Fix Organizational Azure ARM template

[kubasobon]

Summary of your changes

Fix colliding role UUIDs and a couple of minor issues.

Related Issues

Related to #1974

Checklist

• I have added tests that prove my fix is effective or that my feature works
• I have added the necessary README/documentation (if appropriate)

Introducing a new rule?

• Generate rule metadata using this script
• Add relevant unit tests
• Generate relevant rule templates using this script, and open a PR in elastic/packages/cloud_security_posture

[mergify]

This pull request does not have a backport label. Could you fix it @kubasobon? 🙏
To fixup this pull request, you need to add the backport labels for the needed
branches, such as:

• backport-v./d./d./d is the label to automatically backport to the 8./d branch. /d is the digit
  NOTE: backport-skip has been added to this pull request.

[github-actions]

❌ No tests were run ❌

[kubasobon]

Tested on Azure:

[orouz]

i'll leave commenting/approving on the main changes for someone more knowledgeable about the specifics, but note that for the backport to 8.13, this:

cloudbeat/deploy/azure/ARM-for-organization-account.json

Line 419 in 425783d

"https://raw.githubusercontent.com/elastic/cloudbeat/main/deploy/azure/install-agent.sh"

will need to be changed to this:

cloudbeat/deploy/azure/ARM-for-organization-account.json

Line 375 in d70b269

"https://raw.githubusercontent.com/elastic/cloudbeat/8.13/deploy/azure/install-agent.sh"

main -> 8.13

[kubasobon]

@orouz I'll make sure to check. Since I don't touch that line and it is set correctly in the 8.13 branch, I think we will be fine.

https://github.com/elastic/cloudbeat/blob/8.13/deploy/azure/ARM-for-organization-account.json#L375