Add support for create, update, and delete for custom role definitions

eng/common/TestResources/README.md

@@ -30,7 +30,7 @@ Connect-AzAccount -Subscription 'YOUR SUBSCRIPTION ID'
 eng\common\TestResources\New-TestResources.ps1 -ServiceDirectory 'search'
 ```
 
-The `OutFile` switch would be set if you are running this for a .NET project on Windows. This will save test environment settings
+The `OutFile` switch should be set if you are running this for a .NET project on Windows. This will save test environment settings
 into a test-resources.json.env file next to test-resources.json. The file is protected via DPAPI.
 The environment file would be scoped to the current repository directory and avoids the need to
 set environment variables or restart your IDE to recognize them.
@@ -89,6 +89,12 @@ Remove-AzADServicePrincipal -ApplicationId $sp.ApplicationId -Force
 
 If you persisted environment variables, you should also remove those as well.
 
+Some scripts accept the `AdditionalParameters` parameter to control additional resource configuration options. For example:
+
+```powershell
+.\eng\common\TestResources\New-TestResources.ps1 keyvault -AdditionalParameters @{enableHsm = $true}
+```
+
 ## In CI
 
 Test pipelines should include deploy-test-resources.yml and

sdk/keyvault/Azure.Security.KeyVault.Administration/CHANGELOG.md

@@ -2,6 +2,9 @@
 
 ## 4.0.0-beta.4 (Unreleased)
 
+### Added
+
+- Support in `KeyVaultAccessControlClient` to create, update, and delete custom role definitions.
 
 ## 4.0.0-beta.3 (2020-11-12)
 

sdk/keyvault/Azure.Security.KeyVault.Administration/src/DataAction.cs

@@ -0,0 +1,12 @@
+// Copyright (c) Microsoft Corporation. All rights reserved.
+// Licensed under the MIT License.
+
+using System;
+using Azure.Core;
+
+namespace Azure.Security.KeyVault.Administration.Models
+{
+    [CodeGenModel("DataAction")]
+    public readonly partial struct KeyVaultDataAction : IEquatable<KeyVaultDataAction>
+    { }
+}