assistant api rbac

gistfile1.txt

{
    "$schema": "https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "roleGuid": {
            "type": "string",
            "defaultValue": "[guid(deployment().name)]"
        }
    },
    "resources": [
        {
            "type": "Microsoft.Authorization/roleDefinitions",
            "apiVersion": "2022-05-01-preview",
            "name": "[parameters('roleGuid')]",
            "properties": {
                "roleName": "Assistant API Reader Role (preview)",
                "description": "Assistant API Reader Role (preview)",
                "assignableScopes": [
                    "[subscription().id]"
                ],
                "permissions": [
                    {
                        "actions": [
                            "Microsoft.CognitiveServices/accounts/read"
                        ],
                        "notActions": [],
                        "dataActions": [
                            "Microsoft.CognitiveServices/accounts/OpenAI/assistants/write",
                            "Microsoft.CognitiveServices/accounts/OpenAI/assistants/read",
                            "Microsoft.CognitiveServices/accounts/OpenAI/assistants/threads/write",
                            "Microsoft.CognitiveServices/accounts/OpenAI/assistants/threads/read",
                            "Microsoft.CognitiveServices/accounts/OpenAI/assistants/threads/messages/write",
                            "Microsoft.CognitiveServices/accounts/OpenAI/assistants/threads/messages/read",
                            "Microsoft.CognitiveServices/accounts/OpenAI/assistants/threads/messages/files/read",
                            "Microsoft.CognitiveServices/accounts/OpenAI/assistants/threads/runs/write",
                            "Microsoft.CognitiveServices/accounts/OpenAI/assistants/threads/runs/read",
                            "Microsoft.CognitiveServices/accounts/OpenAI/assistants/threads/runs/steps/read",
                            "Microsoft.CognitiveServices/accounts/OpenAI/assistants/files/read"
                        ],
                        "notDataActions": [
                            "Microsoft.CognitiveServices/accounts/OpenAI/assistants/files/write",
                            "Microsoft.CognitiveServices/accounts/OpenAI/assistants/files/delete",
                            "Microsoft.CognitiveServices/accounts/OpenAI/assistants/threads/delete",
                            "Microsoft.CognitiveServices/accounts/OpenAI/assistants/delete"
                        ]
                    }
                ]
            }
        }
    ]
}