{
  "principal": {
    "principal_name": "sp-platform-ops",
    "principal_id": "00000000-0000-0000-0000-000000000001",
    "principal_type": "ServicePrincipal"
  },
  "role_assignments": {
    "subscription": {
      "scope": "/subscriptions/00000000-0000-0000-0000-000000000000",
      "roles": [
        "Reader"
      ]
    },
    "rg_platform": {
      "scope": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-platform",
      "roles": [
        "Contributor"
      ]
    },
    "rg_security": {
      "scope": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-security",
      "roles": [
        "Log Analytics Contributor",
        "Monitoring Reader"
      ]
    }
  }
}