{"id":"rbac-custom-role-requires-write-on-all-assignable-scopes","text":"Creating, deleting, or updating custom roles requires `Microsoft.Authorization/roleDefinitions/write` permission on all AssignableScopes.","truth_value":"IN","source":"entries/2026/03/10/rbac-custom-roles.md","source_url":"","source_hash":"b1213904ef0695fb","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"rbac-custom-role-requires-write-on-all-assignable-scopes","truth_value":"IN","reason":"premise"}]}}