{
    "id": "/subscriptions/<subscription-id>/providers/Microsoft.Authorization/roleDefinitions/<roleDefinitionID>",
    "properties": {
      "roleName": "CVObjectStorageRole",
      "description": "A Commvault Role that is used for protecting and restoring Azure Blob Storage and Azure Datalake Gen2 Storage workloads",
      "assignableScopes": [
        "/subscriptions/<subscription-id>"
      ],
      "permissions": [
        {
          "actions": [
        "Microsoft.Storage/storageAccounts/blobServices/containers/*",
        "Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action",
        "Microsoft.Storage/storageAccounts/read"
        ],
          "notActions": [],
          "dataActions": [
            "Microsoft.Storage/storageAccounts/blobServices/containers/blobs/*"
          ],
          "notDataActions": []
        }
      ]
    }
  }