{
    "properties": {
        "roleName": "InsightCloudSec GovCloud Power User Role (Subscription)",
        "description": "Provides full access to resources supported by InsightCloudSec for a given Subscription.",
        "assignableScopes": [
            "/subscriptions/<subscription-id>"
        ],
        "permissions": [
            {
                "actions": [
                    "Microsoft.Advisor/*",
                    "Microsoft.ApiManagement/*",
                    "Microsoft.Authorization/*",
                    "Microsoft.Automation/*",
                    "Microsoft.Batch/*",
                    "Microsoft.BotService/*",
                    "Microsoft.Cache/*",
                    "Microsoft.Cdn/*",
                    "Microsoft.Compute/*",
                    "Microsoft.ContainerInstance/*",
                    "Microsoft.ContainerRegistry/*",
                    "Microsoft.ContainerService/*",
                    "Microsoft.Databricks/*",
                    "Microsoft.DataFactory/*",
                    "Microsoft.DBforMariaDB/*",
                    "Microsoft.DBforMySQL/*",
                    "Microsoft.DBforPostgreSQL/*",
                    "Microsoft.DocumentDB/*",
                    "Microsoft.EventGrid/*",
                    "Microsoft.EventHub/*",
                    "Microsoft.HDInsight/*",
                    "Microsoft.Insights/*",
                    "Microsoft.Kusto/*",
                    "Microsoft.Logic/*",
                    "Microsoft.Network/*",
                    "Microsoft.OperationalInsights/*",
                    "Microsoft.Resources/subscriptions/locations/read",
                    "Microsoft.Resources/subscriptions/providers/read",
                    "Microsoft.Resources/subscriptions/resourceGroups/read",
                    "Microsoft.Resources/subscriptions/resourcegroups/resources/read",
                    "Microsoft.Search/*",
                    "Microsoft.Security/*",
                    "Microsoft.ServiceBus/*",
                    "Microsoft.ServiceFabric/*",
                    "Microsoft.Sql/*",
                    "Microsoft.Storage/*",
                    "Microsoft.Synapse/*",
                    "Microsoft.Web/*"
                ],
                "notActions": [],
                "dataActions": [],
                "notDataActions": []
            }
        ]
    }
}