Assign a role at subscription scope
This template is a subscription level template that will assign a role at subscription scope.
NOTE: Role assignments use a GUID for the name, this must be unique for every role assignment on the subscription. The roleAssignmentName parameter is used to seed the guid() function with this value, change it for each deployment. You can supply a guid or any string, as long as it has not been used before when assigning the role to the subscription.