Framework/Configurations/SubscriptionSecurity/Subscription.RBAC.sample.json

{
  "ValidActiveAccounts": [
    {
      "Name": "Name of the account",
      "Description": "description for your account",
      "ObjectId": "tenant object id",
      "ObjectType": "ServicePrincipal or User or Group",
      "RoleDefinitionName": "subscription RBAC rolename",
      "Scope": "Scope of access",
      "Type": "Provision or Validate",
      "Tags": [ "Mandatory", "any custom user tags" ],
      "Enabled": false
    }
  ],
  "DeprecatedAccounts": [
    {
      "Name": "name of the account",
      "Description": "description for your account",
      "ObjectId": "tenant object id",
      "ObjectType": "ServicePrincipal or User or Group",
      "Type": "Validate",
      "Enabled": false
    }
  ]
}