Make RoleDefinitions mutable

sdk/keyvault/Azure.Security.KeyVault.Administration/api/Azure.Security.KeyVault.Administration.netstandard2.0.cs

@@ -105,15 +105,15 @@ public static partial class KeyVaultModelFactory
         public static Azure.Security.KeyVault.Administration.BackupOperation BackupOperation(Azure.Response response, Azure.Security.KeyVault.Administration.KeyVaultBackupClient client, string id, System.Uri blobContainerUri, System.DateTimeOffset? startTime = default(System.DateTimeOffset?), System.DateTimeOffset? endTime = default(System.DateTimeOffset?), string errorMessage = null) { throw null; }
         public static Azure.Security.KeyVault.Administration.RestoreOperation RestoreOperation(Azure.Response response, Azure.Security.KeyVault.Administration.KeyVaultBackupClient client, string id, System.DateTimeOffset? startTime = default(System.DateTimeOffset?), System.DateTimeOffset? endTime = default(System.DateTimeOffset?), string errorMessage = null) { throw null; }
         public static Azure.Security.KeyVault.Administration.Models.RoleAssignment RoleAssignment(string id, string name, string type, Azure.Security.KeyVault.Administration.Models.RoleAssignmentPropertiesWithScope properties) { throw null; }
-        public static Azure.Security.KeyVault.Administration.Models.RoleDefinition RoleDefinition(string id, string name, string type, string roleName, string description, string roleType, System.Collections.Generic.IReadOnlyList<Azure.Security.KeyVault.Administration.Models.KeyVaultPermission> permissions, System.Collections.Generic.IReadOnlyList<string> assignableScopes) { throw null; }
+        public static Azure.Security.KeyVault.Administration.Models.RoleDefinition RoleDefinition(string id, string name, string type, string roleName, string description, string roleType, System.Collections.Generic.IList<Azure.Security.KeyVault.Administration.Models.KeyVaultPermission> permissions, System.Collections.Generic.IList<string> assignableScopes) { throw null; }
     }
     public partial class KeyVaultPermission
     {
         internal KeyVaultPermission() { }
-        public System.Collections.Generic.IReadOnlyList<string> Actions { get { throw null; } }
-        public System.Collections.Generic.IReadOnlyList<string> DataActions { get { throw null; } }
-        public System.Collections.Generic.IReadOnlyList<string> NotActions { get { throw null; } }
-        public System.Collections.Generic.IReadOnlyList<string> NotDataActions { get { throw null; } }
+        public System.Collections.Generic.IList<string> Actions { get { throw null; } }
+        public System.Collections.Generic.IList<string> DataActions { get { throw null; } }
+        public System.Collections.Generic.IList<string> NotActions { get { throw null; } }
+        public System.Collections.Generic.IList<string> NotDataActions { get { throw null; } }
     }
     public partial class KeyVaultServiceError
     {
@@ -146,11 +146,11 @@ internal RoleAssignmentPropertiesWithScope() { }
     public partial class RoleDefinition
     {
         internal RoleDefinition() { }
-        public System.Collections.Generic.IReadOnlyList<string> AssignableScopes { get { throw null; } }
+        public System.Collections.Generic.IList<string> AssignableScopes { get { throw null; } }
         public string Description { get { throw null; } }
         public string Id { get { throw null; } }
         public string Name { get { throw null; } }
-        public System.Collections.Generic.IReadOnlyList<Azure.Security.KeyVault.Administration.Models.KeyVaultPermission> Permissions { get { throw null; } }
+        public System.Collections.Generic.IList<Azure.Security.KeyVault.Administration.Models.KeyVaultPermission> Permissions { get { throw null; } }
         public string RoleName { get { throw null; } }
         public string RoleType { get { throw null; } }
         public string Type { get { throw null; } }

sdk/keyvault/Azure.Security.KeyVault.Administration/src/KeyVaultModelFactory.cs

@@ -22,7 +22,7 @@ public static class KeyVaultModelFactory
         /// <param name="roleType"> The role type. </param>
         /// <param name="permissions"> Role definition permissions. </param>
         /// <param name="assignableScopes"> Role definition assignable scopes. </param>
-        public static RoleDefinition RoleDefinition(string id, string name, string type, string roleName, string description, string roleType, IReadOnlyList<KeyVaultPermission> permissions, IReadOnlyList<string> assignableScopes) =>
+        public static RoleDefinition RoleDefinition(string id, string name, string type, string roleName, string description, string roleType, IList<KeyVaultPermission> permissions, IList<string> assignableScopes) =>
             new RoleDefinition(id, name, type, roleName, description, roleType, permissions, assignableScopes);
 
         /// <summary>

sdk/keyvault/Azure.Security.KeyVault.Administration/src/KeyVaultPermission.cs

@@ -0,0 +1,21 @@
+// Copyright (c) Microsoft Corporation. All rights reserved.
+// Licensed under the MIT License.
+
+using System.Collections.Generic;
+using Azure.Core;
+
+namespace Azure.Security.KeyVault.Administration.Models
+{
+    /// <inheritdoc/>
+    public partial class KeyVaultPermission
+    {
+        /// <inheritdoc/>
+        public IList<string> Actions { get; }
+        /// <inheritdoc/>
+        public IList<string> NotActions { get; }
+        /// <inheritdoc/>
+        public IList<string> DataActions { get; }
+        /// <inheritdoc/>
+        public IList<string> NotDataActions { get; }
+    }
+}

sdk/keyvault/Azure.Security.KeyVault.Administration/src/RoleDefinition.cs

@@ -0,0 +1,17 @@
+// Copyright (c) Microsoft Corporation. All rights reserved.
+// Licensed under the MIT License.
+
+using System.Collections.Generic;
+using Azure.Core;
+
+namespace Azure.Security.KeyVault.Administration.Models
+{
+    /// <inheritdoc/>
+    public partial class RoleDefinition
+    {
+        /// <inheritdoc/>
+        public IList<KeyVaultPermission> Permissions { get; }
+        /// <inheritdoc/>
+        public IList<string> AssignableScopes { get; }
+    }
+}