output/20260723_081532/govviz/ALZ_20260723_081601/Enterprise-Scale/src/resources/Microsoft.Authorization/roleDefinitions/Subscription-Owner.json

{
  "name": "402344ce-48c4-5ac1-9320-16726050f964",
  "type": "Microsoft.Authorization/roleDefinitions",
  "apiVersion": "2022-04-01",
  "properties": {
      "roleName": "Subscription-Owner",
      "description": "Delegated role for subscription owner generated from subscription Owner role",
      "type": "customRole",
      "permissions": [
          {
              "actions": [
                  "*"
              ],
              "notActions": [
                  "Microsoft.Authorization/*/write",
                  "Microsoft.Network/vpnGateways/*",
                  "Microsoft.Network/expressRouteCircuits/*",
                  "Microsoft.Network/routeTables/write",
                  "Microsoft.Network/vpnSites/*"
              ],
              "dataActions": [],
              "notDataActions": []
          }
      ],
      "assignableScopes": [
          "/providers/Microsoft.Management/managementGroups/contoso"
      ]
  }
}