{
    "properties": {
        "assignableScopes": [
            "/subscriptions/{subscription-id}"
        ],
        "description": "Custom role for Azure portal use with the following resources: Azure SQL Database",
        "permissions": [
            {
                "actions": [
                    "Microsoft.Resources/subscriptions/resourceGroups/read",
                    "Microsoft.Sql/locations/*/read",
                    "Microsoft.Sql/locations/longTermRetentionBackups/read",
                    "Microsoft.Sql/locations/longTermRetentionServers/longTermRetentionBackups/read",
                    "Microsoft.Sql/servers/read",
                    "Microsoft.Sql/servers/databases/backupShortTermRetentionPolicies/read",
                    "Microsoft.Sql/servers/databases/backupShortTermRetentionPolicies/write",
                    "Microsoft.Sql/servers/databases/read",
                    "Microsoft.Sql/servers/databases/write",
                    "Microsoft.Sql/servers/databases/delete",
                    "Microsoft.Sql/servers/databases/export/action",
                    "Microsoft.Sql/servers/databases/import/action",
                    "Microsoft.Sql/servers/databases/importExportAzureAsyncOperation/read",
                    "Microsoft.Sql/servers/elasticPools/read",
                    "Microsoft.Sql/servers/import/action",
                    "Microsoft.Sql/servers/importExportOperationResults/read",
                    "Microsoft.Sql/servers/recoverableDatabases/read",
                    "Microsoft.Sql/servers/restorableDroppedDatabases/read"
                ],
                "dataActions": [
                ],
                "notActions": [
                ],
                "notDataActions": [
                ]
            }
        ],
        "roleName": "Commvault Cloud custom role for Azure SQL databases"
    }
}