Design a least-privilege RBAC model for a multi-team Azure environment with proper access boundaries, custom roles, and separation of duties. Free template — copy and paste into ChatGPT, Claude, or Copilot.