{
	"if": {
		"allOf": [
			{
				"field": "type",
				"equals": "Microsoft.Authorization/roleAssignments"
			},
			{
				"not": {
					"field": "Microsoft.Authorization/roleAssignments/roleDefinitionId",
					"in": "[parameters('roleDefinitionIds')]"
				}
			}
		]
	},
	"then": {
		"effect": "deny"
	}
}