - `Microsoft.RecoveryServices/Vaults/extendedInformation/read`
-  - `Microsoft.RecoveryServices/Vaults/extendedInformation/write`
-  - `Microsoft.RecoveryServices/Vaults/monitoringAlerts/read`
-  - `Microsoft.RecoveryServices/Vaults/monitoringConfigurations/*`
-  - `Microsoft.RecoveryServices/Vaults/read`
-  - `Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read`
-  - `Microsoft.RecoveryServices/Vaults/registeredIdentities/read`
-  - `Microsoft.RecoveryServices/Vaults/registeredIdentities/write`
-  - `Microsoft.RecoveryServices/Vaults/usages/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Storage/storageAccounts/read`
-  - `Microsoft.RecoveryServices/Vaults/backupstorageconfig/*`
-  - `Microsoft.RecoveryServices/Vaults/backupValidateOperation/action`
-  - `Microsoft.RecoveryServices/Vaults/backupTriggerValidateOperation/action`
-  - `Microsoft.RecoveryServices/Vaults/backupValidateOperationResults/read`
-  - `Microsoft.RecoveryServices/Vaults/backupValidateOperationsStatuses/read`
-  - `Microsoft.RecoveryServices/Vaults/backupOperations/read`
-  - `Microsoft.RecoveryServices/Vaults/backupPolicies/operations/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/write`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/inquire/action`
-  - `Microsoft.RecoveryServices/Vaults/backupEngines/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/write`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectableContainers/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/items/read`
-  - `Microsoft.RecoveryServices/locations/backupStatus/action`
-  - `Microsoft.RecoveryServices/locations/backupPreValidateProtection/action`
-  - `Microsoft.RecoveryServices/locations/backupValidateFeatures/action`
-  - `Microsoft.RecoveryServices/locations/backupAadProperties/read`
-  - `Microsoft.RecoveryServices/locations/backupCrrJobs/action`
-  - `Microsoft.RecoveryServices/locations/backupCrrJob/action`
-  - `Microsoft.RecoveryServices/locations/backupCrossRegionRestore/action`
-  - `Microsoft.RecoveryServices/locations/backupCrrOperationResults/read`
-  - `Microsoft.RecoveryServices/locations/backupCrrOperationsStatus/read`
-  - `Microsoft.RecoveryServices/Vaults/monitoringAlerts/write`
-  - `Microsoft.RecoveryServices/operations/read`
-  - `Microsoft.RecoveryServices/locations/operationStatus/read`
-  - `Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/read`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/read`
-  - `Microsoft.DataProtection/backupVaults/backupPolicies/read`
-  - `Microsoft.DataProtection/backupVaults/backupPolicies/read`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/recoveryPoints/read`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/recoveryPoints/read`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/findRestorableTimeRanges/action`
-  - `Microsoft.DataProtection/backupVaults/read`
-  - `Microsoft.DataProtection/backupVaults/operationResults/read`
-  - `Microsoft.DataProtection/backupVaults/read`
-  - `Microsoft.DataProtection/backupVaults/read`
-  - `Microsoft.DataProtection/locations/operationStatus/read`
-  - `Microsoft.DataProtection/locations/operationResults/read`
-  - `Microsoft.DataProtection/providers/operations/read`
-
----
-
-#### `Backup Reader`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.RecoveryServices/locations/allocatedStamp/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/operationResults/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationResults/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationsStatus/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/read`
-  - `Microsoft.RecoveryServices/Vaults/backupJobs/operationResults/read`
-  - `Microsoft.RecoveryServices/Vaults/backupJobs/read`
-  - `Microsoft.RecoveryServices/Vaults/backupJobsExport/action`
-  - `Microsoft.RecoveryServices/Vaults/backupOperationResults/read`
-  - `Microsoft.RecoveryServices/Vaults/backupPolicies/operationResults/read`
-  - `Microsoft.RecoveryServices/Vaults/backupPolicies/read`
-  - `Microsoft.RecoveryServices/Vaults/backupProtectedItems/read`
-  - `Microsoft.RecoveryServices/Vaults/backupProtectionContainers/read`
-  - `Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read`
-  - `Microsoft.RecoveryServices/Vaults/extendedInformation/read`
-  - `Microsoft.RecoveryServices/Vaults/monitoringAlerts/read`
-  - `Microsoft.RecoveryServices/Vaults/read`
-  - `Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read`
-  - `Microsoft.RecoveryServices/Vaults/registeredIdentities/read`
-  - `Microsoft.RecoveryServices/Vaults/backupstorageconfig/read`
-  - `Microsoft.RecoveryServices/Vaults/backupconfig/read`
-  - `Microsoft.RecoveryServices/Vaults/backupOperations/read`
-  - `Microsoft.RecoveryServices/Vaults/backupPolicies/operations/read`
-  - `Microsoft.RecoveryServices/Vaults/backupEngines/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/items/read`
-  - `Microsoft.RecoveryServices/locations/backupStatus/action`
-  - `Microsoft.RecoveryServices/Vaults/monitoringConfigurations/*`
-  - `Microsoft.RecoveryServices/Vaults/monitoringAlerts/write`
-  - `Microsoft.RecoveryServices/operations/read`
-  - `Microsoft.RecoveryServices/locations/operationStatus/read`
-  - `Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read`
-  - `Microsoft.RecoveryServices/Vaults/usages/read`
-  - `Microsoft.RecoveryServices/locations/backupValidateFeatures/action`
-  - `Microsoft.RecoveryServices/locations/backupCrrJobs/action`
-  - `Microsoft.RecoveryServices/locations/backupCrrJob/action`
-  - `Microsoft.RecoveryServices/locations/backupCrrOperationResults/read`
-  - `Microsoft.RecoveryServices/locations/backupCrrOperationsStatus/read`
-  - `Microsoft.DataProtection/locations/getBackupStatus/action`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/write`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/read`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/read`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/backup/action`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/validateRestore/action`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/restore/action`
-  - `Microsoft.DataProtection/backupVaults/backupPolicies/read`
-  - `Microsoft.DataProtection/backupVaults/backupPolicies/read`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/recoveryPoints/read`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/recoveryPoints/read`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/findRestorableTimeRanges/action`
-  - `Microsoft.DataProtection/backupVaults/read`
-  - `Microsoft.DataProtection/backupVaults/operationResults/read`
-  - `Microsoft.DataProtection/backupVaults/read`
-  - `Microsoft.DataProtection/backupVaults/read`
-  - `Microsoft.DataProtection/locations/operationStatus/read`
-  - `Microsoft.DataProtection/locations/operationResults/read`
-  - `Microsoft.DataProtection/backupVaults/validateForBackup/action`
-  - `Microsoft.DataProtection/providers/operations/read`
-
----
-
-#### `Billing Reader`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Billing/*/read`
-  - `Microsoft.Commerce/*/read`
-  - `Microsoft.Consumption/*/read`
-  - `Microsoft.Management/managementGroups/read`
-  - `Microsoft.CostManagement/*/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Azure Stack Registration Owner`
-
-
-- Actions:
-  - `Microsoft.AzureStack/edgeSubscriptions/read`
-  - `Microsoft.AzureStack/registrations/products/*/action`
-  - `Microsoft.AzureStack/registrations/products/read`
-  - `Microsoft.AzureStack/registrations/read`
-
----
-
-#### `Backup Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Network/virtualNetworks/read`
-  - `Microsoft.RecoveryServices/locations/*`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/*`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/*`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/refreshContainers/action`
-  - `Microsoft.RecoveryServices/Vaults/backupJobs/*`
-  - `Microsoft.RecoveryServices/Vaults/backupJobsExport/action`
-  - `Microsoft.RecoveryServices/Vaults/backupOperationResults/*`
-  - `Microsoft.RecoveryServices/Vaults/backupPolicies/*`
-  - `Microsoft.RecoveryServices/Vaults/backupProtectableItems/*`
-  - `Microsoft.RecoveryServices/Vaults/backupProtectedItems/*`
-  - `Microsoft.RecoveryServices/Vaults/backupProtectionContainers/*`
-  - `Microsoft.RecoveryServices/Vaults/backupSecurityPIN/*`
-  - `Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read`
-  - `Microsoft.RecoveryServices/Vaults/certificates/*`
-  - `Microsoft.RecoveryServices/Vaults/extendedInformation/*`
-  - `Microsoft.RecoveryServices/Vaults/monitoringAlerts/read`
-  - `Microsoft.RecoveryServices/Vaults/monitoringConfigurations/*`
-  - `Microsoft.RecoveryServices/Vaults/read`
-  - `Microsoft.RecoveryServices/Vaults/registeredIdentities/*`
-  - `Microsoft.RecoveryServices/Vaults/usages/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Storage/storageAccounts/read`
-  - `Microsoft.RecoveryServices/Vaults/backupstorageconfig/*`
-  - `Microsoft.RecoveryServices/Vaults/backupconfig/*`
-  - `Microsoft.RecoveryServices/Vaults/backupValidateOperation/action`
-  - `Microsoft.RecoveryServices/Vaults/write`
-  - `Microsoft.RecoveryServices/Vaults/backupOperations/read`
-  - `Microsoft.RecoveryServices/Vaults/backupEngines/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/*`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectableContainers/read`
-  - `Microsoft.RecoveryServices/locations/backupStatus/action`
-  - `Microsoft.RecoveryServices/locations/backupPreValidateProtection/action`
-  - `Microsoft.RecoveryServices/locations/backupValidateFeatures/action`
-  - `Microsoft.RecoveryServices/Vaults/monitoringAlerts/write`
-  - `Microsoft.RecoveryServices/operations/read`
-  - `Microsoft.RecoveryServices/locations/operationStatus/read`
-  - `Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.DataProtection/locations/getBackupStatus/action`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/write`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/delete`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/read`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/read`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/backup/action`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/validateRestore/action`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/restore/action`
-  - `Microsoft.DataProtection/backupVaults/backupPolicies/write`
-  - `Microsoft.DataProtection/backupVaults/backupPolicies/delete`
-  - `Microsoft.DataProtection/backupVaults/backupPolicies/read`
-  - `Microsoft.DataProtection/backupVaults/backupPolicies/read`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/recoveryPoints/read`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/recoveryPoints/read`
-  - `Microsoft.DataProtection/backupVaults/backupInstances/findRestorableTimeRanges/action`
-  - `Microsoft.DataProtection/backupVaults/write`
-  - `Microsoft.DataProtection/backupVaults/read`
-  - `Microsoft.DataProtection/backupVaults/operationResults/read`
-  - `Microsoft.DataProtection/locations/checkNameAvailability/action`
-  - `Microsoft.DataProtection/backupVaults/read`
-  - `Microsoft.DataProtection/backupVaults/read`
-  - `Microsoft.DataProtection/locations/operationStatus/read`
-  - `Microsoft.DataProtection/locations/operationResults/read`
-  - `Microsoft.DataProtection/backupVaults/validateForBackup/action`
-  - `Microsoft.DataProtection/providers/operations/read`
-
----
-
-#### `CDN Endpoint Reader`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Cdn/edgenodes/read`
-  - `Microsoft.Cdn/operationresults/*`
-  - `Microsoft.Cdn/profiles/endpoints/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `CDN Profile Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Cdn/edgenodes/read`
-  - `Microsoft.Cdn/operationresults/*`
-  - `Microsoft.Cdn/profiles/*`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `CDN Endpoint Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Cdn/edgenodes/read`
-  - `Microsoft.Cdn/operationresults/*`
-  - `Microsoft.Cdn/profiles/endpoints/*`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Blockchain Member Node Access (Preview)`
-
-
-- Actions:
-  - `Microsoft.Blockchain/blockchainMembers/transactionNodes/read`
-
-- DataActions:
-  - `Microsoft.Blockchain/blockchainMembers/transactionNodes/connect/action`
-
----
-
-#### `BizTalk Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.BizTalkServices/BizTalk/*`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Microsoft Sentinel Reader`
-
-
-- Actions:
-  - `Microsoft.SecurityInsights/*/read`
-  - `Microsoft.SecurityInsights/dataConnectorsCheckRequirements/action`
-  - `Microsoft.SecurityInsights/threatIntelligence/indicators/query/action`
-  - `Microsoft.SecurityInsights/threatIntelligence/queryIndicators/action`
-  - `Microsoft.OperationalInsights/workspaces/analytics/query/action`
-  - `Microsoft.OperationalInsights/workspaces/*/read`
-  - `Microsoft.OperationalInsights/workspaces/LinkedServices/read`
-  - `Microsoft.OperationalInsights/workspaces/savedSearches/read`
-  - `Microsoft.OperationsManagement/solutions/read`
-  - `Microsoft.OperationalInsights/workspaces/query/read`
-  - `Microsoft.OperationalInsights/workspaces/query/*/read`
-  - `Microsoft.OperationalInsights/querypacks/*/read`
-  - `Microsoft.OperationalInsights/workspaces/dataSources/read`
-  - `Microsoft.Insights/workbooks/read`
-  - `Microsoft.Insights/myworkbooks/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Workbook Reader`
-
-
-- Actions:
-  - `microsoft.insights/workbooks/read`
-  - `microsoft.insights/workbooktemplates/read`
-
----
-
-#### `Microsoft Sentinel Responder`
-
-
-- Actions:
-  - `Microsoft.SecurityInsights/*/read`
-  - `Microsoft.SecurityInsights/dataConnectorsCheckRequirements/action`
-  - `Microsoft.SecurityInsights/automationRules/*`
-  - `Microsoft.SecurityInsights/cases/*`
-  - `Microsoft.SecurityInsights/incidents/*`
-  - `Microsoft.SecurityInsights/threatIntelligence/indicators/appendTags/action`
-  - `Microsoft.SecurityInsights/threatIntelligence/indicators/query/action`
-  - `Microsoft.SecurityInsights/threatIntelligence/bulkTag/action`
-  - `Microsoft.SecurityInsights/threatIntelligence/indicators/appendTags/action`
-  - `Microsoft.SecurityInsights/threatIntelligence/indicators/replaceTags/action`
-  - `Microsoft.SecurityInsights/threatIntelligence/queryIndicators/action`
-  - `Microsoft.OperationalInsights/workspaces/analytics/query/action`
-  - `Microsoft.OperationalInsights/workspaces/*/read`
-  - `Microsoft.OperationalInsights/workspaces/dataSources/read`
-  - `Microsoft.OperationalInsights/workspaces/savedSearches/read`
-  - `Microsoft.OperationsManagement/solutions/read`
-  - `Microsoft.OperationalInsights/workspaces/query/read`
-  - `Microsoft.OperationalInsights/workspaces/query/*/read`
-  - `Microsoft.OperationalInsights/workspaces/dataSources/read`
-  - `Microsoft.OperationalInsights/querypacks/*/read`
-  - `Microsoft.Insights/workbooks/read`
-  - `Microsoft.Insights/myworkbooks/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
-- NotActions:
-  - `Microsoft.SecurityInsights/cases/*/Delete`
-  - `Microsoft.SecurityInsights/incidents/*/Delete`
-
----
-
-#### `Blueprint Operator`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Blueprint/blueprintAssignments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Support/*`
-
----
-
-#### `Microsoft Sentinel Contributor`
-
-
-- Actions:
-  - `Microsoft.SecurityInsights/*`
-  - `Microsoft.OperationalInsights/workspaces/analytics/query/action`
-  - `Microsoft.OperationalInsights/workspaces/*/read`
-  - `Microsoft.OperationalInsights/workspaces/savedSearches/*`
-  - `Microsoft.OperationsManagement/solutions/read`
-  - `Microsoft.OperationalInsights/workspaces/query/read`
-  - `Microsoft.OperationalInsights/workspaces/query/*/read`
-  - `Microsoft.OperationalInsights/workspaces/dataSources/read`
-  - `Microsoft.OperationalInsights/querypacks/*/read`
-  - `Microsoft.Insights/workbooks/*`
-  - `Microsoft.Insights/myworkbooks/read`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `SignalR/Web PubSub Contributor`
-
-
-- Actions:
-  - `Microsoft.SignalRService/*`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Support/*`
-
----
-
-#### `Azure Connected Machine Onboarding`
-
-
-- Actions:
-  - `Microsoft.HybridCompute/machines/read`
-  - `Microsoft.HybridCompute/machines/write`
-  - `Microsoft.HybridCompute/privateLinkScopes/read`
-  - `Microsoft.GuestConfiguration/guestConfigurationAssignments/read`
-
----
-
-#### `SignalR AccessKey Reader`
-
-
-- Actions:
-  - `Microsoft.SignalRService/*/read`
-  - `Microsoft.SignalRService/SignalR/listkeys/action`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Workbook Contributor`
-
-
-- Actions:
-  - `Microsoft.Insights/workbooks/write`
-  - `Microsoft.Insights/workbooks/delete`
-  - `Microsoft.Insights/workbooks/read`
-  - `Microsoft.Insights/workbooktemplates/write`
-  - `Microsoft.Insights/workbooktemplates/delete`
-  - `Microsoft.Insights/workbooktemplates/read`
-
----
-
-#### `Policy Insights Data Writer (Preview)`
-
-
-- Actions:
-  - `Microsoft.Authorization/policyassignments/read`
-  - `Microsoft.Authorization/policydefinitions/read`
-  - `Microsoft.Authorization/policyexemptions/read`
-  - `Microsoft.Authorization/policysetdefinitions/read`
-
-- DataActions:
-  - `Microsoft.PolicyInsights/checkDataPolicyCompliance/action`
-  - `Microsoft.PolicyInsights/policyEvents/logDataEvents/action`
-
----
-
-#### `Storage File Data SMB Share Reader`
-
-
-- DataActions:
-  - `Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read`
-
----
-
-#### `Storage File Data SMB Share Contributor`
-
-
-- DataActions:
-  - `Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read`
-  - `Microsoft.Storage/storageAccounts/fileServices/fileshares/files/write`
-  - `Microsoft.Storage/storageAccounts/fileServices/fileshares/files/delete`
-
----
-
-#### `Azure Service Bus Data Sender`
-
-
-- Actions:
-  - `Microsoft.ServiceBus/*/queues/read`
-  - `Microsoft.ServiceBus/*/topics/read`
-  - `Microsoft.ServiceBus/*/topics/subscriptions/read`
-
-- DataActions:
-  - `Microsoft.ServiceBus/*/send/action`
-
----
-
-#### `Azure Event Hubs Data Sender`
-
-
-- Actions:
-  - `Microsoft.EventHub/*/eventhubs/read`
-
-- DataActions:
-  - `Microsoft.EventHub/*/send/action`
-
----
-
-#### `Azure Service Bus Data Receiver`
-
-
-- Actions:
-  - `Microsoft.ServiceBus/*/queues/read`
-  - `Microsoft.ServiceBus/*/topics/read`
-  - `Microsoft.ServiceBus/*/topics/subscriptions/read`
-
-- DataActions:
-  - `Microsoft.ServiceBus/*/receive/action`
-
----
-
-#### `Storage File Data SMB Share Elevated Contributor`
-
-
-- DataActions:
-  - `Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read`
-  - `Microsoft.Storage/storageAccounts/fileServices/fileshares/files/write`
-  - `Microsoft.Storage/storageAccounts/fileServices/fileshares/files/delete`
-  - `Microsoft.Storage/storageAccounts/fileServices/fileshares/files/modifypermissions/action`
-
----
-
-#### `Blueprint Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Blueprint/blueprints/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Support/*`
-
----
-
-#### `Desktop Virtualization User`
-
-
-- DataActions:
-  - `Microsoft.DesktopVirtualization/applicationGroups/useApplications/action`
-
----
-
-#### `Private DNS Zone Contributor`
-
-
-- Actions:
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.Network/privateDnsZones/*`
-  - `Microsoft.Network/privateDnsOperationResults/*`
-  - `Microsoft.Network/privateDnsOperationStatuses/*`
-  - `Microsoft.Network/virtualNetworks/read`
-  - `Microsoft.Network/virtualNetworks/join/action`
-  - `Microsoft.Authorization/*/read`
-
----
-
-#### `Storage Blob Delegator`
-
-
-- Actions:
-  - `Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action`
-
----
-
-#### `Tag Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/resources/read`
-  - `Microsoft.Resources/subscriptions/resources/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Support/*`
-  - `Microsoft.Resources/tags/*`
-
----
-
-#### `Integration Service Environment Developer`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.Logic/integrationServiceEnvironments/read`
-  - `Microsoft.Logic/integrationServiceEnvironments/*/join/action`
-
----
-
-#### `Security Assessment Contributor`
-
-
-- Actions:
-  - `Microsoft.Security/assessments/write`
-
----
-
-#### `Remote Rendering Client`
-
-
-- DataActions:
-  - `Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/read`
-  - `Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/action`
-  - `Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/delete`
-  - `Microsoft.MixedReality/RemoteRenderingAccounts/render/read`
-  - `Microsoft.MixedReality/RemoteRenderingAccounts/diagnostic/read`
-
----
-
-#### `Managed Application Contributor Role`
-
-
-- Actions:
-  - `*/read`
-  - `Microsoft.Solutions/applications/*`
-  - `Microsoft.Solutions/register/action`
-  - `Microsoft.Resources/subscriptions/resourceGroups/*`
-  - `Microsoft.Resources/deployments/*`
-
----
-
-#### `Azure Digital Twins Data Owner`
-
-
-- DataActions:
-  - `Microsoft.DigitalTwins/eventroutes/*`
-  - `Microsoft.DigitalTwins/digitaltwins/*`
-  - `Microsoft.DigitalTwins/digitaltwins/commands/*`
-  - `Microsoft.DigitalTwins/digitaltwins/relationships/*`
-  - `Microsoft.DigitalTwins/models/*`
-  - `Microsoft.DigitalTwins/query/*`
-
----
-
-#### `Hierarchy Settings Administrator`
-
-
-- Actions:
-  - `Microsoft.Management/managementGroups/settings/write`
-  - `Microsoft.Management/managementGroups/settings/delete`
-
----
-
-#### `Azure Digital Twins Data Reader`
-
-
-- DataActions:
-  - `Microsoft.DigitalTwins/digitaltwins/read`
-  - `Microsoft.DigitalTwins/digitaltwins/relationships/read`
-  - `Microsoft.DigitalTwins/eventroutes/read`
-  - `Microsoft.DigitalTwins/models/read`
-  - `Microsoft.DigitalTwins/query/action`
-
----
-
-#### `Integration Service Environment Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.Logic/integrationServiceEnvironments/*`
-
----
-
-#### `Azure Kubernetes Service Contributor Role`
-
-
-- Actions:
-  - `Microsoft.ContainerService/managedClusters/read`
-  - `Microsoft.ContainerService/managedClusters/write`
-  - `Microsoft.Resources/deployments/*`
-
----
-
-#### `App Configuration Data Reader`
-
-
-- DataActions:
-  - `Microsoft.AppConfiguration/configurationStores/*/read`
-
----
-
-#### `Kubernetes Cluster - Azure Arc Onboarding`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Resources/deployments/write`
-  - `Microsoft.Resources/subscriptions/operationresults/read`
-  - `Microsoft.Resources/subscriptions/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Kubernetes/connectedClusters/Write`
-  - `Microsoft.Kubernetes/connectedClusters/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `App Configuration Data Owner`
-
-
-- DataActions:
-  - `Microsoft.AppConfiguration/configurationStores/*/read`
-  - `Microsoft.AppConfiguration/configurationStores/*/write`
-  - `Microsoft.AppConfiguration/configurationStores/*/delete`
-
----
-
-#### `Azure Connected Machine Resource Administrator`
-
-
-- Actions:
-  - `Microsoft.HybridCompute/machines/read`
-  - `Microsoft.HybridCompute/machines/write`
-  - `Microsoft.HybridCompute/machines/delete`
-  - `Microsoft.HybridCompute/machines/UpgradeExtensions/action`
-  - `Microsoft.HybridCompute/machines/extensions/read`
-  - `Microsoft.HybridCompute/machines/extensions/write`
-  - `Microsoft.HybridCompute/machines/extensions/delete`
-  - `Microsoft.HybridCompute/privateLinkScopes/*`
-  - `Microsoft.HybridCompute/*/read`
-  - `Microsoft.Resources/deployments/*`
-
----
-
-#### `Managed Services Registration assignment Delete Role`
-
-
-- Actions:
-  - `Microsoft.ManagedServices/registrationAssignments/read`
-  - `Microsoft.ManagedServices/registrationAssignments/delete`
-  - `Microsoft.ManagedServices/operationStatuses/read`
-
----
-
-#### `Experimentation Administrator`
-
-
-- Actions:
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Experimentation/experimentWorkspaces/read`
-
-- DataActions:
-  - `Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/admin/action`
-  - `Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/read`
-  - `Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/write`
-  - `Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/delete`
-  - `Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/experimentadmin/action`
-  - `Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/experiment/action`
-  - `Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/emergencystop/action`
-  - `Microsoft.Experimentation/experimentWorkspaces/read`
-  - `Microsoft.Experimentation/experimentWorkspaces/write`
-  - `Microsoft.Experimentation/experimentWorkspaces/delete`
-  - `Microsoft.Experimentation/experimentWorkspaces/admin/action`
-  - `Microsoft.Experimentation/experimentWorkspaces/metricwrite/action`
-  - `Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/metricwrite/action`
-
----
-
-#### `Remote Rendering Administrator`
-
-
-- DataActions:
-  - `Microsoft.MixedReality/RemoteRenderingAccounts/convert/action`
-  - `Microsoft.MixedReality/RemoteRenderingAccounts/convert/read`
-  - `Microsoft.MixedReality/RemoteRenderingAccounts/convert/delete`
-  - `Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/read`
-  - `Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/action`
-  - `Microsoft.MixedReality/RemoteRenderingAccounts/managesessions/delete`
-  - `Microsoft.MixedReality/RemoteRenderingAccounts/render/read`
-  - `Microsoft.MixedReality/RemoteRenderingAccounts/diagnostic/read`
-
----
-
-#### `Cognitive Services QnA Maker Editor`
-
-
-- Actions:
-  - `Microsoft.CognitiveServices/*/read`
-  - `Microsoft.Authorization/roleAssignments/read`
-  - `Microsoft.Authorization/roleDefinitions/read`
-
-- DataActions:
-  - `Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/create/write`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/write`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/train/action`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker/alterations/write`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/refreshkeys/action`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/write`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker/operations/read`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/create/write`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/write`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/train/action`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/write`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/refreshkeys/action`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/write`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker.v2/operations/read`
-  - `Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/read`
-  - `Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/download/read`
-  - `Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/create/write`
-  - `Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/write`
-  - `Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/generateanswer/action`
-  - `Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/train/action`
-  - `Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/read`
-  - `Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/write`
-  - `Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/read`
-  - `Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/refreshkeys/action`
-  - `Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/read`
-  - `Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/write`
-  - `Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/operations/read`
-
----
-
-#### `Experimentation Contributor`
-
-
-- Actions:
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Experimentation/experimentWorkspaces/read`
-
-- DataActions:
-  - `Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/read`
-  - `Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/write`
-  - `Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/delete`
-  - `Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/experiment/action`
-  - `Microsoft.Experimentation/experimentWorkspaces/experimentationGroups/emergencystop/action`
-  - `Microsoft.Experimentation/experimentWorkspaces/read`
-  - `Microsoft.Experimentation/experimentWorkspaces/write`
-  - `Microsoft.Experimentation/experimentWorkspaces/delete`
-
----
-
-#### `Cognitive Services QnA Maker Reader`
-
-
-- Actions:
-  - `Microsoft.CognitiveServices/*/read`
-  - `Microsoft.Authorization/roleAssignments/read`
-  - `Microsoft.Authorization/roleDefinitions/read`
-
-- DataActions:
-  - `Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/read`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/download/read`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker/knowledgebases/generateanswer/action`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker/alterations/read`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker/endpointkeys/read`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker/endpointsettings/read`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/read`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/download/read`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker.v2/knowledgebases/generateanswer/action`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker.v2/alterations/read`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointkeys/read`
-  - `Microsoft.CognitiveServices/accounts/QnAMaker.v2/endpointsettings/read`
-  - `Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/read`
-  - `Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/download/read`
-  - `Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/knowledgebases/generateanswer/action`
-  - `Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/alterations/read`
-  - `Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointkeys/read`
-  - `Microsoft.CognitiveServices/accounts/TextAnalytics/QnAMaker/endpointsettings/read`
-
----
-
-#### `SQL Security Manager`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Sql/locations/administratorAzureAsyncOperation/read`
-  - `Microsoft.Sql/managedInstances/databases/currentSensitivityLabels/*`
-  - `Microsoft.Sql/managedInstances/databases/recommendedSensitivityLabels/*`
-  - `Microsoft.Sql/managedInstances/databases/schemas/tables/columns/sensitivityLabels/*`
-  - `Microsoft.Sql/managedInstances/databases/securityAlertPolicies/*`
-  - `Microsoft.Sql/managedInstances/databases/sensitivityLabels/*`
-  - `Microsoft.Sql/managedInstances/databases/vulnerabilityAssessments/*`
-  - `Microsoft.Sql/managedInstances/securityAlertPolicies/*`
-  - `Microsoft.Sql/managedInstances/databases/transparentDataEncryption/*`
-  - `Microsoft.Sql/managedInstances/vulnerabilityAssessments/*`
-  - `Microsoft.Sql/servers/auditingSettings/*`
-  - `Microsoft.Sql/servers/extendedAuditingSettings/read`
-  - `Microsoft.Sql/servers/databases/auditingSettings/*`
-  - `Microsoft.Sql/servers/databases/auditRecords/read`
-  - `Microsoft.Sql/servers/databases/currentSensitivityLabels/*`
-  - `Microsoft.Sql/servers/databases/dataMaskingPolicies/*`
-  - `Microsoft.Sql/servers/databases/extendedAuditingSettings/read`
-  - `Microsoft.Sql/servers/databases/read`
-  - `Microsoft.Sql/servers/databases/recommendedSensitivityLabels/*`
-  - `Microsoft.Sql/servers/databases/schemas/read`
-  - `Microsoft.Sql/servers/databases/schemas/tables/columns/read`
-  - `Microsoft.Sql/servers/databases/schemas/tables/columns/sensitivityLabels/*`
-  - `Microsoft.Sql/servers/databases/schemas/tables/read`
-  - `Microsoft.Sql/servers/databases/securityAlertPolicies/*`
-  - `Microsoft.Sql/servers/databases/securityMetrics/*`
-  - `Microsoft.Sql/servers/databases/sensitivityLabels/*`
-  - `Microsoft.Sql/servers/databases/transparentDataEncryption/*`
-  - `Microsoft.Sql/servers/databases/vulnerabilityAssessments/*`
-  - `Microsoft.Sql/servers/databases/vulnerabilityAssessmentScans/*`
-  - `Microsoft.Sql/servers/databases/vulnerabilityAssessmentSettings/*`
-  - `Microsoft.Sql/servers/devOpsAuditingSettings/*`
-  - `Microsoft.Sql/servers/firewallRules/*`
-  - `Microsoft.Sql/servers/read`
-  - `Microsoft.Sql/servers/securityAlertPolicies/*`
-  - `Microsoft.Sql/servers/vulnerabilityAssessments/*`
-  - `Microsoft.Support/*`
-  - `Microsoft.Sql/servers/azureADOnlyAuthentications/*`
-  - `Microsoft.Sql/managedInstances/read`
-  - `Microsoft.Sql/managedInstances/azureADOnlyAuthentications/*`
-  - `Microsoft.Security/sqlVulnerabilityAssessments/*`
-  - `Microsoft.Sql/managedInstances/administrators/read`
-  - `Microsoft.Sql/servers/administrators/read`
-
----
-
-#### `Storage Account Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Insights/diagnosticSettings/*`
-  - `Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Storage/storageAccounts/*`
-  - `Microsoft.Support/*`
-
----
-
-#### `SQL DB Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Sql/locations/*/read`
-  - `Microsoft.Sql/servers/databases/*`
-  - `Microsoft.Sql/servers/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.Insights/metrics/read`
-  - `Microsoft.Insights/metricDefinitions/read`
-
-- NotActions:
-  - `Microsoft.Sql/servers/databases/ledgerDigestUploads/write`
-  - `Microsoft.Sql/servers/databases/ledgerDigestUploads/disable/action`
-  - `Microsoft.Sql/managedInstances/databases/currentSensitivityLabels/*`
-  - `Microsoft.Sql/managedInstances/databases/recommendedSensitivityLabels/*`
-  - `Microsoft.Sql/managedInstances/databases/schemas/tables/columns/sensitivityLabels/*`
-  - `Microsoft.Sql/managedInstances/databases/securityAlertPolicies/*`
-  - `Microsoft.Sql/managedInstances/databases/sensitivityLabels/*`
-  - `Microsoft.Sql/managedInstances/databases/vulnerabilityAssessments/*`
-  - `Microsoft.Sql/managedInstances/securityAlertPolicies/*`
-  - `Microsoft.Sql/managedInstances/vulnerabilityAssessments/*`
-  - `Microsoft.Sql/servers/databases/auditingSettings/*`
-  - `Microsoft.Sql/servers/databases/auditRecords/read`
-  - `Microsoft.Sql/servers/databases/currentSensitivityLabels/*`
-  - `Microsoft.Sql/servers/databases/dataMaskingPolicies/*`
-  - `Microsoft.Sql/servers/databases/extendedAuditingSettings/*`
-  - `Microsoft.Sql/servers/databases/recommendedSensitivityLabels/*`
-  - `Microsoft.Sql/servers/databases/schemas/tables/columns/sensitivityLabels/*`
-  - `Microsoft.Sql/servers/databases/securityAlertPolicies/*`
-  - `Microsoft.Sql/servers/databases/securityMetrics/*`
-  - `Microsoft.Sql/servers/databases/sensitivityLabels/*`
-  - `Microsoft.Sql/servers/databases/vulnerabilityAssessments/*`
-  - `Microsoft.Sql/servers/databases/vulnerabilityAssessmentScans/*`
-  - `Microsoft.Sql/servers/databases/vulnerabilityAssessmentSettings/*`
-  - `Microsoft.Sql/servers/vulnerabilityAssessments/*`
-
----
-
-#### `Spatial Anchors Account Owner`
-
-
-- DataActions:
-  - `Microsoft.MixedReality/SpatialAnchorsAccounts/create/action`
-  - `Microsoft.MixedReality/SpatialAnchorsAccounts/delete`
-  - `Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read`
-  - `Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read`
-  - `Microsoft.MixedReality/SpatialAnchorsAccounts/query/read`
-  - `Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read`
-  - `Microsoft.MixedReality/SpatialAnchorsAccounts/write`
-
----
-
-#### `SQL Managed Instance Contributor`
-
-
-- Actions:
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Network/networkSecurityGroups/*`
-  - `Microsoft.Network/routeTables/*`
-  - `Microsoft.Sql/locations/*/read`
-  - `Microsoft.Sql/locations/instanceFailoverGroups/*`
-  - `Microsoft.Sql/managedInstances/*`
-  - `Microsoft.Support/*`
-  - `Microsoft.Network/virtualNetworks/subnets/*`
-  - `Microsoft.Network/virtualNetworks/*`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Insights/metrics/read`
-  - `Microsoft.Insights/metricDefinitions/read`
-
-- NotActions:
-  - `Microsoft.Sql/managedInstances/azureADOnlyAuthentications/delete`
-  - `Microsoft.Sql/managedInstances/azureADOnlyAuthentications/write`
-
----
-
-#### `Storage Blob Data Owner`
-
-
-- Actions:
-  - `Microsoft.Storage/storageAccounts/blobServices/containers/*`
-  - `Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action`
-
-- DataActions:
-  - `Microsoft.Storage/storageAccounts/blobServices/containers/blobs/*`
-
----
-
-#### `Storage Blob Data Reader`
-
-
-- Actions:
-  - `Microsoft.Storage/storageAccounts/blobServices/containers/read`
-  - `Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action`
-
-- DataActions:
-  - `Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read`
-
----
-
-#### `Storage Blob Data Contributor`
-
-
-- Actions:
-  - `Microsoft.Storage/storageAccounts/blobServices/containers/delete`
-  - `Microsoft.Storage/storageAccounts/blobServices/containers/read`
-  - `Microsoft.Storage/storageAccounts/blobServices/containers/write`
-  - `Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action`
-
-- DataActions:
-  - `Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete`
-  - `Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read`
-  - `Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write`
-  - `Microsoft.Storage/storageAccounts/blobServices/containers/blobs/move/action`
-  - `Microsoft.Storage/storageAccounts/blobServices/containers/blobs/add/action`
-
----
-
-#### `SQL Server Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Sql/locations/*/read`
-  - `Microsoft.Sql/servers/*`
-  - `Microsoft.Support/*`
-  - `Microsoft.Insights/metrics/read`
-  - `Microsoft.Insights/metricDefinitions/read`
-
-- NotActions:
-  - `Microsoft.Sql/managedInstances/databases/currentSensitivityLabels/*`
-  - `Microsoft.Sql/managedInstances/databases/recommendedSensitivityLabels/*`
-  - `Microsoft.Sql/managedInstances/databases/schemas/tables/columns/sensitivityLabels/*`
-  - `Microsoft.Sql/managedInstances/databases/securityAlertPolicies/*`
-  - `Microsoft.Sql/managedInstances/databases/sensitivityLabels/*`
-  - `Microsoft.Sql/managedInstances/databases/vulnerabilityAssessments/*`
-  - `Microsoft.Sql/managedInstances/securityAlertPolicies/*`
-  - `Microsoft.Sql/managedInstances/vulnerabilityAssessments/*`
-  - `Microsoft.Sql/servers/auditingSettings/*`
-  - `Microsoft.Sql/servers/databases/auditingSettings/*`
-  - `Microsoft.Sql/servers/databases/auditRecords/read`
-  - `Microsoft.Sql/servers/databases/currentSensitivityLabels/*`
-  - `Microsoft.Sql/servers/databases/dataMaskingPolicies/*`
-  - `Microsoft.Sql/servers/databases/extendedAuditingSettings/*`
-  - `Microsoft.Sql/servers/databases/recommendedSensitivityLabels/*`
-  - `Microsoft.Sql/servers/databases/schemas/tables/columns/sensitivityLabels/*`
-  - `Microsoft.Sql/servers/databases/securityAlertPolicies/*`
-  - `Microsoft.Sql/servers/databases/securityMetrics/*`
-  - `Microsoft.Sql/servers/databases/sensitivityLabels/*`
-  - `Microsoft.Sql/servers/databases/vulnerabilityAssessments/*`
-  - `Microsoft.Sql/servers/databases/vulnerabilityAssessmentScans/*`
-  - `Microsoft.Sql/servers/databases/vulnerabilityAssessmentSettings/*`
-  - `Microsoft.Sql/servers/devOpsAuditingSettings/*`
-  - `Microsoft.Sql/servers/extendedAuditingSettings/*`
-  - `Microsoft.Sql/servers/securityAlertPolicies/*`
-  - `Microsoft.Sql/servers/vulnerabilityAssessments/*`
-  - `Microsoft.Sql/servers/azureADOnlyAuthentications/delete`
-  - `Microsoft.Sql/servers/azureADOnlyAuthentications/write`
-
----
-
-#### `Storage Account Key Operator Service Role`
-
-
-- Actions:
-  - `Microsoft.Storage/storageAccounts/listkeys/action`
-  - `Microsoft.Storage/storageAccounts/regeneratekey/action`
-
----
-
-#### `Security Manager (Legacy)`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.ClassicCompute/*/read`
-  - `Microsoft.ClassicCompute/virtualMachines/*/write`
-  - `Microsoft.ClassicNetwork/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Security/*`
-  - `Microsoft.Support/*`
-
----
-
-#### `Security Reader`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/read`
-  - `Microsoft.operationalInsights/workspaces/*/read`
-  - `Microsoft.Resources/deployments/*/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Security/*/read`
-  - `Microsoft.IoTSecurity/*/read`
-  - `Microsoft.Support/*/read`
-  - `Microsoft.Security/iotDefenderSettings/packageDownloads/action`
-  - `Microsoft.Security/iotDefenderSettings/downloadManagerActivation/action`
-  - `Microsoft.Security/iotSensors/downloadResetPassword/action`
-  - `Microsoft.IoTSecurity/defenderSettings/packageDownloads/action`
-  - `Microsoft.IoTSecurity/defenderSettings/downloadManagerActivation/action`
-  - `Microsoft.Management/managementGroups/read`
-
----
-
-#### `Security Admin`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Authorization/policyAssignments/*`
-  - `Microsoft.Authorization/policyDefinitions/*`
-  - `Microsoft.Authorization/policyExemptions/*`
-  - `Microsoft.Authorization/policySetDefinitions/*`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Management/managementGroups/read`
-  - `Microsoft.operationalInsights/workspaces/*/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Security/*`
-  - `Microsoft.IoTSecurity/*`
-  - `Microsoft.Support/*`
-
----
-
-#### `Scheduler Job Collections Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Scheduler/jobcollections/*`
-  - `Microsoft.Support/*`
-
----
-
-#### `Search Service Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Search/searchServices/*`
-  - `Microsoft.Support/*`
-
----
-
-#### `Spatial Anchors Account Reader`
-
-
-- DataActions:
-  - `Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read`
-  - `Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read`
-  - `Microsoft.MixedReality/SpatialAnchorsAccounts/query/read`
-  - `Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read`
-
----
-
-#### `Site Recovery Reader`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.RecoveryServices/locations/allocatedStamp/read`
-  - `Microsoft.RecoveryServices/Vaults/extendedInformation/read`
-  - `Microsoft.RecoveryServices/Vaults/monitoringAlerts/read`
-  - `Microsoft.RecoveryServices/Vaults/monitoringConfigurations/notificationConfiguration/read`
-  - `Microsoft.RecoveryServices/Vaults/read`
-  - `Microsoft.RecoveryServices/Vaults/refreshContainers/read`
-  - `Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read`
-  - `Microsoft.RecoveryServices/Vaults/registeredIdentities/read`
-  - `Microsoft.RecoveryServices/vaults/replicationAlertSettings/read`
-  - `Microsoft.RecoveryServices/vaults/replicationEvents/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/replicationNetworkMappings/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectableItems/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/recoveryPoints/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/replicationStorageClassificationMappings/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationvCenters/read`
-  - `Microsoft.RecoveryServices/vaults/replicationJobs/read`
-  - `Microsoft.RecoveryServices/vaults/replicationPolicies/read`
-  - `Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/read`
-  - `Microsoft.RecoveryServices/vaults/replicationVaultSettings/read`
-  - `Microsoft.RecoveryServices/Vaults/storageConfig/read`
-  - `Microsoft.RecoveryServices/Vaults/tokenInfo/read`
-  - `Microsoft.RecoveryServices/Vaults/usages/read`
-  - `Microsoft.RecoveryServices/Vaults/vaultTokens/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Site Recovery Operator`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Network/virtualNetworks/read`
-  - `Microsoft.RecoveryServices/locations/allocatedStamp/read`
-  - `Microsoft.RecoveryServices/locations/allocateStamp/action`
-  - `Microsoft.RecoveryServices/Vaults/extendedInformation/read`
-  - `Microsoft.RecoveryServices/Vaults/read`
-  - `Microsoft.RecoveryServices/Vaults/refreshContainers/read`
-  - `Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read`
-  - `Microsoft.RecoveryServices/Vaults/registeredIdentities/read`
-  - `Microsoft.RecoveryServices/vaults/replicationAlertSettings/read`
-  - `Microsoft.RecoveryServices/vaults/replicationEvents/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/checkConsistency/action`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/reassociateGateway/action`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/renewcertificate/action`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/replicationNetworkMappings/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectableItems/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/applyRecoveryPoint/action`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/failoverCommit/action`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/plannedFailover/action`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/recoveryPoints/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/repairReplication/action`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/reProtect/action`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/switchprotection/action`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/testFailover/action`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/testFailoverCleanup/action`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/unplannedFailover/action`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/updateMobilityService/action`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/refreshProvider/action`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/replicationStorageClassificationMappings/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/replicationvCenters/read`
-  - `Microsoft.RecoveryServices/vaults/replicationJobs/*`
-  - `Microsoft.RecoveryServices/vaults/replicationPolicies/read`
-  - `Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/failoverCommit/action`
-  - `Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/plannedFailover/action`
-  - `Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/read`
-  - `Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/reProtect/action`
-  - `Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/testFailover/action`
-  - `Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/testFailoverCleanup/action`
-  - `Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/unplannedFailover/action`
-  - `Microsoft.RecoveryServices/vaults/replicationVaultSettings/read`
-  - `Microsoft.RecoveryServices/Vaults/monitoringAlerts/*`
-  - `Microsoft.RecoveryServices/Vaults/monitoringConfigurations/notificationConfiguration/read`
-  - `Microsoft.RecoveryServices/Vaults/storageConfig/read`
-  - `Microsoft.RecoveryServices/Vaults/tokenInfo/read`
-  - `Microsoft.RecoveryServices/Vaults/usages/read`
-  - `Microsoft.RecoveryServices/Vaults/vaultTokens/read`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Storage/storageAccounts/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Spatial Anchors Account Contributor`
-
-
-- DataActions:
-  - `Microsoft.MixedReality/SpatialAnchorsAccounts/create/action`
-  - `Microsoft.MixedReality/SpatialAnchorsAccounts/discovery/read`
-  - `Microsoft.MixedReality/SpatialAnchorsAccounts/properties/read`
-  - `Microsoft.MixedReality/SpatialAnchorsAccounts/query/read`
-  - `Microsoft.MixedReality/SpatialAnchorsAccounts/submitdiag/read`
-  - `Microsoft.MixedReality/SpatialAnchorsAccounts/write`
-
----
-
-#### `Site Recovery Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Network/virtualNetworks/read`
-  - `Microsoft.RecoveryServices/locations/allocatedStamp/read`
-  - `Microsoft.RecoveryServices/locations/allocateStamp/action`
-  - `Microsoft.RecoveryServices/Vaults/certificates/write`
-  - `Microsoft.RecoveryServices/Vaults/extendedInformation/*`
-  - `Microsoft.RecoveryServices/Vaults/read`
-  - `Microsoft.RecoveryServices/Vaults/refreshContainers/read`
-  - `Microsoft.RecoveryServices/Vaults/registeredIdentities/*`
-  - `Microsoft.RecoveryServices/vaults/replicationAlertSettings/*`
-  - `Microsoft.RecoveryServices/vaults/replicationEvents/read`
-  - `Microsoft.RecoveryServices/vaults/replicationFabrics/*`
-  - `Microsoft.RecoveryServices/vaults/replicationJobs/*`
-  - `Microsoft.RecoveryServices/vaults/replicationPolicies/*`
-  - `Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/*`
-  - `Microsoft.RecoveryServices/vaults/replicationVaultSettings/*`
-  - `Microsoft.RecoveryServices/Vaults/storageConfig/*`
-  - `Microsoft.RecoveryServices/Vaults/tokenInfo/read`
-  - `Microsoft.RecoveryServices/Vaults/usages/read`
-  - `Microsoft.RecoveryServices/Vaults/vaultTokens/read`
-  - `Microsoft.RecoveryServices/Vaults/monitoringAlerts/*`
-  - `Microsoft.RecoveryServices/Vaults/monitoringConfigurations/notificationConfiguration/read`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Storage/storageAccounts/read`
-  - `Microsoft.RecoveryServices/vaults/replicationOperationStatus/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Azure Event Hubs Data Owner`
-
-
-- Actions:
-  - `Microsoft.EventHub/*`
-
-- DataActions:
-  - `Microsoft.EventHub/*`
-
----
-
-#### `Attestation Contributor`
-
-
-- Actions:
-  - `Microsoft.Attestation/attestationProviders/attestation/read`
-  - `Microsoft.Attestation/attestationProviders/attestation/write`
-  - `Microsoft.Attestation/attestationProviders/attestation/delete`
-
----
-
-#### `Azure Service Bus Data Owner`
-
-
-- Actions:
-  - `Microsoft.ServiceBus/*`
-
-- DataActions:
-  - `Microsoft.ServiceBus/*`
-
----
-
-#### `Web Plan Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.Web/serverFarms/*`
-  - `Microsoft.Web/hostingEnvironments/Join/Action`
-
----
-
-#### `Website Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Insights/components/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.Web/certificates/*`
-  - `Microsoft.Web/listSitesAssignedToHostName/read`
-  - `Microsoft.Web/serverFarms/join/action`
-  - `Microsoft.Web/serverFarms/read`
-  - `Microsoft.Web/sites/*`
-
----
-
-#### `Hybrid Server Onboarding`
-
-
-- Actions:
-  - `Microsoft.HybridCompute/machines/read`
-  - `Microsoft.HybridCompute/machines/write`
-
----
-
-#### `Azure Event Hubs Data Receiver`
-
-
-- Actions:
-  - `Microsoft.EventHub/*/eventhubs/consumergroups/read`
-
-- DataActions:
-  - `Microsoft.EventHub/*/receive/action`
-
----
-
-#### `Hybrid Server Resource Administrator`
-
-
-- Actions:
-  - `Microsoft.HybridCompute/machines/*`
-  - `Microsoft.HybridCompute/*/read`
 
 ---
-
-#### `HDInsight Cluster Operator`
-
-
-- Actions:
-  - `Microsoft.HDInsight/*/read`
-  - `Microsoft.HDInsight/clusters/getGatewaySettings/action`
-  - `Microsoft.HDInsight/clusters/updateGatewaySettings/action`
-  - `Microsoft.HDInsight/clusters/configurations/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Resources/deployments/operations/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Cosmos DB Operator`
-
-
-- Actions:
-  - `Microsoft.DocumentDb/databaseAccounts/*`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-  - `Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action`
-
-- NotActions:
-  - `Microsoft.DocumentDB/databaseAccounts/readonlyKeys/*`
-  - `Microsoft.DocumentDB/databaseAccounts/regenerateKey/*`
-  - `Microsoft.DocumentDB/databaseAccounts/listKeys/*`
-  - `Microsoft.DocumentDB/databaseAccounts/listConnectionStrings/*`
-  - `Microsoft.DocumentDB/databaseAccounts/sqlRoleDefinitions/write`
-  - `Microsoft.DocumentDB/databaseAccounts/sqlRoleDefinitions/delete`
-  - `Microsoft.DocumentDB/databaseAccounts/sqlRoleAssignments/write`
-  - `Microsoft.DocumentDB/databaseAccounts/sqlRoleAssignments/delete`
-
----
-
-#### `Storage Queue Data Reader`
-
-
-- Actions:
-  - `Microsoft.Storage/storageAccounts/queueServices/queues/read`
-
-- DataActions:
-  - `Microsoft.Storage/storageAccounts/queueServices/queues/messages/read`
-
----
-
-#### `Support Request Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Storage Queue Data Message Sender`
-
-
-- DataActions:
-  - `Microsoft.Storage/storageAccounts/queueServices/queues/messages/add/action`
-
----
-
-#### `Storage Queue Data Contributor`
-
-
-- Actions:
-  - `Microsoft.Storage/storageAccounts/queueServices/queues/delete`
-  - `Microsoft.Storage/storageAccounts/queueServices/queues/read`
-  - `Microsoft.Storage/storageAccounts/queueServices/queues/write`
-
-- DataActions:
-  - `Microsoft.Storage/storageAccounts/queueServices/queues/messages/delete`
-  - `Microsoft.Storage/storageAccounts/queueServices/queues/messages/read`
-  - `Microsoft.Storage/storageAccounts/queueServices/queues/messages/write`
-  - `Microsoft.Storage/storageAccounts/queueServices/queues/messages/process/action`
-
----
-
-#### `Storage Queue Data Message Processor`
-
-
-- DataActions:
-  - `Microsoft.Storage/storageAccounts/queueServices/queues/messages/read`
-  - `Microsoft.Storage/storageAccounts/queueServices/queues/messages/process/action`
-
----
-
-#### `Virtual Machine User Login`
-
-
-- Actions:
-  - `Microsoft.Network/publicIPAddresses/read`
-  - `Microsoft.Network/virtualNetworks/read`
-  - `Microsoft.Network/loadBalancers/read`
-  - `Microsoft.Network/networkInterfaces/read`
-  - `Microsoft.Compute/virtualMachines/*/read`
-  - `Microsoft.HybridCompute/machines/*/read`
-  - `Microsoft.HybridConnectivity/endpoints/listCredentials/action`
-
-- DataActions:
-  - `Microsoft.Compute/virtualMachines/login/action`
-  - `Microsoft.HybridCompute/machines/login/action`
-
----
-
-#### `Virtual Machine Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Compute/availabilitySets/*`
-  - `Microsoft.Compute/locations/*`
-  - `Microsoft.Compute/virtualMachines/*`
-  - `Microsoft.Compute/virtualMachineScaleSets/*`
-  - `Microsoft.Compute/cloudServices/*`
-  - `Microsoft.Compute/disks/write`
-  - `Microsoft.Compute/disks/read`
-  - `Microsoft.Compute/disks/delete`
-  - `Microsoft.DevTestLab/schedules/*`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Network/applicationGateways/backendAddressPools/join/action`
-  - `Microsoft.Network/loadBalancers/backendAddressPools/join/action`
-  - `Microsoft.Network/loadBalancers/inboundNatPools/join/action`
-  - `Microsoft.Network/loadBalancers/inboundNatRules/join/action`
-  - `Microsoft.Network/loadBalancers/probes/join/action`
-  - `Microsoft.Network/loadBalancers/read`
-  - `Microsoft.Network/locations/*`
-  - `Microsoft.Network/networkInterfaces/*`
-  - `Microsoft.Network/networkSecurityGroups/join/action`
-  - `Microsoft.Network/networkSecurityGroups/read`
-  - `Microsoft.Network/publicIPAddresses/join/action`
-  - `Microsoft.Network/publicIPAddresses/read`
-  - `Microsoft.Network/virtualNetworks/read`
-  - `Microsoft.Network/virtualNetworks/subnets/join/action`
-  - `Microsoft.RecoveryServices/locations/*`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/write`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/*/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read`
-  - `Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/write`
-  - `Microsoft.RecoveryServices/Vaults/backupPolicies/read`
-  - `Microsoft.RecoveryServices/Vaults/backupPolicies/write`
-  - `Microsoft.RecoveryServices/Vaults/read`
-  - `Microsoft.RecoveryServices/Vaults/usages/read`
-  - `Microsoft.RecoveryServices/Vaults/write`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.SerialConsole/serialPorts/connect/action`
-  - `Microsoft.SqlVirtualMachine/*`
-  - `Microsoft.Storage/storageAccounts/listKeys/action`
-  - `Microsoft.Storage/storageAccounts/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `User Access Administrator`
-
-
-- Actions:
-  - `*/read`
-  - `Microsoft.Authorization/*`
-  - `Microsoft.Support/*`
-
----
-
-#### `Traffic Manager Contributor`
-
-
-- Actions:
-  - `Microsoft.Authorization/*/read`
-  - `Microsoft.Insights/alertRules/*`
-  - `Microsoft.Network/trafficManagerProfiles/*`
-  - `Microsoft.ResourceHealth/availabilityStatuses/read`
-  - `Microsoft.Resources/deployments/*`
-  - `Microsoft.Resources/subscriptions/resourceGroups/read`
-  - `Microsoft.Support/*`
-
----
-
-#### `Virtual Machine Administrator Login`
-
-
-- Actions:
-  - `Microsoft.Network/publicIPAddresses/read`
-  - `Microsoft.Network/virtualNetworks/read`
-  - `Microsoft.Network/loadBalancers/read`
-  - `Microsoft.Network/networkInterfaces/read`
-  - `Microsoft.Compute/virtualMachines/*/read`
-  - `Microsoft.HybridCompute/machines/*/read`
-  - `Microsoft.HybridConnectivity/endpoints/listCredentials/action`
-
-- DataActions:
-  - `Microsoft.Compute/virtualMachines/login/action`
-  - `Microsoft.Compute/virtualMachines/loginAsAdmin/action`
-  - `Microsoft.HybridCompute/machines/login/action`
-  - `Microsoft.HybridCompute/machines/loginAsAdmin/action`
-
     
 ### Azure AD Role Definitions
 
@@ -5824,7 +511,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Application Developer`
@@ -5832,14 +518,12 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.directory/applications/createAsOwner`
 - `microsoft.directory/oAuth2PermissionGrants/createAsOwner`
 - `microsoft.directory/servicePrincipals/createAsOwner`
-
 ---
 
 #### `Attack Payload Author`
 
 - `microsoft.office365.protectionCenter/attackSimulator/payload/allProperties/allTasks`
 - `microsoft.office365.protectionCenter/attackSimulator/reports/allProperties/read`
-
 ---
 
 #### `Attack Simulation Administrator`
@@ -5847,7 +531,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.protectionCenter/attackSimulator/payload/allProperties/allTasks`
 - `microsoft.office365.protectionCenter/attackSimulator/reports/allProperties/read`
 - `microsoft.office365.protectionCenter/attackSimulator/simulation/allProperties/allTasks`
-
 ---
 
 #### `Attribute Assignment Administrator`
@@ -5860,7 +543,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.directory/servicePrincipals/customSecurityAttributes/update`
 - `microsoft.directory/users/customSecurityAttributes/read`
 - `microsoft.directory/users/customSecurityAttributes/update`
-
 ---
 
 #### `Attribute Assignment Reader`
@@ -5870,21 +552,18 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.directory/devices/customSecurityAttributes/read`
 - `microsoft.directory/servicePrincipals/customSecurityAttributes/read`
 - `microsoft.directory/users/customSecurityAttributes/read`
-
 ---
 
 #### `Attribute Definition Administrator`
 
 - `microsoft.directory/attributeSets/allProperties/allTasks`
 - `microsoft.directory/customSecurityAttributeDefinitions/allProperties/allTasks`
-
 ---
 
 #### `Attribute Definition Reader`
 
 - `microsoft.directory/attributeSets/allProperties/read`
 - `microsoft.directory/customSecurityAttributeDefinitions/allProperties/read`
-
 ---
 
 #### `Authentication Administrator`
@@ -5900,7 +579,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Authentication Policy Administrator`
@@ -5924,20 +602,17 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.directory/verifiableCredentials/configuration/allProperties/read`
 - `microsoft.directory/verifiableCredentials/configuration/allProperties/update`
 - `microsoft.azure.supportTickets/allEntities/allTasks`
-
 ---
 
 #### `Azure AD Joined Device Local Administrator`
 
 - `microsoft.directory/groupSettings/standard/read`
 - `microsoft.directory/groupSettingTemplates/standard/read`
-
 ---
 
 #### `Azure DevOps Administrator`
 
 - `microsoft.azure.devOps/allEntities/allTasks`
-
 ---
 
 #### `Azure Information Protection Administrator`
@@ -5949,19 +624,16 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `B2C IEF Keyset Administrator`
 
 - `microsoft.directory/b2cTrustFrameworkKeySet/allProperties/allTasks`
-
 ---
 
 #### `B2C IEF Policy Administrator`
 
 - `microsoft.directory/b2cTrustFrameworkPolicy/allProperties/allTasks`
-
 ---
 
 #### `Billing Administrator`
@@ -5973,14 +645,12 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Cloud App Security Administrator`
 
 - `microsoft.directory/cloudAppSecurity/allProperties/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Cloud Application Administrator`
@@ -6040,7 +710,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Cloud Device Administrator`
@@ -6058,7 +727,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.directory/signInReports/allProperties/read`
 - `microsoft.azure.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
-
 ---
 
 #### `Compliance Administrator`
@@ -6070,7 +738,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Compliance Data Administrator`
@@ -6084,7 +751,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Conditional Access Administrator`
@@ -6105,14 +771,12 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.directory/crossTenantAccessPolicies/basic/update`
 - `microsoft.directory/crossTenantAccessPolicies/owners/update`
 - `microsoft.directory/crossTenantAccessPolicies/tenantDefault/update`
-
 ---
 
 #### `Customer LockBox Access Approver`
 
 - `microsoft.office365.lockbox/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Desktop Analytics Administrator`
@@ -6121,7 +785,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.azure.serviceHealth/allEntities/allTasks`
 - `microsoft.azure.supportTickets/allEntities/allTasks`
 - `microsoft.office365.desktopAnalytics/allEntities/allTasks`
-
 ---
 
 #### `Device Join`
@@ -6140,7 +803,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.directory/devices/extensionAttributeSet3/update`
 - `microsoft.directory/devices/registeredOwners/update`
 - `microsoft.directory/devices/registeredUsers/update`
-
 ---
 
 #### `Device Users`
@@ -6201,7 +863,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.directory/users/photo/read`
 - `microsoft.directory/users/registeredDevices/read`
 - `microsoft.directory/users/scopedRoleMemberOf/read`
-
 ---
 
 #### `Directory Synchronization Accounts`
@@ -6254,7 +915,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.directory/servicePrincipals/permissions/update`
 - `microsoft.directory/servicePrincipals/policies/update`
 - `microsoft.directory/servicePrincipals/tag/update`
-
 ---
 
 #### `Directory Writers`
@@ -6293,7 +953,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.directory/users/manager/update`
 - `microsoft.directory/users/photo/update`
 - `microsoft.directory/users/userPrincipalName/update`
-
 ---
 
 #### `Domain Name Administrator`
@@ -6301,7 +960,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.directory/domains/allProperties/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Dynamics 365 Administrator`
@@ -6312,7 +970,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Edge Administrator`
@@ -6320,7 +977,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.edge/allEntities/allProperties/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Exchange Administrator`
@@ -6340,7 +996,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.usageReports/allEntities/allProperties/read`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Exchange Recipient Administrator`
@@ -6348,25 +1003,21 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.exchange/allRecipients/allProperties/allTasks`
 - `microsoft.office365.exchange/messageTracking/allProperties/allTasks`
 - `microsoft.office365.exchange/migration/allProperties/allTasks`
-
 ---
 
 #### `External ID User Flow Administrator`
 
 - `microsoft.directory/b2cUserFlow/allProperties/allTasks`
-
 ---
 
 #### `External ID User Flow Attribute Administrator`
 
 - `microsoft.directory/b2cUserAttribute/allProperties/allTasks`
-
 ---
 
 #### `External Identity Provider Administrator`
 
 - `microsoft.directory/identityProviders/allProperties/allTasks`
-
 ---
 
 #### `Global Administrator`
@@ -6491,7 +1142,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.teams/allEntities/allProperties/allTasks`
 - `microsoft.windows.defenderAdvancedThreatProtection/allEntities/allTasks`
 - `microsoft.windows.updatesDeployments/allEntities/allProperties/allTasks`
-
 ---
 
 #### `Global Reader`
@@ -6556,7 +1206,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.yammer/allEntities/allProperties/read`
 - `microsoft.teams/allEntities/allProperties/read`
 - `microsoft.windows.updatesDeployments/allEntities/allProperties/read`
-
 ---
 
 #### `Groups Administrator`
@@ -6584,7 +1233,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Guest Inviter`
@@ -6603,7 +1251,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.directory/users/photo/read`
 - `microsoft.directory/users/registeredDevices/read`
 - `microsoft.directory/users/scopedRoleMemberOf/read`
-
 ---
 
 #### `Guest User`
@@ -6645,7 +1292,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.directory/users/registeredDevices/read`
 - `microsoft.directory/users/scopedRoleMemberOf/read`
 - `microsoft.directory/users/password/update`
-
 ---
 
 #### `Helpdesk Administrator`
@@ -6658,7 +1304,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Hybrid Identity Administrator`
@@ -6709,7 +1354,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Identity Governance Administrator`
@@ -6718,7 +1362,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.directory/entitlementManagement/allProperties/allTasks`
 - `microsoft.directory/groups/members/update`
 - `microsoft.directory/servicePrincipals/appRoleAssignedTo/update`
-
 ---
 
 #### `Insights Administrator`
@@ -6729,14 +1372,12 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Insights Business Leader`
 
 - `microsoft.insights/reports/read`
 - `microsoft.insights/programs/update`
-
 ---
 
 #### `Intune Administrator`
@@ -6774,7 +1415,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.intune/allEntities/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Kaizala Administrator`
@@ -6783,7 +1423,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Knowledge Administrator`
@@ -6816,7 +1455,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.sharePoint/allEntities/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `License Administrator`
@@ -6830,7 +1468,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.azure.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Message Center Privacy Reader`
@@ -6838,14 +1475,12 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.messageCenter/messages/read`
 - `microsoft.office365.messageCenter/securityMessages/read`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Message Center Reader`
 
 - `microsoft.office365.messageCenter/messages/read`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Network Administrator`
@@ -6853,7 +1488,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.network/locations/allProperties/allTasks`
 - `microsoft.office365.network/performance/allProperties/read`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Office Apps Administrator`
@@ -6865,7 +1499,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.userCommunication/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Partner Tier1 Support`
@@ -6908,7 +1541,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Partner Tier2 Support`
@@ -6957,14 +1589,12 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Password Administrator`
 
 - `microsoft.directory/users/password/update`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Power BI Administrator`
@@ -6975,7 +1605,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
 - `microsoft.powerApps.powerBI/allEntities/allTasks`
-
 ---
 
 #### `Power Platform Administrator`
@@ -6988,13 +1617,11 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
 - `microsoft.powerApps/allEntities/allTasks`
-
 ---
 
 #### `Printer Administrator`
 
 - `microsoft.azure.print/allEntities/allProperties/allTasks`
-
 ---
 
 #### `Printer Technician`
@@ -7004,7 +1631,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.azure.print/printers/register`
 - `microsoft.azure.print/printers/unregister`
 - `microsoft.azure.print/printers/basic/update`
-
 ---
 
 #### `Privileged Authentication Administrator`
@@ -7020,7 +1646,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Privileged Role Administrator`
@@ -7041,7 +1666,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.directory/servicePrincipals/permissions/update`
 - `microsoft.directory/servicePrincipals/managePermissionGrantsForAll.microsoft-company-admin`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Reports Reader`
@@ -7053,7 +1677,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.network/performance/allProperties/read`
 - `microsoft.office365.usageReports/allEntities/allProperties/read`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Restricted Guest User`
@@ -7087,7 +1710,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.directory/users/registeredDevices/read`
 - `microsoft.directory/users/scopedRoleMemberOf/read`
 - `microsoft.directory/users/password/update`
-
 ---
 
 #### `Search Administrator`
@@ -7097,7 +1719,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Search Editor`
@@ -7105,7 +1726,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.messageCenter/messages/read`
 - `microsoft.office365.search/content/manage`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Security Administrator`
@@ -7154,7 +1774,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Security Operator`
@@ -7197,7 +1816,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.protectionCenter/attackSimulator/simulation/allProperties/read`
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Service Support Administrator`
@@ -7208,7 +1826,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `SharePoint Administrator`
@@ -7227,7 +1844,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.usageReports/allEntities/allProperties/read`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Skype for Business Administrator`
@@ -7239,7 +1855,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.usageReports/allEntities/allProperties/read`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Teams Administrator`
@@ -7277,7 +1892,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.teams/callQuality/allProperties/read`
 - `microsoft.teams/meetings/allProperties/allTasks`
 - `microsoft.teams/voice/allProperties/allTasks`
-
 ---
 
 #### `Teams Communications Support Engineer`
@@ -7298,14 +1912,12 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.skypeForBusiness/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
 - `microsoft.teams/callQuality/standard/read`
-
 ---
 
 #### `Teams Devices Administrator`
 
 - `microsoft.office365.webPortal/allEntities/standard/read`
 - `microsoft.teams/devices/standard/read`
-
 ---
 
 #### `Usage Summary Reports Reader`
@@ -7313,7 +1925,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.network/performance/allProperties/read`
 - `microsoft.office365.usageReports/allEntities/standard/read`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `User`
@@ -7390,7 +2001,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.directory/userInfos/openId/read`
 - `microsoft.directory/userInfos/phone/read`
 - `microsoft.directory/userInfos/profile/read`
-
 ---
 
 #### `User Administrator`
@@ -7437,7 +2047,6 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.serviceHealth/allEntities/allTasks`
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Windows 365 Administrator`
@@ -7467,13 +2076,11 @@ This section contains detailed definitions of each role along with their assigne
 - `microsoft.office365.supportTickets/allEntities/allTasks`
 - `microsoft.office365.usageReports/allEntities/allProperties/read`
 - `microsoft.office365.webPortal/allEntities/standard/read`
-
 ---
 
 #### `Windows Update Deployment Administrator`
 
 - `microsoft.windows.updatesDeployments/allEntities/allProperties/allTasks`
-
 ---
 
 #### `Workplace Device Join`