{
    "properties": {
        "assignableScopes": [
            "/subscriptions/{subscription-id}"
        ],
        "description": "Custom role for Azure portal use with the following resources: Azure SQL Managed Instances",
        "permissions": [
            {
                "actions": [
                    "Microsoft.Resources/subscriptions/resourceGroups/read",
                    "Microsoft.Sql/locations/*/read",
                    "Microsoft.Sql/locations/longTermRetentionManagedInstances/longTermRetentionDatabases/longTermRetentionManagedInstanceBackups/read",
                    "Microsoft.Sql/locations/longTermRetentionManagedInstances/longTermRetentionManagedInstanceBackups/read",
                    "Microsoft.Sql/locations/longTermRetentionManagedInstanceBackups/read",
                    "Microsoft.Sql/locations/longTermRetentionManagedInstanceBackupAzureAsyncOperation/read",
                    "Microsoft.Sql/locations/managedDatabaseRestoreAzureAsyncOperation/completeRestore/action",
                    "Microsoft.Sql/managedInstances/databases/read",
                    "Microsoft.Sql/managedInstances/databases/write",
                    "Microsoft.Sql/managedInstances/read",
                    "Microsoft.Sql/managedInstances/restorableDroppedDatabases/read"
                ],
                "dataActions": [
                ],
                "notActions": [
                ],
                "notDataActions": [
                ]
            }
        ],
        "roleName": "Commvault Cloud custom role for Azure SQL Managed Instance"
    }
}