Use an custom role for Azure

[dfredell]

Instead of adding 2 roles separately than still missing a storage one. Make one new role. Adding formatting to the list so it is easier to track the steps needed.

When first following the guid and running the standard cloudsploit scan on CLI it ran into two permissions issues. This fixes those, and adds formatting.

 ./index.js --cloud azure --ignore-ok --config ./config.js

Errors:

Aqua does not have permission to list storage account keys. For help fixing this error, see: https://bit.ly/2AhlVP0     

Unable to query for Network Watchers: Operation 'Microsoft.Network/networkWatchers/read' failed as server encountered too many requests. Please try after '15' seconds. Tracking Id is '12ed1301-8e83-49a0-b752-3a7871556023'.