Create custom roles to manage enterprise apps in Azure Active Directory