{
    "properties": {
        "assignableScopes": [
            "/subscriptions/{subscription-id}"
        ],
        "description": "Custom role for Azure portal use with the following resources: Azure Cosmos DB for Cassandra, MongoDB, NoSQL, and Table; Azure Database for MariaDB, MySQL, and PostgreSQL; Azure SQL Database; Azure SQL Managed Instance; and Azure Table Storage",
        "permissions": [
            {
                "actions": [
                    "Microsoft.DBforMariaDB/servers/*",
                    "Microsoft.DBforMariaDB/locations/*",
                    "Microsoft.DBforMySQL/servers/*",
                    "Microsoft.DBforMySQL/locations/*",
                    "Microsoft.DBforMySQL/flexibleServers/*",
                    "Microsoft.DBforPostgreSQL/servers/*",
                    "Microsoft.DBforPostgreSQL/locations/*",
                    "Microsoft.DBforPostgreSQL/flexibleServers/*",
                    "Microsoft.Resources/subscriptions/resourceGroups/*",
                    "Microsoft.Sql/locations/*/read",
                    "Microsoft.Sql/locations/longTermRetentionBackups/read",
                    "Microsoft.Sql/locations/longTermRetentionManagedInstances/longTermRetentionDatabases/longTermRetentionManagedInstanceBackups/read",
                    "Microsoft.Sql/locations/longTermRetentionManagedInstances/longTermRetentionManagedInstanceBackups/read",
                    "Microsoft.Sql/locations/longTermRetentionManagedInstanceBackups/read",
                    "Microsoft.Sql/locations/longTermRetentionManagedInstanceBackupAzureAsyncOperation/read",
                    "Microsoft.Sql/locations/longTermRetentionServers/longTermRetentionBackups/read",
                    "Microsoft.Sql/locations/managedDatabaseRestoreAzureAsyncOperation/completeRestore/action",
                    "Microsoft.Sql/managedInstances/databases/read",
                    "Microsoft.Sql/managedInstances/databases/write",
                    "Microsoft.Sql/managedInstances/read",
                    "Microsoft.Sql/managedInstances/restorableDroppedDatabases/read",
                    "Microsoft.Sql/servers/read",
					"Microsoft.Sql/servers/databases/backupShortTermRetentionPolicies/read",
                    "Microsoft.Sql/servers/databases/backupShortTermRetentionPolicies/write",
                    "Microsoft.Sql/servers/databases/read",
                    "Microsoft.Sql/servers/databases/write",
                    "Microsoft.Sql/servers/databases/delete",
                    "Microsoft.Sql/servers/databases/export/action",
                    "Microsoft.Sql/servers/databases/import/action",
                    "Microsoft.Sql/servers/elasticPools/read",
                    "Microsoft.Sql/servers/import/action",
                    "Microsoft.Sql/servers/importExportOperationResults/read",
                    "Microsoft.Sql/servers/recoverableDatabases/read",
                    "Microsoft.Sql/servers/restorableDroppedDatabases/read",
                    "Microsoft.DocumentDB/databaseAccounts/read",
                    "Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/*",
                    "Microsoft.DocumentDB/databaseAccounts/listKeys/action",
                    "Microsoft.DocumentDB/databaseAccounts/readonlykeys/action",
                    "Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/*",
                    "Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/*",
                    "Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/*",
                    "Microsoft.DocumentDB/databaseAccounts/tables/*",
                    "Microsoft.DocumentDB/cassandraClusters/read",
                    "Microsoft.Storage/storageAccounts/tableServices/*",
                    "Microsoft.Storage/storageAccounts/read",
                    "Microsoft.Storage/storageAccounts/listkeys/action",
                    "Microsoft.Resources/subscriptions/resourceGroups/read"
                ],
                "dataActions": [
                ],
                "notActions": [
                ],
                "notDataActions": [
                ]
            }
        ],
        "roleName": "Commvault Cloud custom role for Azure databases"
    }
}