{
  "assignments": [
    {
      "Kind": "Assignment",
      "Id": "/providers/Microsoft.Management/managementGroups/contoso-root/providers/Microsoft.Authorization/roleAssignmentSchedules/d4000000-0000-4000-8000-000000000001",
      "Scope": "/providers/Microsoft.Management/managementGroups/contoso-root",
      "RoleId": "18d7d88d-d35e-4fb5-a5c3-7773c20a72d9",
      "RoleName": "User Access Administrator",
      "Tier": "T0",
      "State": "ActivePermanent",
      "EndDateTime": null,
      "PrincipalId": "b2000000-0000-4000-8000-000000000001",
      "PrincipalType": "Group",
      "MemberType": "Direct"
    },
    {
      "Kind": "Assignment",
      "Id": "/providers/Microsoft.Management/managementGroups/contoso-root/providers/Microsoft.Authorization/roleAssignmentSchedules/d4000000-0000-4000-8000-000000000002",
      "Scope": "/providers/Microsoft.Management/managementGroups/contoso-root",
      "RoleId": "18d7d88d-d35e-4fb5-a5c3-7773c20a72d9",
      "RoleName": "User Access Administrator",
      "Tier": "T0",
      "State": "ActivePermanent",
      "EndDateTime": null,
      "PrincipalId": "c3000000-0000-4000-8000-000000000003",
      "PrincipalType": "ServicePrincipal",
      "MemberType": "Direct"
    },
    {
      "Kind": "Assignment",
      "Id": "/providers/Microsoft.Authorization/roleAssignmentSchedules/d4000000-0000-4000-8000-000000000003",
      "Scope": "/",
      "RoleId": "18d7d88d-d35e-4fb5-a5c3-7773c20a72d9",
      "RoleName": "User Access Administrator",
      "Tier": "T0",
      "State": "ActivePermanent",
      "EndDateTime": null,
      "PrincipalId": "a1000000-0000-4000-8000-000000000003",
      "PrincipalType": "User",
      "MemberType": "Direct"
    },
    {
      "Kind": "Assignment",
      "Id": "/subscriptions/11111111-1111-4111-8111-111111111111/providers/Microsoft.Authorization/roleAssignmentSchedules/d4000000-0000-4000-8000-000000000005",
      "Scope": "/subscriptions/11111111-1111-4111-8111-111111111111",
      "RoleId": "8e3af657-a8ff-443c-a75c-2fe8c4bcb635",
      "RoleName": "Owner",
      "Tier": "T1",
      "State": "ActivePermanent",
      "EndDateTime": null,
      "PrincipalId": "a1000000-0000-4000-8000-000000000001",
      "PrincipalType": "User",
      "MemberType": "Direct"
    },
    {
      "Kind": "Assignment",
      "Id": "/subscriptions/11111111-1111-4111-8111-111111111111/providers/Microsoft.Authorization/roleAssignmentSchedules/d4000000-0000-4000-8000-000000000006",
      "Scope": "/subscriptions/11111111-1111-4111-8111-111111111111",
      "RoleId": "b24988ac-6180-42a0-ab88-20f7382dd24c",
      "RoleName": "Contributor",
      "Tier": "T1",
      "State": "ActivePermanent",
      "EndDateTime": null,
      "PrincipalId": "c3000000-0000-4000-8000-000000000001",
      "PrincipalType": "ServicePrincipal",
      "MemberType": "Direct"
    },
    {
      "Kind": "Assignment",
      "Id": "/subscriptions/11111111-1111-4111-8111-111111111111/providers/Microsoft.Authorization/roleAssignmentSchedules/d4000000-0000-4000-8000-000000000007",
      "Scope": "/subscriptions/11111111-1111-4111-8111-111111111111",
      "RoleId": "8e3af657-a8ff-443c-a75c-2fe8c4bcb635",
      "RoleName": "Owner",
      "Tier": "T1",
      "State": "Activated",
      "EndDateTime": "2026-10-30T16:00:00Z",
      "PrincipalId": "a1000000-0000-4000-8000-000000000004",
      "PrincipalType": "User",
      "MemberType": "Direct"
    },
    {
      "Kind": "Assignment",
      "Id": "/subscriptions/11111111-1111-4111-8111-111111111111/providers/Microsoft.Authorization/roleAssignmentSchedules/d4000000-0000-4000-8000-000000000008",
      "Scope": "/subscriptions/11111111-1111-4111-8111-111111111111",
      "RoleId": "b24988ac-6180-42a0-ab88-20f7382dd24c",
      "RoleName": "Contributor",
      "Tier": "T1",
      "State": "ActiveTimeBound",
      "EndDateTime": "2026-11-30T00:00:00Z",
      "PrincipalId": "a1000000-0000-4000-8000-000000000005",
      "PrincipalType": "User",
      "MemberType": "Direct"
    },
    {
      "Kind": "Assignment",
      "Id": "/subscriptions/22222222-2222-4222-8222-222222222222/providers/Microsoft.Authorization/roleAssignmentSchedules/d4000000-0000-4000-8000-000000000011",
      "Scope": "/subscriptions/22222222-2222-4222-8222-222222222222",
      "RoleId": "b24988ac-6180-42a0-ab88-20f7382dd24c",
      "RoleName": "Contributor",
      "Tier": "T0",
      "State": "ActivePermanent",
      "EndDateTime": null,
      "PrincipalId": "c3000000-0000-4000-8000-000000000002",
      "PrincipalType": "ServicePrincipal",
      "MemberType": "Direct"
    },
    {
      "Kind": "Assignment",
      "Id": "/subscriptions/11111111-1111-4111-8111-111111111111/resourceGroups/rg-payroll/providers/Microsoft.Authorization/roleAssignmentSchedules/d4000000-0000-4000-8000-000000000012",
      "Scope": "/subscriptions/11111111-1111-4111-8111-111111111111/resourceGroups/rg-payroll",
      "RoleId": "b24988ac-6180-42a0-ab88-20f7382dd24c",
      "RoleName": "Contributor",
      "Tier": "T1",
      "State": "ActivePermanent",
      "EndDateTime": null,
      "PrincipalId": "a1000000-0000-4000-8000-000000000002",
      "PrincipalType": "User",
      "MemberType": "Direct"
    }
  ],
  "eligibilities": [
    {
      "Kind": "Eligibility",
      "Id": "/subscriptions/11111111-1111-4111-8111-111111111111/providers/Microsoft.Authorization/roleEligibilitySchedules/d4000000-0000-4000-8000-000000000004",
      "Scope": "/subscriptions/11111111-1111-4111-8111-111111111111",
      "RoleId": "8e3af657-a8ff-443c-a75c-2fe8c4bcb635",
      "RoleName": "Owner",
      "Tier": "T1",
      "State": "Eligible",
      "EndDateTime": "2027-01-13T00:00:00Z",
      "PrincipalId": "a1000000-0000-4000-8000-000000000004",
      "PrincipalType": "User",
      "MemberType": "Direct"
    },
    {
      "Kind": "Eligibility",
      "Id": "/subscriptions/11111111-1111-4111-8111-111111111111/providers/Microsoft.Authorization/roleEligibilitySchedules/d4000000-0000-4000-8000-000000000010",
      "Scope": "/subscriptions/11111111-1111-4111-8111-111111111111",
      "RoleId": "8e3af657-a8ff-443c-a75c-2fe8c4bcb635",
      "RoleName": "Owner",
      "Tier": "T1",
      "State": "EligiblePermanent",
      "EndDateTime": null,
      "PrincipalId": "a1000000-0000-4000-8000-000000000006",
      "PrincipalType": "User",
      "MemberType": "Direct"
    }
  ],
  "policies": [
    {
      "scope": "/providers/Microsoft.Management/managementGroups/contoso-root",
      "roleId": "8e3af657-a8ff-443c-a75c-2fe8c4bcb635",
      "name": "f6000000-0000-4000-8000-000000000001",
      "rules": [
        {
          "isExpirationRequired": true,
          "maximumDuration": "P365D",
          "id": "Expiration_Admin_Eligibility",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Eligibility",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": false,
          "maximumDuration": "P180D",
          "id": "Expiration_Admin_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [
            "Justification"
          ],
          "id": "Enablement_Admin_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": true,
          "maximumDuration": "PT8H",
          "id": "Expiration_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [],
          "id": "Enablement_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "claimValue": "",
          "isEnabled": false,
          "id": "AuthenticationContext_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyAuthenticationContextRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "setting": {
            "isApprovalRequired": false,
            "isApprovalRequiredForExtension": false,
            "isRequestorJustificationRequired": true,
            "approvalMode": "SingleStage",
            "approvalStages": []
          },
          "id": "Approval_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyApprovalRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        }
      ]
    },
    {
      "scope": "/providers/Microsoft.Management/managementGroups/contoso-root",
      "roleId": "b24988ac-6180-42a0-ab88-20f7382dd24c",
      "name": "f6000000-0000-4000-8000-000000000002",
      "rules": [
        {
          "isExpirationRequired": true,
          "maximumDuration": "P365D",
          "id": "Expiration_Admin_Eligibility",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Eligibility",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": false,
          "maximumDuration": "P180D",
          "id": "Expiration_Admin_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [
            "Justification"
          ],
          "id": "Enablement_Admin_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": true,
          "maximumDuration": "PT8H",
          "id": "Expiration_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [],
          "id": "Enablement_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "claimValue": "",
          "isEnabled": false,
          "id": "AuthenticationContext_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyAuthenticationContextRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "setting": {
            "isApprovalRequired": false,
            "isApprovalRequiredForExtension": false,
            "isRequestorJustificationRequired": true,
            "approvalMode": "SingleStage",
            "approvalStages": []
          },
          "id": "Approval_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyApprovalRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        }
      ]
    },
    {
      "scope": "/providers/Microsoft.Management/managementGroups/contoso-root",
      "roleId": "18d7d88d-d35e-4fb5-a5c3-7773c20a72d9",
      "name": "f6000000-0000-4000-8000-000000000003",
      "rules": [
        {
          "isExpirationRequired": true,
          "maximumDuration": "P365D",
          "id": "Expiration_Admin_Eligibility",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Eligibility",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": false,
          "maximumDuration": "P180D",
          "id": "Expiration_Admin_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [
            "Justification"
          ],
          "id": "Enablement_Admin_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": true,
          "maximumDuration": "PT8H",
          "id": "Expiration_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [],
          "id": "Enablement_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "claimValue": "",
          "isEnabled": false,
          "id": "AuthenticationContext_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyAuthenticationContextRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "setting": {
            "isApprovalRequired": false,
            "isApprovalRequiredForExtension": false,
            "isRequestorJustificationRequired": true,
            "approvalMode": "SingleStage",
            "approvalStages": []
          },
          "id": "Approval_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyApprovalRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        }
      ]
    },
    {
      "scope": "/subscriptions/11111111-1111-4111-8111-111111111111",
      "roleId": "8e3af657-a8ff-443c-a75c-2fe8c4bcb635",
      "name": "f6000000-0000-4000-8000-000000000004",
      "rules": [
        {
          "isExpirationRequired": true,
          "maximumDuration": "P365D",
          "id": "Expiration_Admin_Eligibility",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Eligibility",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": false,
          "maximumDuration": "P180D",
          "id": "Expiration_Admin_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [
            "Justification"
          ],
          "id": "Enablement_Admin_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": true,
          "maximumDuration": "PT8H",
          "id": "Expiration_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [],
          "id": "Enablement_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "claimValue": "",
          "isEnabled": false,
          "id": "AuthenticationContext_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyAuthenticationContextRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "setting": {
            "isApprovalRequired": false,
            "isApprovalRequiredForExtension": false,
            "isRequestorJustificationRequired": true,
            "approvalMode": "SingleStage",
            "approvalStages": []
          },
          "id": "Approval_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyApprovalRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        }
      ]
    },
    {
      "scope": "/subscriptions/11111111-1111-4111-8111-111111111111",
      "roleId": "b24988ac-6180-42a0-ab88-20f7382dd24c",
      "name": "f6000000-0000-4000-8000-000000000005",
      "rules": [
        {
          "isExpirationRequired": true,
          "maximumDuration": "P365D",
          "id": "Expiration_Admin_Eligibility",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Eligibility",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": false,
          "maximumDuration": "P180D",
          "id": "Expiration_Admin_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [
            "Justification"
          ],
          "id": "Enablement_Admin_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": true,
          "maximumDuration": "PT8H",
          "id": "Expiration_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [],
          "id": "Enablement_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "claimValue": "",
          "isEnabled": false,
          "id": "AuthenticationContext_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyAuthenticationContextRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "setting": {
            "isApprovalRequired": false,
            "isApprovalRequiredForExtension": false,
            "isRequestorJustificationRequired": true,
            "approvalMode": "SingleStage",
            "approvalStages": []
          },
          "id": "Approval_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyApprovalRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        }
      ]
    },
    {
      "scope": "/subscriptions/11111111-1111-4111-8111-111111111111",
      "roleId": "18d7d88d-d35e-4fb5-a5c3-7773c20a72d9",
      "name": "f6000000-0000-4000-8000-000000000006",
      "rules": [
        {
          "isExpirationRequired": true,
          "maximumDuration": "P365D",
          "id": "Expiration_Admin_Eligibility",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Eligibility",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": false,
          "maximumDuration": "P180D",
          "id": "Expiration_Admin_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [
            "Justification"
          ],
          "id": "Enablement_Admin_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": true,
          "maximumDuration": "PT8H",
          "id": "Expiration_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [],
          "id": "Enablement_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "claimValue": "",
          "isEnabled": false,
          "id": "AuthenticationContext_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyAuthenticationContextRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "setting": {
            "isApprovalRequired": false,
            "isApprovalRequiredForExtension": false,
            "isRequestorJustificationRequired": true,
            "approvalMode": "SingleStage",
            "approvalStages": []
          },
          "id": "Approval_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyApprovalRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        }
      ]
    },
    {
      "scope": "/subscriptions/22222222-2222-4222-8222-222222222222",
      "roleId": "8e3af657-a8ff-443c-a75c-2fe8c4bcb635",
      "name": "f6000000-0000-4000-8000-000000000007",
      "rules": [
        {
          "isExpirationRequired": true,
          "maximumDuration": "P365D",
          "id": "Expiration_Admin_Eligibility",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Eligibility",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": false,
          "maximumDuration": "P180D",
          "id": "Expiration_Admin_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [
            "Justification"
          ],
          "id": "Enablement_Admin_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": true,
          "maximumDuration": "PT8H",
          "id": "Expiration_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [],
          "id": "Enablement_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "claimValue": "",
          "isEnabled": false,
          "id": "AuthenticationContext_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyAuthenticationContextRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "setting": {
            "isApprovalRequired": false,
            "isApprovalRequiredForExtension": false,
            "isRequestorJustificationRequired": true,
            "approvalMode": "SingleStage",
            "approvalStages": []
          },
          "id": "Approval_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyApprovalRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        }
      ]
    },
    {
      "scope": "/subscriptions/22222222-2222-4222-8222-222222222222",
      "roleId": "b24988ac-6180-42a0-ab88-20f7382dd24c",
      "name": "f6000000-0000-4000-8000-000000000008",
      "rules": [
        {
          "isExpirationRequired": true,
          "maximumDuration": "P365D",
          "id": "Expiration_Admin_Eligibility",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Eligibility",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": false,
          "maximumDuration": "P180D",
          "id": "Expiration_Admin_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [
            "Justification"
          ],
          "id": "Enablement_Admin_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": true,
          "maximumDuration": "PT8H",
          "id": "Expiration_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [],
          "id": "Enablement_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "claimValue": "",
          "isEnabled": false,
          "id": "AuthenticationContext_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyAuthenticationContextRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "setting": {
            "isApprovalRequired": false,
            "isApprovalRequiredForExtension": false,
            "isRequestorJustificationRequired": true,
            "approvalMode": "SingleStage",
            "approvalStages": []
          },
          "id": "Approval_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyApprovalRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        }
      ]
    },
    {
      "scope": "/subscriptions/22222222-2222-4222-8222-222222222222",
      "roleId": "18d7d88d-d35e-4fb5-a5c3-7773c20a72d9",
      "name": "f6000000-0000-4000-8000-000000000009",
      "rules": [
        {
          "isExpirationRequired": true,
          "maximumDuration": "P90D",
          "id": "Expiration_Admin_Eligibility",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Eligibility",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": true,
          "maximumDuration": "P15D",
          "id": "Expiration_Admin_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [
            "MultiFactorAuthentication",
            "Justification"
          ],
          "id": "Enablement_Admin_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": true,
          "maximumDuration": "PT4H",
          "id": "Expiration_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [
            "Justification",
            "Ticketing"
          ],
          "id": "Enablement_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "claimValue": "c1",
          "isEnabled": true,
          "id": "AuthenticationContext_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyAuthenticationContextRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "setting": {
            "isApprovalRequired": true,
            "isApprovalRequiredForExtension": false,
            "isRequestorJustificationRequired": true,
            "approvalMode": "SingleStage",
            "approvalStages": [
              {
                "approvalStageTimeOutInDays": 1,
                "isApproverJustificationRequired": true,
                "escalationTimeInMinutes": 0,
                "primaryApprovers": [
                  {
                    "id": "e5000000-0000-4000-8000-000000000000",
                    "description": "PIM-Approvers-T0",
                    "isBackup": false,
                    "userType": "Group"
                  }
                ],
                "isEscalationEnabled": false,
                "escalationApprovers": null
              }
            ]
          },
          "id": "Approval_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyApprovalRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        }
      ]
    },
    {
      "scope": "/subscriptions/11111111-1111-4111-8111-111111111111/resourceGroups/rg-payroll",
      "roleId": "8e3af657-a8ff-443c-a75c-2fe8c4bcb635",
      "name": "f6000000-0000-4000-8000-000000000010",
      "rules": [
        {
          "isExpirationRequired": true,
          "maximumDuration": "P365D",
          "id": "Expiration_Admin_Eligibility",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Eligibility",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": false,
          "maximumDuration": "P180D",
          "id": "Expiration_Admin_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [
            "Justification"
          ],
          "id": "Enablement_Admin_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": true,
          "maximumDuration": "PT8H",
          "id": "Expiration_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [],
          "id": "Enablement_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "claimValue": "",
          "isEnabled": false,
          "id": "AuthenticationContext_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyAuthenticationContextRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "setting": {
            "isApprovalRequired": false,
            "isApprovalRequiredForExtension": false,
            "isRequestorJustificationRequired": true,
            "approvalMode": "SingleStage",
            "approvalStages": []
          },
          "id": "Approval_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyApprovalRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        }
      ]
    },
    {
      "scope": "/subscriptions/11111111-1111-4111-8111-111111111111/resourceGroups/rg-payroll",
      "roleId": "b24988ac-6180-42a0-ab88-20f7382dd24c",
      "name": "f6000000-0000-4000-8000-000000000011",
      "rules": [
        {
          "isExpirationRequired": true,
          "maximumDuration": "P365D",
          "id": "Expiration_Admin_Eligibility",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Eligibility",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": false,
          "maximumDuration": "P180D",
          "id": "Expiration_Admin_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [
            "Justification"
          ],
          "id": "Enablement_Admin_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": true,
          "maximumDuration": "PT8H",
          "id": "Expiration_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [],
          "id": "Enablement_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "claimValue": "",
          "isEnabled": false,
          "id": "AuthenticationContext_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyAuthenticationContextRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "setting": {
            "isApprovalRequired": false,
            "isApprovalRequiredForExtension": false,
            "isRequestorJustificationRequired": true,
            "approvalMode": "SingleStage",
            "approvalStages": []
          },
          "id": "Approval_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyApprovalRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        }
      ]
    },
    {
      "scope": "/subscriptions/11111111-1111-4111-8111-111111111111/resourceGroups/rg-payroll",
      "roleId": "18d7d88d-d35e-4fb5-a5c3-7773c20a72d9",
      "name": "f6000000-0000-4000-8000-000000000012",
      "rules": [
        {
          "isExpirationRequired": true,
          "maximumDuration": "P365D",
          "id": "Expiration_Admin_Eligibility",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Eligibility",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": false,
          "maximumDuration": "P180D",
          "id": "Expiration_Admin_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [
            "Justification"
          ],
          "id": "Enablement_Admin_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "Admin",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "isExpirationRequired": true,
          "maximumDuration": "PT8H",
          "id": "Expiration_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyExpirationRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "enabledRules": [],
          "id": "Enablement_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyEnablementRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "claimValue": "",
          "isEnabled": false,
          "id": "AuthenticationContext_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyAuthenticationContextRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        },
        {
          "setting": {
            "isApprovalRequired": false,
            "isApprovalRequiredForExtension": false,
            "isRequestorJustificationRequired": true,
            "approvalMode": "SingleStage",
            "approvalStages": []
          },
          "id": "Approval_EndUser_Assignment",
          "ruleType": "RoleManagementPolicyApprovalRule",
          "target": {
            "caller": "EndUser",
            "operations": [
              "All"
            ],
            "level": "Assignment",
            "targetObjects": null,
            "inheritableSettings": null,
            "enforcedSettings": null
          }
        }
      ]
    }
  ]
}
