Context https://redhat-internal.slack.com/archives/CC5UHD0KA/p1736809979115209. 

We have created a few resources manually:

• Container Registry
  • stackroxinfra
  • stackroxci
• CI application + privileges
• infra application + privileges

They should the be added to IaC. 

FTR
https://portal.azure.com/#@stackrox.com/resource/subscriptions/3fe60802-349e-47c6-ba86-4d3bba2b5650/users
-> Add -> Add role assignment -> Container Registry Contributor and Data Access Configuration Administrator -> srox-temp-dev-test-access (https://portal.azure.com/#view/Microsoft_AAD_IAM/ManagedAppMenuBlade/~/Overview/objec[…]850f-383b2869abdf/appId/b6d27957-bdbd-4192-ab11-3c78ce429c8d).

and 
User Access Administrator (Allow user to assign all roles except privileged administrator roles Owner, UAA, RBAC (Recommended))