az role definition list cannot show only built-in roles

[jiasli]

Related command
az role definition list

Is your feature request related to a problem? Please describe.
According to https://learn.microsoft.com/en-us/azure/role-based-access-control/role-definitions-list#list-role-definitions, the underlying Role Definitions - List REST API supports returning

1. CustomRole + BuiltInRole
2. only CustomRole
3. only BuiltInRole

But in CLI, --custom-role-only only supports returning

1. CustomRole + BuiltInRole
2. only CustomRole

azure-cli/src/azure-cli/azure/cli/command_modules/role/custom.py

Lines 166 to 167 in 649886e

	if custom_role_only:
	roles = [r for r in roles if worker.get_role_property(r, 'role_type') == 'CustomRole']

thus losing the ability to only show BuiltInRole.

Describe the solution you'd like
az role definition list should support a --type argument that maps to the $filter=type+eq+'{type}' filter.

Describe alternatives you've considered

Additional context

[yonzhan]

Thank you for opening this issue, we will look into it.

[jiasli]

This part of the document https://learn.microsoft.com/en-us/azure/role-based-access-control/role-definitions-list is wrong:

The following example lists all of the built-in roles.

az role definition list --custom-role-only false --output json --query '[].{roleName:roleName, description:description, roleType:roleType}'

Apparently, CustomRole are also returned:

> az role definition list --custom-role-only false --output json --query '[].{roleName:roleName, description:description, roleType:roleType}'
[
  {
    "description": "Can monitor compute, network and storage, and restart virtual machines",
    "roleName": "cli-test-roleegjwqoc",
    "roleType": "CustomRole"
  },
  {
    "description": "Can monitor compute, network and storage, and restart virtual machines",
    "roleName": "cli-test-rolelm2gk2l",
    "roleType": "CustomRole"
  },
  {
    "description": "Can monitor compute, network and storage, and restart virtual machines",
    "roleName": "cli-test-rolezp2d5bu",
    "roleType": "CustomRole"
  },
  {
    "description": "Can monitor compute, network and storage, and restart virtual machines",
    "roleName": "cli-test-rolenarrj5x",
    "roleType": "CustomRole"
  },
  {
    "description": "acr push",
    "roleName": "AcrPush",
    "roleType": "BuiltInRole"
  },