#Get-AzRoleDefinition 'Storage Data Contributor' | ConvertTo-Json 


$fileName =  "c:\temp\subscriptions.csv" 
Get-AzSubscription | Export-Csv -Path $fileName -NoTypeInformation



Set-AzRoleDefinition -InputFile 'C:\Repository\Cloud Engineering\Custom roles\Storage Data Contributor.json'
Set-AzRoleDefinition -InputFile 'C:\Repository\Cloud Engineering\Custom roles\Storage Data Reader.json'
New-AzRoleDefinition -InputFile 'C:\Repository\Cloud Engineering\Custom roles\Resource Lock Administrator.json'




#https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac#built-in-role-definitions
 # jimmy.van.den.berg@effectory.com "99dbd99f-9165-46a3-94d7-d8467121f0d1"

$subscriptionId = "2161debe-6042-4633-b10e-de77c06cabc6" ; $resourceGroupName = "phasedrelease"; $accountName = "phasedrelease"; $principalIdReader = "b0773fcc-378b-415a-9f33-b5c2d51b37f6"; $principalIdWriter = "c9c9389d-02df-40ab-b939-3e26736c6a87"

$subscriptionId = "3190b0fd-4a66-4636-a204-5b9f18be78a6" ; $resourceGroupName = "authorization"; $accountName = "authorizationeff"; $principalIdReader = "bd8fb398-a065-46f9-a486-1178dce979c3"; $principalIdWriter = "69bea414-ff10-40de-87c3-65b1903e9b68"

$subscriptionId = "86945e42-fa5a-4bbc-948f-3f5407f15d3e" ; $resourceGroupName = "hierarchy"; $accountName = "hierarchyeff"; $principalIdReader = "dd576450-b564-4659-ac00-163036bf1dff"; $principalIdWriter = "591b32ff-33b8-4839-bf35-58ec262b014f"

$subscriptionId = "f9ab522b-4895-492d-b8a8-ca6e1f60c2a8" ; $resourceGroupName = "participant-exchange"; $accountName = "participantexchange"; $principalIdReader = "3b3ebcdf-04b6-4cf8-a237-425cc3952770"; $principalIdWriter = "6c38e6fb-4190-45bc-a347-b132afb47cba"

$subscriptionId = "7feeb150-9ee0-4aea-992a-5f3a89d933e6" ; $resourceGroupName = "results-calculation"; $accountName = "results-calculation"; $principalIdReader = "645b069a-c367-4e0e-9dac-38595663acab"; $principalIdWriter = "fa86c1a4-570c-4f00-8960-1a17eb23d613"

$subscriptionId = "7feeb150-9ee0-4aea-992a-5f3a89d933e6" ; $resourceGroupName = "results-calculation"; $accountName = "results-calculation-stage"; $principalIdReader = "645b069a-c367-4e0e-9dac-38595663acab"; $principalIdWriter = "fa86c1a4-570c-4f00-8960-1a17eb23d613"

set-azcontext -SubscriptionId $subscriptionId

New-AzCosmosDBSqlRoleAssignment -AccountName $accountName -PrincipalId $principalIdReader -ResourceGroupName $resourceGroupName -RoleDefinitionName "Cosmos DB Built-in Data Reader" `
 -Scope "/subscriptions/$subscriptionId/resourceGroups/$resourceGroupName/providers/Microsoft.DocumentDB/databaseAccounts/$accountName"
 
 New-AzCosmosDBSqlRoleAssignment -AccountName $accountName -PrincipalId $principalIdWriter -ResourceGroupName $resourceGroupName -RoleDefinitionName "Cosmos DB Built-in Data Contributor" `
  -Scope "/subscriptions/$subscriptionId/resourceGroups/$resourceGroupName/providers/Microsoft.DocumentDB/databaseAccounts/$accountName"

#Get-AzCosmosDBSqlRoleAssignment -AccountName $accountName -ResourceGroupName $resourceGroupName  | Where PrincipalId -eq $principalIdReader
#Get-AzCosmosDBSqlRoleAssignment -AccountName $accountName -ResourceGroupName $resourceGroupName  | Where PrincipalId -eq $principalIdWriter
# Remove-AzCosmosDBSqlRoleAssignment -AccountName $accountName -Id "/subscriptions/2161debe-6042-4633-b10e-de77c06cabc6/resourceGroups/phasedrelease/providers/Microsoft.DocumentDB/databaseAccounts/phasedrelease/sqlRoleAssignments/0991d31e-323d-4312-b328-92d75cbe0166" -ResourceGroupName $resourceGroupName


$subscriptionId = "4820b5d8-cc1d-49bd-93e5-0c7a656371b7" ; $resourceGroupName = "my-effectory-api"; $accountName = "my-effectory-api"; 

Get-AzCosmosDBSqlRoleDefinition -ResourceGroupName $resourceGroupName -AccountName $accountName
Get-AzCosmosDBSqlRoleAssignment -AccountName $accountName -ResourceGroupName $resourceGroupName