The deploy.azure.com site is very useful; however, the way the backend functionality behind deploy.azure.com is written, it unnecessarily requires subscription-level access. We have users who only have resource group-level access and we would like to be able to use deploy.azure.com with those users. Please fix the backend logic so that this solution works with minimum privilege (contributor access to a resource group, with no subscription-level permissions).