Subscription Migrator

{
  "properties": {
    "roleName": "Subscription Migrator",
    "type": "BuiltInRole",
    "description": "Can perform operations related to the transfer of managed identities and their associated authorization policies from one Entra ID tenant to another",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.ManagedIdentity/migrateIdentities/action",
          "Microsoft.Authorization/migrateRbac/action",
          "Microsoft.Authorization/roleAssignments/read",
          "Microsoft.Authorization/denyAssignments/read",
          "Microsoft.Authorization/roleDefinitions/read",
          "Microsoft.managedIdentities/identities/read",
          "Microsoft.managedIdentities/userAssignedIdentities/read",
          "Microsoft.KeyVault.vaults/accessPolicies/read",
          "Microsoft.Authorization/policyAssignments/read",
          "Microsoft.Authorization/policyDefinitions/read"
        ],
        "notActions": [],
        "dataActions": [],
        "notDataActions": []
      }
    ],
    "createdOn": "2024-08-05T15:09:29.21Z",
    "updatedOn": "2025-05-05T15:00:32.598Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/cd7709b9-d129-4dc4-ac27-d215a1be1e07",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "cd7709b9-d129-4dc4-ac27-d215a1be1e07"
}