Create Azure custom role for az aks get-credentials

AKSClusterConfigurationReader.json

{
   "Name":"AKS Cluster Configuration Reader",
   "Id":"{{ create a unique guid }}",
   "IsCustom":true,
   "Description":"Can get AKS configuration.",
   "Actions":[
      "Microsoft.ContainerService/managedClusters/accessProfiles/listCredential/action",
      "Microsoft.ContainerService/managedClusters/listClusterUserCredential/action"
   ],
   "NotActions":[
   ],
   "DataActions":[
   ],
   "NotDataActions":[
   ],
   "AssignableScopes":[
      "/subscriptions/{{ your subscription ID }}"
   ]
}