| microsoft.authorization/policyassignments/write | Owner |
| microsoft.authorization/policyassignments/delete | Owner |
| microsoft.resources/links/delete | Admin |
| microsoft.resources/links/write | Admin |
| microsoft.resources/marketplace/purchase/action | Admin |
| microsoft.resources/subscriptions/resourcegroups/delete | Admin |
| microsoft.resources/subscriptions/resourcegroups/deployments/write | Admin |
| microsoft.resources/subscriptions/resourcegroups/moveResources/action | Admin |
| microsoft.resources/subscriptions/resourcegroups/write | Admin |
| microsoft.resources/subscriptions/tagNames/delete | Admin |
| microsoft.resources/subscriptions/tagNames/tagValues/delete | Admin |
| microsoft.resources/subscriptions/tagNames/tagValues/write | Admin |
| microsoft.resources/subscriptions/tagNames/write | Admin |
| microsoft.subscription/cancel/action | Admin |
| microsoft.insights/diagnosticsettings/write | Admin |
| microsoft.insights/diagnosticsettings/delete | Admin |
| microsoft.subscription/policies/write | Admin |
| microsoft.authorization/policysetdefinitions/write | Admin |
| microsoft.authorization/policysetdefinitions/delete | Admin |
| microsoft.authorization/policydefinitions/write | Admin |
| microsoft.authorization/policydefinitions/delete | Admin |
| microsoft.alertsmanagement/register/action | Admin |
| microsoft.alertsmanagement/unregister/action | Admin |
| microsoft.apimanagement/register/action | Admin |
| microsoft.apimanagement/unregister/action | Admin |
| microsoft.automation/register/action | Admin |
| microsoft.automation/unregister/action | Admin |
| microsoft.billing/register/action | Admin |
| microsoft.billing/unregister/action | Admin |
| microsoft.botservice/register/action | Admin |
| microsoft.botservice/unregister/action | Admin |
| microsoft.cache/register/action | Admin |
| microsoft.cache/unregister/action | Admin |
| microsoft.cognitiveservices/register/action | Admin |
| microsoft.cognitiveservices/unregister/action | Admin |
| microsoft.compute/register/action | Admin |
| microsoft.compute/unregister/action | Admin |
| microsoft.containerregistry/register/action | Admin |
| microsoft.containerregistry/unregister/action | Admin |
| microsoft.containerservice/register/action | Admin |
| microsoft.containerservice/unregister/action | Admin |
| microsoft.costmanagement/register/action | Admin |
| microsoft.costmanagement/unregister/action | Admin |
| microsoft.databricks/register/action | Admin |
| microsoft.databricks/unregister/action | Admin |
| microsoft.databox/register/action | Admin |
| microsoft.databox/unregister/action | Admin |
| microsoft.datafactory/register/action | Admin |
| microsoft.datafactory/unregister/action | Admin |
| microsoft.datalakeanalytics/register/action | Admin |
| microsoft.datalakeanalytics/unregister/action | Admin |
| microsoft.dbformysql/register/action | Admin |
| microsoft.dbformysql/unregister/action | Admin |
| microsoft.dbforpostgresql/register/action | Admin |
| microsoft.dbforpostgresql/unregister/action | Admin |
| microsoft.desktopvirtualization/register/action | Admin |
| microsoft.desktopvirtualization/unregister/action | Admin |
| microsoft.documentdb/register/action | Admin |
| microsoft.documentdb/unregister/action | Admin |
| microsoft.domainregistration/register/action | Admin |
| microsoft.domainregistration/unregister/action | Admin |
| microsoft.elastic/register/action | Admin |
| microsoft.elastic/unregister/action | Admin |
| microsoft.hdinsight/register/action | Admin |
| microsoft.hdinsight/unregister/action | Admin |
| microsoft.insights/register/action | Admin |
| microsoft.insights/unregister/action | Admin |
| microsoft.keyvault/register/action | Admin |
| microsoft.keyvault/unregister/action | Admin |
| microsoft.managedidentity/register/action | Admin |
| microsoft.managedidentity/unregister/action | Admin |
| microsoft.network/register/action | Admin |
| microsoft.network/unregister/action | Admin |
| microsoft.operationalinsights/register/action | Admin |
| microsoft.operationalinsights/unregister/action | Admin |
| microsoft.recoveryservices/register/action | Admin |
| microsoft.recoveryservices/unregister/action | Admin |
| microsoft.relay/register/action | Admin |
| microsoft.relay/unregister/action | Admin |
| microsoft.resources/register/action | Admin |
| microsoft.resources/unregister/action | Admin |
| microsoft.search/register/action | Admin |
| microsoft.search/unregister/action | Admin |
| microsoft.security/register/action | Admin |
| microsoft.security/unregister/action | Admin |
| microsoft.servicebus/register/action | Admin |
| microsoft.servicebus/unregister/action | Admin |
| microsoft.signalrservice/register/action | Admin |
| microsoft.signalrservice/unregister/action | Admin |
| microsoft.sql/register/action | Admin |
| microsoft.sql/unregister/action | Admin |
| microsoft.sqlvirtualmachine/register/action | Admin |
| microsoft.sqlvirtualmachine/unregister/action | Admin |
| microsoft.storage/register/action | Admin |
| microsoft.storage/unregister/action | Admin |
| microsoft.synapse/register/action | Admin |
| microsoft.synapse/unregister/action | Admin |
| microsoft.web/register/action | Admin |
| microsoft.web/unregister/action | Admin |
| microsoft.resources/deployments/cancel/action | Operator |
| microsoft.resources/deployments/delete | Operator |
| microsoft.resources/deployments/validate/action | Operator |
| microsoft.resources/deployments/write | Operator |
| microsoft.resources/subscriptions/resourcegroups/validateMoveResources/action | Operator |
| microsoft.resources/tags/delete | Operator |
| microsoft.resources/tags/write | Operator |
| microsoft.resources/deployments/operations/read | Metadata |
| microsoft.resources/deployments/read | Metadata |
| microsoft.resources/links/read | Metadata |
| microsoft.resources/providers/read | Metadata |
| microsoft.resources/resources/read | Metadata |
| microsoft.resources/subscriptions/locations/read | Metadata |
| microsoft.resources/subscriptions/operationresults/read | Metadata |
| microsoft.resources/subscriptions/providers/read | Metadata |
| microsoft.resources/subscriptions/read | Metadata |
| microsoft.resources/subscriptions/resourcegroups/deployments/operations/read | Metadata |
| microsoft.resources/subscriptions/resourcegroups/deployments/operationstatuses/read | Metadata |
| microsoft.resources/subscriptions/resourcegroups/deployments/read | Metadata |
| microsoft.resources/subscriptions/resourcegroups/read | Metadata |
| microsoft.resources/subscriptions/resourcegroups/resources/read | Metadata |
| microsoft.resources/subscriptions/resources/read | Metadata |
| microsoft.resources/subscriptions/tagNames/read | Metadata |
| microsoft.resources/subscriptions/tagNames/tagValues/read | Metadata |
| microsoft.resources/tags/read | Metadata |
| microsoft.resources/tenants/read | Metadata |
| microsoft.subscription/policies/read | Metadata |
| microsoft.authorization/policysetdefinitions/read | Metadata |
| microsoft.authorization/policydefinitions/read | Metadata |
| microsoft.authorization/policyassignments/read | Metadata |
