Create a new role def via a subscription level deployment
This template is a subscription level template that will create a new a role definition. The actions include reading resource groups and will be assignable at the subscription scope. You can add/modify/delete as needed. For more information, see Understand Azure role definitions. To learn more about how to deploy the template, see the quickstart article.
NOTE: Role Definitions use a GUID for the name, this must be unique for every role assignment on the group. The roleDefName parameter is used to seed the guid() function with this value, change it for each deployment. You can supply a guid or any string, as long as it has not been used before when assigning the role to the resourceGroup.
Tags: Microsoft.Authorization/roleDefinitions, customRole