Should azd describe the minimum and individual required permissions per command?

[vhvb1989]

Related / Contex issue: https://github.com/Azure-Samples/azure-search-openai-demo/issues/848

Azd doesn't currently provide a granular list of required Azure permissions for running each command.
The documentation makes reference to some general roles (like Subscription-contributor/owner/admin) as what it is required for using azd. However, for someone who wants to be very specific, or needs to create a custom role containing only the minimum required permissions to run commands, like creating a custom role for each azd-command which is given to users depending on what the user will be able to run, there are no documentation from azd about how to do this.

Opening this issue for Team's consideration about bringing and maintaining such specific documentation per command.

[jongio]

The nodejs-mongo-aks template has this:

This templates requires Owner or User Access Administrator role to provision successfully

All templates that use RBAC should include this statement.