customRole-TagReader

{
    "properties": {
        "roleName": "Tag Reader",
        "description": "Lets you read tags on entities, without providing access to the entities themselves.",
        "permissions": [
            {
                "actions": [
                    "Microsoft.Resources/tags/read",
                    "Microsoft.Resources/subscriptions/tagNames/read"
                ],
                "notActions": [],
                "dataActions": [],
                "notDataActions": []
            }
        ]
    }
}