IAM & RBAC Enumeration

List Role Assignments

Roles assigned to current SP/user

az role assignment list --assignee "$CLIENT_ID" --all --output table

Inspect a custom role definition

az role definition list --name "<role-name>" \
  --query "[].permissions[0].{actions:actions, dataActions:dataActions}"