{
    "properties": {
        "roleName": "Commvault Cloud custom role for Azure Files",
        "description": "Commvault Cloud custom role for Azure Files at the subscription level.",
        "assignableScopes": [
            "/subscriptions/{subscription-id}"
        ],
        "permissions": [
            {
                "actions": [
                    "Microsoft.Storage/storageAccounts/read",
                    "Microsoft.Storage/storageAccounts/listKeys/action",
                    "Microsoft.Storage/storageAccounts/blobServices/containers/*",
                    "Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action",
                    "Microsoft.Storage/storageAccounts/fileServices/*"
                ],
                "notActions": [],
                "dataActions": [
                    "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/*",
                    "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/*",
                    "Microsoft.Storage/storageAccounts/fileServices/readFileBackupSemantics/action",
                    "Microsoft.Storage/storageAccounts/fileServices/writeFileBackupSemantics/action",
                    "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/modifypermissions/action"
                ],
                "notDataActions": []
            }
        ]
    }
}