{
    "properties": {
        "roleName": "Commvault Cloud custom role for Azure Blob and Azure Data Lake Storage Gen2",
        "description": "Commvault Cloud custom role for Azure Blob and Azure Data Lake Storage Gen2 at the subscription level",
        "assignableScopes": [
            "/subscriptions/{subscription-id}"
        ],
        "permissions": [
            {
                "actions": [
                    "Microsoft.Storage/storageAccounts/blobServices/containers/*",
                    "Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action",
                    "Microsoft.Storage/storageAccounts/read"
                ],
                "notActions": [],
                "dataActions": [
                    "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/*"
                ],
                "notDataActions": []
            }
        ]
    }
}