Add missing ARM Template permissions (read ServicePrincipal) (#2849)

add missing ARM Template permissions
elastic · Jan 9, 2025 · 9e84460 · 9e84460
1 parent bb7a3e9
commit 9e84460
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 4 deletions.
diff --git a/deploy/asset-inventory-arm/ARM-for-organization-account.dev.json b/deploy/asset-inventory-arm/ARM-for-organization-account.dev.json
@@ -318,7 +318,8 @@
                                         "actions": [
                                             "Microsoft.Web/sites/*/read",
                                             "Microsoft.Web/sites/config/Read",
-                                            "Microsoft.Web/sites/config/list/Action"
+                                            "Microsoft.Web/sites/config/list/Action",
+                                            "microsoft.directory/servicePrincipals/read"
                                         ]
                                     }
                                 ],

diff --git a/deploy/asset-inventory-arm/ARM-for-organization-account.json b/deploy/asset-inventory-arm/ARM-for-organization-account.json
@@ -356,7 +356,8 @@
                                         "actions": [
                                             "Microsoft.Web/sites/*/read",
                                             "Microsoft.Web/sites/config/Read",
-                                            "Microsoft.Web/sites/config/list/Action"
+                                            "Microsoft.Web/sites/config/list/Action",
+                                            "microsoft.directory/servicePrincipals/read"
                                         ]
                                     }
                                 ],

diff --git a/deploy/asset-inventory-arm/ARM-for-single-account.dev.json b/deploy/asset-inventory-arm/ARM-for-single-account.dev.json
@@ -248,7 +248,8 @@
                                         "actions": [
                                             "Microsoft.Web/sites/*/read",
                                             "Microsoft.Web/sites/config/Read",
-                                            "Microsoft.Web/sites/config/list/Action"
+                                            "Microsoft.Web/sites/config/list/Action",
+                                            "microsoft.directory/servicePrincipals/read"
                                         ]
                                     }
                                 ],

diff --git a/deploy/asset-inventory-arm/ARM-for-single-account.json b/deploy/asset-inventory-arm/ARM-for-single-account.json
@@ -271,7 +271,8 @@
                                         "actions": [
                                             "Microsoft.Web/sites/*/read",
                                             "Microsoft.Web/sites/config/Read",
-                                            "Microsoft.Web/sites/config/list/Action"
+                                            "Microsoft.Web/sites/config/list/Action",
+                                            "microsoft.directory/servicePrincipals/read"
                                         ]
                                     }
                                 ],