Find the least-privilege Azure role to assign.
Recent revisions are kept. Restoring one creates a new revision.
