Create a new custom role
To create a custom Azure RBAC role to use with the service principal in NetBackup, see Azure documentation:
https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles
Note the following:
The scope of the role must be at the subscription level. This ensures the service principal works for all storage accounts in the subscription.
Grant the required Actions and Data actions permissions.