Mods
Azure

IAM Role: Azure/IAM/Owner

PermissionGrant
microsoft.authorization/classicadministrators/writeOwner
microsoft.authorization/classicadministrators/deleteOwner
microsoft.authorization/roleassignments/writeOwner
microsoft.authorization/roleassignments/deleteOwner
microsoft.authorization/locks/writeOwner
microsoft.authorization/locks/deleteOwner
microsoft.authorization/roledefinitions/writeOwner
microsoft.authorization/roledefinitions/deleteOwner
microsoft.authorization/policysetdefinitions/writeOwner
microsoft.authorization/policysetdefinitions/deleteOwner
microsoft.authorization/policydefinitions/writeOwner
microsoft.authorization/policydefinitions/deleteOwner
microsoft.authorization/policyassignments/writeOwner
microsoft.authorization/policyassignments/deleteOwner
microsoft.authorization/denyassignments/writeOwner
microsoft.authorization/denyassignments/deleteOwner
microsoft.authorization/policies/audit/actionOwner
microsoft.authorization/policies/auditifnotexists/actionOwner
microsoft.authorization/policies/deny/actionOwner
microsoft.authorization/policies/deployifnotexists/actionOwner
microsoft.authorization/elevateaccess/actionOwner
microsoft.authorization/classicadministrators/readMetadata
microsoft.authorization/roleassignments/readMetadata
microsoft.authorization/permissions/readMetadata
microsoft.authorization/locks/readMetadata
microsoft.authorization/roledefinitions/readMetadata
microsoft.authorization/provideroperations/readMetadata
microsoft.authorization/policysetdefinitions/readMetadata
microsoft.authorization/policydefinitions/readMetadata
microsoft.authorization/policyassignments/readMetadata
microsoft.authorization/operations/readMetadata
microsoft.authorization/classicadministrators/operationstatuses/readMetadata
microsoft.authorization/denyassignments/readMetadata