`roleDefinitionId: ``/subscriptions/${azure.config.subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/ba92f5b4-2d11-453d-a403-e96b0029c9fe``,`