az ad sp create-for-rbac --name "PORJECTNAME"  --role contributor  --scopes /subscriptions/abcdefgh-1234-4321-5678-abcdefabcdef/resourceGroups/GROUP_NAME/providers/Microsoft.Storage/storageAccounts/STORAGENAME