{
    "properties": {
        "roleName": "IPF Management Group Reader",
        "description": "Allows IP Fabric to read management group hierarchy for resource context",
        "assignableScopes": [],
        "permissions": [
            {
                "actions": [
                    "Microsoft.Management/managementGroups/read",
                    "Microsoft.Management/managementGroups/descendants/read"
                ],
                "notActions": [],
                "dataActions": [],
                "notDataActions": []
            }
        ]
    }
}