Remediating RBAC Roles on Assignments

[Springstone]

Overview/Summary

• Remediating default policy/initiative assignments using Owner role to be least privilege where possible. Updated assignments:
  • DINE-ActivityLogPolicyAssignment.json (Management Group: Intermediate Root)
  • DINE-AksPolicyPolicyAssignment.json (added additional required role)
  • DINE-ResourceDiagnosticsPolicyAssignment.json (Management Group: Intermediate Root)
  • DINE-SQLEncryptionPolicyAssignment.json (Management Group: Landing Zone)
  • DINE-VMBackupPolicyAssignment.json (Management Group: Landing Zone)
  • DINE-VMMonitoringPolicyAssignment.json (Management Group: Intermediate Root)
  • DINE-VMSSMonitoringPolicyAssignment.json (Management Group: Intermediate Root)

Addresses user story: AB#30459

This PR fixes/adds/changes/removes

1. Updates default assignments listed above

Breaking Changes

1. N/A

Testing Evidence

Please provide any testing evidence to show that your Pull Request works/fixes as described and planned (include screenshots, if appropriate).

Testing URLs

Azure Public

As part of this Pull Request I have

• Checked for duplicate Pull Requests
• Associated it with relevant issues, for tracking and closure.
• Ensured my code/branch is up-to-date with the latest changes in the main branch
• Performed testing and provided evidence.
• Ensured contribution guidance is followed.
• Updated relevant and associated documentation.
• Updated the "What's New?" wiki page (located: /docs/wiki/whats-new.md)

[Springstone]

GTM. Tested and policies remediate as expected.

[jtracey93]

LGTM. @Springstone

Just need tests to pass