At any time, you can modify a user’s role or roles to expand or reduce their access and permissions. You can also delete a user. And individual users can view their roles and change their name or password as necessary. Information provided here is helpful for custom role creation, like creating a firewall read-only user. By default, Cloud NGFW requires owner or contributor roles on the subscription to subscribe to the resource provider and to use the Cloud NGFW resource.