Azure changed Permissions

[florianow]

Perhaps it would be more sensible to explore the available built-in roles instead of maintaining custom roles for the CloudFoundation group. The organization hierarchy cannot deploy definition sets due to the lack of a specific role for that purpose. Azure is updating roles more rapidly than we can keep up with through manual maintenance.