When creating custom Azure RBAC user role, what assignment scope types can you use?

• All scopes - "/"
• Management group - "/providers/Microsoft.Management/managementGroups/{groupId1}"
• Subscription - "/subscriptions/{subscriptionId1}"
• Resource groups - "/subscriptions/{subscriptionId1}/resourceGroups/resourceGroup1"
• Resources - 

This is the full hierarchy that you can use:

/subscriptions

    /{subscriptionId}

        /resourcegroups

            /{resourceGroupName}

                /providers

                    /{providerName}

                        /{resourceType}

                            /{resourceSubType1}

                                /{resourceSubType2}

                                    /{resourceName}

Assignments can be combined, so that you can apply a role to multiple subscriptions, multiple resource groups, to a subscription and a resource group. Any combination can be used. When multiple scopes are assigned, they need to be comma separated.