====== Manage access control ======
  * Configure Azure role permissions for management groups, subscriptions, resource groups, and resources
  * Interpret role and resource permissions
  * Assign built-in Azure AD roles
  * Create and assign custom roles, including Azure roles and Azure AD roles