CustomRole.json

{
  "assignableScopes": [
    "/subscriptions/enter-subscription-id-here"
  ],
  "description": "Grants full access to manage all resources, including assigning identitry to an app, but does not allow us to remove the identity, manage assignments in Azure Blueprints, or share image galleries.",
  "name": "Custom SQL Demo Contributor Role",
  "permissions": [
    {
      "actions": [
        "*"
      ],
      "dataActions": [],
      "notActions": [
        "Microsoft.Authorization/*/Delete",
        "Microsoft.Authorization/elevateAccess/Action",
        "Microsoft.Blueprint/blueprintAssignments/write",
        "Microsoft.Blueprint/blueprintAssignments/delete",
        "Microsoft.Compute/galleries/share/action"
      ],
      "notDataActions": []
    }
  ],
  "roleName": "Custom SQL Demo Contributor",
  "type": "Microsoft.Authorization/roleDefinitions"
}