https://yosoyx.com/deep-dive-into-role-based-access-control-rbac-in-microsoft-intune/