{
  "properties": {
    "roleName": "Commvault Cloud custom role for Azure Blob and Azure Data Lake Storage Gen2",
    "description": "Commvault Cloud custom role for Azure Blob and Azure Data Lake Storage Gen2 at the subscription level",
    "assignableScopes": [
      "/subscriptions/{subscription-id}"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.Storage/storageAccounts/blobServices/containers/*",
          "Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action",
          "Microsoft.Storage/storageAccounts/read",
          "Microsoft.Storage/storageAccounts/blobServices/write",
          "Microsoft.Storage/storageAccounts/inventoryPolicies/read",
          "Microsoft.Storage/storageAccounts/inventoryPolicies/write",
          "Microsoft.Storage/storageAccounts/blobServices/containers/write",
          "Microsoft.Insights/metrics/read"
        ],
        "notActions": [],
        "dataActions": [
          "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/*"
        ],
        "notDataActions": []
      }
    ]
  }
}