Over-priviledged managed identity - role definition ID should be changed

[KennethMLdk]

The managed identity created when assigning this policy is highly over-priviledged and does not comply with least priviledge principle.

azure-policy/built-in-policies/policyDefinitions/Tags/InheritTag_Add_FromSubscription.json

Line 38 in 8d69fad

"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"

Role Contributor:
"roleDefinitionIds": [ "/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c" ],

Should be changed to Tag Contributor:
"roleDefinitionIds": [ "/providers/microsoft.authorization/roleDefinitions/4a9ae827-6dc8-4573-8ac7-8239d42aa03f" ],