{
    "properties": {
        "roleName": "Commvault Cloud custom role for Azure databases",
        "description": "Custom role for Azure portal use with the following resources: Azure Cosmos DB for Cassandra, MongoDB, NoSQL, and Table; Azure Database for MariaDB, MySQL, and PostgreSQL; Azure SQL Database; Azure SQL Managed Instance; and Azure Table Storage",
        "assignableScopes": [
            "/subscriptions/{subscription-id}"
        ],
        "permissions": [
            {
                "actions": [
                    "Microsoft.DBforMariaDB/servers/*",
                    "Microsoft.DBforMariaDB/locations/*",
                    "Microsoft.DBforMySQL/servers/*",
                    "Microsoft.DBforMySQL/locations/*",
                    "Microsoft.DBforMySQL/flexibleServers/*",
                    "Microsoft.DBforPostgreSQL/servers/*",
                    "Microsoft.DBforPostgreSQL/locations/*",
                    "Microsoft.DBforPostgreSQL/flexibleServers/*",
                    "Microsoft.Resources/subscriptions/resourceGroups/*",
                    "Microsoft.Sql/managedInstances/read",
                    "Microsoft.Sql/servers/read",
                    "Microsoft.Sql/servers/databases/read",
                    "Microsoft.Sql/servers/databases/write",
                    "Microsoft.Sql/servers/databases/delete",
                    "Microsoft.Sql/servers/databases/export/action",
                    "Microsoft.Sql/servers/databases/import/action",
                    "Microsoft.Sql/servers/elasticPools/read",
                    "Microsoft.Sql/servers/import/action",
                    "Microsoft.Sql/servers/importExportOperationResults/read",
                    "Microsoft.DocumentDB/databaseAccounts/read",
                    "Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/*",
                    "Microsoft.DocumentDB/databaseAccounts/listKeys/action",
                    "Microsoft.DocumentDB/databaseAccounts/readonlykeys/action",
                    "Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/*",
                    "Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/*",
                    "Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/*",
                    "Microsoft.DocumentDB/databaseAccounts/tables/*",
                    "Microsoft.DocumentDB/cassandraClusters/read",
                    "Microsoft.Storage/storageAccounts/tableServices/*",
                    "Microsoft.Storage/storageAccounts/read",
                    "Microsoft.Storage/storageAccounts/listkeys/action",
                    "Microsoft.Resources/subscriptions/resourceGroups/read"

                ],
                "notActions": [],
                "dataActions": [],
                "notDataActions": []
            }
        ]
    }
}