A custom Azure Policy that detects new databases and triggers a deployment script if the RBAC assignment is missing. A deployment script that runs as a User Assigned Managed Identity (e.g., ...