Advanced AI Prompt for Azure RBAC Custom Role for Managed Identities

Act as an Azure Security Architect. Create a custom Azure RBAC role definition in strict JSON format designed specifically for Managed Identities. This role must be tightly scoped to the resource group [RESOURCE_GROUP] located within the subscription [SUBSCRIPTION_ID]. The role must only permit the following granular management operations: [ACTIONS_LIST]. Explicitly ensure that `DataActions` (data-plane operations) are separated from `Actions` (control-plane operations) and that the `AssignableScopes` array is strictly limited to the specified resource group level to mathematically prevent lateral privilege creeping across the subscription.