Mods
Azure

IAM Role: Azure/Storage/Operator

PermissionGrant
microsoft.resources/deployments/cancel/actionOperator
microsoft.resources/deployments/deleteOperator
microsoft.resources/deployments/validate/actionOperator
microsoft.resources/deployments/writeOperator
microsoft.storage/checknameavailability/readOperator
microsoft.storage/storageaccounts/blobservices/containers/clearlegalhold/actionOperator
microsoft.storage/storageaccounts/blobservices/containers/deleteOperator
microsoft.storage/storageaccounts/blobservices/containers/immutabilitypolicies/deleteOperator
microsoft.storage/storageaccounts/blobservices/containers/immutabilitypolicies/extend/actionOperator
microsoft.storage/storageaccounts/blobservices/containers/immutabilitypolicies/lock/actionOperator
microsoft.storage/storageaccounts/blobservices/containers/immutabilitypolicies/writeOperator
microsoft.storage/storageaccounts/blobservices/containers/setlegalhold/actionOperator
microsoft.storage/storageaccounts/blobservices/containers/writeOperator
microsoft.storage/storageaccounts/blobservices/providers/microsoft.insights/diagnosticsettings/writeOperator
microsoft.storage/storageaccounts/blobservices/writeOperator
microsoft.storage/storageaccounts/fileServices/providers/microsoft.insights/diagnosticsettings/writeOperator
microsoft.storage/storageaccounts/fileservices/shares/writeOperator
microsoft.storage/storageaccounts/fileservices/shares/actionOperator
microsoft.storage/storageaccounts/listAccountSas/actionOperator
microsoft.storage/storageaccounts/listkeys/actionOperator
microsoft.storage/storageaccounts/listServiceSas/actionOperator
microsoft.storage/storageaccounts/providers/microsoft.insights/diagnosticsettings/writeOperator
microsoft.storage/storageaccounts/queueservices/providers/microsoft.insights/diagnosticsettings/writeOperator
microsoft.storage/storageaccounts/queueservices/queues/deleteOperator
microsoft.storage/storageaccounts/queueservices/queues/writeOperator
microsoft.storage/storageaccounts/queueservices/writeOperator
microsoft.storage/storageaccounts/services/diagnosticsettings/writeOperator
microsoft.storage/storageaccounts/tableServices/providers/Microsoft.insights/diagnosticsettings/writeOperator
microsoft.resources/deployments/operations/readMetadata
microsoft.resources/deployments/readMetadata
microsoft.resources/providers/readMetadata
microsoft.resources/subscriptions/resourceGroups/readMetadata
microsoft.storage/operations/readMetadata
microsoft.storage/skus/readMetadata
microsoft.storage/storageaccounts/blobservices/containers/immutabilitypolicies/readMetadata
microsoft.storage/storageaccounts/blobservices/containers/readMetadata
microsoft.storage/storageaccounts/blobservices/providers/microsoft.insights/diagnosticsettings/readMetadata
microsoft.storage/storageaccounts/blobservices/providers/microsoft.insights/metricdefinitions/readMetadata
microsoft.storage/storageaccounts/blobservices/readMetadata
microsoft.storage/storageaccounts/fileServices/providers/microsoft.insights/diagnosticsettings/readMetadata
microsoft.storage/storageaccounts/fileServices/providers/microsoft.insights/metricdefinitions/readMetadata
microsoft.storage/storageaccounts/fileservices/shares/readMetadata
microsoft.storage/storageaccounts/providers/microsoft.insights/diagnosticsettings/readMetadata
microsoft.storage/storageaccounts/providers/microsoft.insights/metricdefinitions/readMetadata
microsoft.storage/storageaccounts/queueservices/providers/microsoft.insights/metricdefinitions/readMetadata
microsoft.storage/storageaccounts/queueservices/queues/readMetadata
microsoft.storage/storageaccounts/queueservices/readMetadata
microsoft.storage/storageaccounts/readMetadata
microsoft.storage/storageaccounts/tableServices/providers/Microsoft.insights/diagnosticsettings/readMetadata
microsoft.storage/storageaccounts/tableServices/providers/Microsoft.insights/metricDefinitions/readMetadata
microsoft.storage/usages/readMetadata