Azure Cosmos DB now provides a new RBAC role: Cosmos DB Operator. This new role lets you provision Azure Cosmos accounts, databases, and containers, but can’t access the keys that are required to access the data.
Source: Microsoft Azure – aggiornamenti