I am looking at way to delegate contributor / owner permissions to resource groups lifecycle based on name pattern of the group. I am having trouble finding the proper approach. In custom role definition, there does not seem to be an easy way to assign Actions to resource type based on name pattern, while in azure policy definition i do not see a way to query user principal to determine a role of a user making an access action.
Policy is not user aware, so you will not be able to get that information and enforce it.