{
  "properties": {
    "roleName": "Commvault Cloud custom role for Azure Files",
    "description": "Commvault Cloud custom role for Azure Files at the subscription level.",
    "assignableScopes": [
      "/subscriptions/{subscription-id}"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.Storage/storageAccounts/read",
          "Microsoft.Storage/storageAccounts/listKeys/action",
          "Microsoft.Storage/storageAccounts/blobServices/containers/*",
          "Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action",
          "Microsoft.Storage/storageAccounts/fileServices/*"
        ],
        "notActions": [],
        "dataActions": [
          "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/*",
          "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/*",
          "Microsoft.Storage/storageAccounts/fileServices/readFileBackupSemantics/action",
          "Microsoft.Storage/storageAccounts/fileServices/writeFileBackupSemantics/action",
          "Microsoft.Storage/storageAccounts/fileServices/fileshares/files/modifypermissions/action"
        ],
        "notDataActions": []
      }
    ]
  }
}