PermissionsThe Azure CIS v2.0.0 - Section 1 - IAM policy pack requires 2 permissions:User.ReadWrite.Allmicrosoft.authorization/roledefinitions/delete