Role definition permissions.
Allowed actions.
The conditions on the role definition. This limits the resources it can be assigned to. e.g.: @ResourceMicrosoft.Storage/storageAccounts/blobServices/containers:ContainerName StringEqualsIgnoreCase 'foo_storage_container'
Version of the condition. Currently the only accepted value is '2.0'
Allowed Data actions.
Denied actions.
Denied Data actions.