Azure storage account RBAC

Is there a built-in Azure role(s) that will accomplish the following:   - Create any Azure resource - Apply permissions to any Azure resource - Not have read access to resources unless explicitly...