Azure Customer Lockbox Approver for Subscription

{
  "properties": {
    "roleName": "Azure Customer Lockbox Approver for Subscription",
    "type": "BuiltInRole",
    "description": "Can approve Microsoft support requests to access specific resources contained within a subscription, or the subscription itself, when Customer Lockbox for Microsoft Azure is enabled on the tenant where the subscription resides.",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.Resources/subscriptions/read",
          "Microsoft.CustomerLockbox/requests/UpdateApproval/action",
          "Microsoft.CustomerLockbox/requests/read",
          "Microsoft.Authorization/*/read",
          "Microsoft.Resources/subscriptions/resourceGroups/read",
          "Microsoft.Insights/eventtypes/values/read"
        ],
        "notActions": [],
        "dataActions": [],
        "notDataActions": []
      }
    ],
    "createdOn": "2023-10-16T15:13:27.44Z",
    "updatedOn": "2024-08-12T16:09:25.448Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/4dae6930-7baf-46f5-909e-0383bc931c46",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "4dae6930-7baf-46f5-909e-0383bc931c46"
}