Phase 01
Authorize PHItag
To manage your tags, we need a "Service Principal" with Tag Contributor access. This follows the Principle of Least Privilege.
Azure CLI Command
az ad sp create-for-rbac --name PHItag-Engine --role 'Tag Contributor'Security Note: This role only allows PHItag to edit metadata. We cannot read your database contents, access VMs, or view patient records.