Permissions required are:
permissions {
"Microsoft.Resources/resourceGroups/write",
"Microsoft.Resources/resourceGroups/read",
"Microsoft.Resources/resourceGroups/delete",
"Microsoft.Storage/storageAccounts/write",
"Microsoft.Storage/storageAccounts/read",
"Microsoft.Storage/storageAccounts/delete",
"Microsoft.Storage/storageAccounts/blobServices/containers/write",
"Microsoft.Storage/storageAccounts/blobServices/containers/read",
"Microsoft.Storage/storageAccounts/blobServices/containers/delete"
}