Merge pull request #124005 from bmoore-msft/patch-21

Update containers.md for AKS Contributor role changes

Author: Jak-MS

articles/role-based-access-control/built-in-roles/containers.md

@@ -1521,9 +1521,14 @@ Grants access to read and write Azure Kubernetes Service clusters
 > [!div class="mx-tableFixed"]
 > | Actions | Description |
 > | --- | --- |
-> | [Microsoft.ContainerService](../permissions/containers.md#microsoftcontainerservice)/managedClusters/read | Get a managed cluster |
-> | [Microsoft.ContainerService](../permissions/containers.md#microsoftcontainerservice)/managedClusters/write | Creates a new managed cluster or updates an existing one |
+> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
+> | [Microsoft.ContainerService](../permissions/containers.md#microsoftcontainerservice)/locations/* | Create and manage a managed cluster |
+> | [Microsoft.ContainerService](../permissions/containers.md#microsoftcontainerservice)/managedClusters/* | Create and manage a managed cluster |
+> | [Microsoft.ContainerService](../permissions/containers.md#microsoftcontainerservice)/managedclustersnapshots/* | Create and manage a managed cluster snapshot |
+> | [Microsoft.ContainerService](../permissions/containers.md#microsoftcontainerservice)/snapshots/* | Create and manage a snapshot |
+> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
 > | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/* | Create and manage a deployment |
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |
 > | **NotActions** |  |
 > | *none* |  |
 > | **DataActions** |  |
@@ -1542,9 +1547,14 @@ Grants access to read and write Azure Kubernetes Service clusters
   "permissions": [
     {
       "actions": [
-        "Microsoft.ContainerService/managedClusters/read",
-        "Microsoft.ContainerService/managedClusters/write",
-        "Microsoft.Resources/deployments/*"
+          "Microsoft.Authorization/*/read",
+          "Microsoft.ContainerService/locations/*",
+          "Microsoft.ContainerService/managedClusters/*",
+          "Microsoft.ContainerService/managedclustersnapshots/*",
+          "Microsoft.ContainerService/snapshots/*",
+          "Microsoft.Insights/alertRules/*",
+          "Microsoft.Resources/deployments/*",
+          "Microsoft.Resources/subscriptions/resourceGroups/read"
       ],
       "notActions": [],
       "dataActions": [],