Create an open custom role for hashicorp vault to consume

custom-azure-role-for-vault.sh

#!/bin/bash

export SUBSCRIPTION_ID=

az role definition create --role-definition=<<EOF

{
  "Name": "vault-admin",
  "IsCustom": true,
  "Description": "role for vault to create service principals.",
  "Actions": [
    "*"
  ],
  "NotActions": [

  ],
  "AssignableScopes": [
    "/subscriptions/${SUBSCRIPTION_ID}",
  ]
}
EOF