{
    "properties": {
        "roleName": "CloudRewindDiscoverOnlyPermissions",
        "description": "This role is used by the Cloud Rewind Resilience Service to manage Azure resources for discovery",
        "assignableScopes": [
            "/subscriptions/<subscription-id>"
        ],
        "permissions": [
            {
                "actions": [
                    "Microsoft.Storage/storageAccounts/read",
                    "Microsoft.Network/networkSecurityGroups/read",
                    "Microsoft.KeyVault/vaults/privateEndpointConnections/read",
                    "Microsoft.Sql/servers/administrators/read",
                    "Microsoft.Sql/servers/virtualNetworkRules/read",
                    "Microsoft.Network/routeTables/read",
                    "Microsoft.Network/loadBalancers/frontendIPConfigurations/loadBalancerPools/read",
                    "Microsoft.Compute/virtualMachineScaleSets/read",
                    "Microsoft.Network/dnsResolvers/read",
                    "Microsoft.DocumentDB/databaseAccounts/read",
                    "Microsoft.Network/loadBalancers/backendAddressPools/backendPoolAddresses/read",
                    "Microsoft.ContainerService/managedClusters/read",
                    "Microsoft.Cdn/profiles/read",
                    "Microsoft.DBforPostgreSQL/serverGroupsv2/privateEndpointConnectionProxies/read",
                    "Microsoft.Sql/servers/firewallRules/read",
                    "Microsoft.Cdn/profiles/endpoints/origingroups/read",
                    "Microsoft.SignalRService/SignalR/read",
                    "Microsoft.KeyVault/vaults/networkSecurityPerimeterConfigurations/read",
                    "Microsoft.Resources/deployments/read",
                    "Microsoft.Compute/availabilitySets/read",
                    "Microsoft.KeyVault/vaults/read",
                    "Microsoft.Network/loadBalancers/outboundRules/read",
                    "Microsoft.Network/virtualNetworks/read",
                    "Microsoft.Network/publicIPAddresses/read",
                    "Microsoft.ServiceBus/namespaces/networkrulesets/read",
                    "Microsoft.Sql/managedInstances/keys/read",
                    "Microsoft.Sql/servers/elasticPools/databases/read",
                    "Microsoft.Network/frontDoorWebApplicationFirewallPolicies/read",
                    "Microsoft.Compute/virtualMachines/read",
                    "Microsoft.Sql/servers/read",
                    "*/read",
                    "Microsoft.Compute/virtualMachineScaleSets/virtualMachines/networkInterfaces/ipConfigurations/publicIPAddresses/read",
                    "Microsoft.Insights/alertRules/read",
                    "Microsoft.Relay/namespaces/WcfRelays/read",
                    "Microsoft.ServiceBus/namespaces/skus/read",
                    "Microsoft.Network/azureFirewalls/networkRuleCollections/read",
                    "Microsoft.Compute/virtualMachineScaleSets/virtualMachines/networkInterfaces/ipConfigurations/read",
                    "Microsoft.KeyVault/deletedVaults/read",
                    "Microsoft.Network/routeTables/routes/read",
                    "Microsoft.EventGrid/domains/topics/eventSubscriptions/read",
                    "Microsoft.Sql/instancePools/read",
                    "Microsoft.Network/applicationGateways/privateEndpointConnections/read",
                    "Microsoft.KeyVault/vaults/providers/Microsoft.Insights/metricDefinitions/read",
                    "Microsoft.Sql/instancePools/operations/read",
                    "Microsoft.Network/azureFirewalls/natRuleCollections/read",
                    "Microsoft.Sql/servers/databases/read",
                    "Microsoft.KeyVault/vaults/privateEndpointConnectionProxies/read",
                    "Microsoft.Web/sites/config/list/Action",
                    "Microsoft.Cdn/profiles/endpoints/customdomains/read",
                    "Microsoft.Sql/managedInstances/operations/read",
                    "Microsoft.EventGrid/systemTopics/read",
                    "Microsoft.Sql/managedInstances/startStopSchedules/read",
                    "Microsoft.EventGrid/domains/topics/read",
                    "Microsoft.ServiceBus/namespaces/authorizationRules/read",
                    "Microsoft.Authorization/*/read",
                    "Microsoft.Network/dnszones/read",
                    "Microsoft.DBforMySQL/flexibleServers/read",
                    "Microsoft.Cdn/profiles/customdomains/read",
                    "Microsoft.Cache/redis/read",
                    "Microsoft.Sql/managedInstances/privateEndpointConnections/read",
                    "Microsoft.Storage/storageAccounts/fileServices/shares/read",
                    "Microsoft.ServiceBus/namespaces/topics/subscriptions/rules/read",
                    "Microsoft.KeyVault/locations/deletedVaults/read",
                    "Microsoft.EventHub/namespaces/read",
                    "Microsoft.Compute/galleries/read",
                    "Microsoft.ServiceBus/namespaces/topics/authorizationRules/read",
                    "Microsoft.Web/serverfarms/Read",
                    "Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/read",
                    "Microsoft.Network/loadBalancers/read",
                    "Microsoft.Compute/snapshots/read",
                    "Microsoft.Sql/managedInstances/administrators/read",
                    "Microsoft.ServiceBus/sku/regions/read",
                    "Microsoft.Network/applicationSecurityGroups/read",
                    "Microsoft.EventGrid/domains/read",
                    "Microsoft.Compute/virtualMachineScaleSets/virtualMachines/networkInterfaces/read",
                    "Microsoft.Network/privateEndpoints/read",
                    "Microsoft.Sql/managedInstances/serverTrustGroups/read",
                    "Microsoft.KeyVault/vaults/keys/read",
                    "Microsoft.EventGrid/topics/eventSubscriptions/read",
                    "Microsoft.DBforPostgreSQL/serverGroupsv2/privateLinkResources/read",
                    "Microsoft.DBforPostgreSQL/flexibleServers/read",
                    "Microsoft.Resources/subscriptions/resourceGroups/read",
                    "Microsoft.KeyVault/locations/*/read",
                    "Microsoft.Web/sites/Read",
                    "Microsoft.KeyVault/vaults/privateLinkResources/read",
                    "Microsoft.KeyVault/checkNameAvailability/read",
                    "Microsoft.Authorization/policyDefinitions/read",
                    "Microsoft.KeyVault/vaults/eventGridFilters/read",
                    "Microsoft.ServiceBus/operations/read",
                    "Microsoft.Cdn/profiles/origingroups/read",
                    "Microsoft.Resources/subscriptions/resourceGroups/resources/read",
                    "Microsoft.Network/applicationGateways/read",
                    "Microsoft.KeyVault/vaults/providers/Microsoft.Insights/logDefinitions/read",
                    "Microsoft.EventHub/namespaces/eventhubs/read",
                    "Microsoft.Network/trafficManagerProfiles/read",
                    "Microsoft.Storage/storageAccounts/blobServices/read",
                    "Microsoft.SqlVirtualMachine/sqlVirtualMachines/read",
                    "Microsoft.ServiceBus/sku/read",
                    "Microsoft.Resources/resources/read",
                    "Microsoft.EventGrid/eventSubscriptions/read",
                    "Microsoft.KeyVault/vaults/providers/Microsoft.Insights/diagnosticSettings/Read",
                    "Microsoft.Sql/managedInstances/metrics/read",
                    "Microsoft.Sql/managedInstances/privateEndpointConnectionProxies/read",
                    "Microsoft.Network/networkInterfaces/read",
                    "Microsoft.Sql/managedInstances/serverTrustCertificates/read",
                    "Microsoft.DocumentDB/databaseAccounts/tables/read",
                    "Microsoft.Sql/managedInstances/read",
                    "Microsoft.Network/virtualNetworks/subnets/read",
                    "Microsoft.KeyVault/vaults/*/read",
                    "Microsoft.Relay/namespaces/read",
                    "Microsoft.Compute/virtualMachineScaleSets/virtualMachines/instanceView/read",
                    "Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/read",
                    "Microsoft.Network/azureFirewalls/applicationRuleCollections/read",
                    "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies/read",
                    "Microsoft.Compute/virtualMachineScaleSets/skus/read",
                    "Microsoft.Cdn/profiles/endpoints/origins/read",
                    "Microsoft.Network/frontDoors/read",
                    "Microsoft.Network/virtualNetworkGateways/read",
                    "Microsoft.Storage/storageAccounts/blobServices/containers/read",
                    "Microsoft.Sql/servers/elasticPools/read",
                    "Microsoft.Network/loadBalancers/networkInterfaces/read",
                    "Microsoft.EventGrid/domains/eventSubscriptions/read",
                    "Microsoft.Sql/managedInstances/encryptionProtector/read",
                    "Microsoft.DBforPostgreSQL/serverGroupsv2/privateEndpointConnections/read",
                    "Microsoft.Compute/diskEncryptionSets/read",
                    "Microsoft.ServiceBus/namespaces/topics/read",
                    "Microsoft.Network/firewallPolicies/ruleCollectionGroups/read",
                    "Microsoft.Network/loadBalancers/virtualMachines/read",
                    "Microsoft.ServiceBus/namespaces/topics/subscriptions/read",
                    "Microsoft.ServiceBus/namespaces/virtualNetworkRules/read",
                    "Microsoft.ServiceBus/namespaces/read",
                    "Microsoft.ServiceBus/namespaces/ipFilterRules/read",
                    "Microsoft.Sql/servers/outboundFirewallRules/read",
                    "Microsoft.ServiceBus/namespaces/networkruleset/read",
                    "Microsoft.Compute/sshPublicKeys/read",
                    "Microsoft.DBforMySQL/servers/read",
                    "Microsoft.DBforMySQL/servers/privateEndpointConnections/read",
                    "Microsoft.Network/firewallPolicies/ruleGroups/read",
                    "Microsoft.Network/privateDnsZones/read",
                    "Microsoft.Compute/disks/read",
                    "Microsoft.Sql/servers/azureADOnlyAuthentications/read",
                    "Microsoft.KeyVault/vaults/networkSecurityPerimeterAssociationProxies/read",
                    "Microsoft.Cdn/profiles/afdendpoints/read",
                    "Microsoft.Compute/virtualMachineScaleSets/virtualMachines/read",
                    "Microsoft.DocumentDB/databaseAccounts/sqlDatabases/read",
                    "Microsoft.Authorization/policyAssignments/read",
                    "Microsoft.DBforMySQL/servers/privateEndpointConnectionProxies/read",
                    "Microsoft.ServiceBus/namespaces/queues/read",
                    "Microsoft.Network/privateLinkServices/read",
                    "Microsoft.Sql/servers/connectionPolicies/read",
                    "Microsoft.Network/loadBalancers/loadBalancingRules/read",
                    "Microsoft.DBforMySQL/locations/azureAsyncOperation/read",
                    "Microsoft.ServiceBus/namespaces/queues/authorizationRules/read",
                    "Microsoft.Network/dnsForwardingRulesets/read",
                    "Microsoft.KeyVault/vaults/secrets/read",
                    "Microsoft.Network/loadBalancers/probes/read",
                    "Microsoft.Network/azurefirewalls/read",
                    "Microsoft.Network/natGateways/read",
                    "Microsoft.EventGrid/systemTopics/eventSubscriptions/read",
                    "Microsoft.Network/loadBalancers/backendAddressPools/read",
                    "Microsoft.Sql/managedInstances/databases/read",
                    "Microsoft.Network/firewallPolicies/read",
                    "Microsoft.Compute/galleries/images/read",
                    "Microsoft.Network/loadBalancers/inboundNatPools/read",
                    "Microsoft.Network/loadBalancers/inboundNatRules/read",
                    "microsoft.web/sites/functions/read",
                    "Microsoft.EventGrid/topics/read",
                    "Microsoft.Network/virtualNetworks/virtualNetworkPeerings/read",
                    "Microsoft.Compute/galleries/images/versions/read",
                    "Microsoft.DataFactory/datafactories/read",
                    "Microsoft.Sql/managedInstances/azureADOnlyAuthentications/read",
                    "Microsoft.KeyVault/vaults/keys/versions/read",
                    "Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/read",
                    "Microsoft.Sql/managedInstances/dtc/read",
                    "Microsoft.KeyVault/locations/operationResults/read",
                    "Microsoft.Cdn/profiles/endpoints/read",
                    "Microsoft.Sql/managedInstances/privateLinkResources/read",
                    "Microsoft.ServiceBus/namespaces/privateEndpointConnections/read",
                    "Microsoft.KeyVault/operations/read",
                    "Microsoft.Cdn/profiles/origingroups/origins/read",
                    "Microsoft.Compute/proximityPlacementGroups/read",
                    "Microsoft.Network/localnetworkgateways/read"
                ],
                "notActions": [],
                "dataActions": [
                    "Microsoft.KeyVault/vaults/storageaccounts/sas/read",
                    "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read",
                    "Microsoft.KeyVault/vaults/keys/read",
                    "Microsoft.KeyVault/vaults/storageaccounts/read",
                    "Microsoft.KeyVault/vaults/certificates/read",
                    "Microsoft.KeyVault/vaults/certificatecas/read",
                    "Microsoft.KeyVault/vaults/keyrotationpolicies/read"
                ],
                "notDataActions": []
            }
        ]
    }
}