Cognitive Services Face Recognizer

{
  "properties": {
    "roleName": "Cognitive Services Face Recognizer",
    "type": "BuiltInRole",
    "description": "Lets you perform detect, verify, identify, group, and find similar operations on Face API. This role does not allow create or delete operations, which makes it well suited for endpoints that only need inferencing capabilities, following 'least privilege' best practices.",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [],
        "notActions": [],
        "dataActions": [
          "Microsoft.CognitiveServices/accounts/Face/detect/action",
          "Microsoft.CognitiveServices/accounts/Face/verify/action",
          "Microsoft.CognitiveServices/accounts/Face/identify/action",
          "Microsoft.CognitiveServices/accounts/Face/group/action",
          "Microsoft.CognitiveServices/accounts/Face/findsimilars/action",
          "Microsoft.CognitiveServices/accounts/Face/detectliveness/multimodal/action",
          "Microsoft.CognitiveServices/accounts/Face/detectliveness/singlemodal/action",
          "Microsoft.CognitiveServices/accounts/Face/detectlivenesswithverify/singlemodal/action",
          "Microsoft.CognitiveServices/accounts/Face/*/sessions/action",
          "Microsoft.CognitiveServices/accounts/Face/*/sessions/delete",
          "Microsoft.CognitiveServices/accounts/Face/*/sessions/read",
          "Microsoft.CognitiveServices/accounts/Face/*/sessions/audit/read"
        ],
        "notDataActions": []
      }
    ],
    "createdOn": "2021-03-31T01:51:41.355Z",
    "updatedOn": "2023-11-14T16:24:26.42Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/9894cab4-e18a-44aa-828b-cb588cd6f2d7",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "9894cab4-e18a-44aa-828b-cb588cd6f2d7"
}