targetScope = 'resourceGroup' targetScope = 'subscription' targetScope = 'managementGroup' targetScope = 'tenant'