diff --git a/deploy/asset-inventory-arm/ARM-for-organization-account.dev.json b/deploy/asset-inventory-arm/ARM-for-organization-account.dev.json
index 1621e11b7b..192c6266ae 100644
--- a/deploy/asset-inventory-arm/ARM-for-organization-account.dev.json
+++ b/deploy/asset-inventory-arm/ARM-for-organization-account.dev.json
@@ -318,7 +318,8 @@
                                         "actions": [
                                             "Microsoft.Web/sites/*/read",
                                             "Microsoft.Web/sites/config/Read",
-                                            "Microsoft.Web/sites/config/list/Action"
+                                            "Microsoft.Web/sites/config/list/Action",
+                                            "microsoft.directory/servicePrincipals/read"
                                         ]
                                     }
                                 ],
diff --git a/deploy/asset-inventory-arm/ARM-for-organization-account.json b/deploy/asset-inventory-arm/ARM-for-organization-account.json
index 08942e3b32..a92b4d17e9 100644
--- a/deploy/asset-inventory-arm/ARM-for-organization-account.json
+++ b/deploy/asset-inventory-arm/ARM-for-organization-account.json
@@ -356,7 +356,8 @@
                                         "actions": [
                                             "Microsoft.Web/sites/*/read",
                                             "Microsoft.Web/sites/config/Read",
-                                            "Microsoft.Web/sites/config/list/Action"
+                                            "Microsoft.Web/sites/config/list/Action",
+                                            "microsoft.directory/servicePrincipals/read"
                                         ]
                                     }
                                 ],
diff --git a/deploy/asset-inventory-arm/ARM-for-single-account.dev.json b/deploy/asset-inventory-arm/ARM-for-single-account.dev.json
index a8e98b16fe..ef1a55f129 100644
--- a/deploy/asset-inventory-arm/ARM-for-single-account.dev.json
+++ b/deploy/asset-inventory-arm/ARM-for-single-account.dev.json
@@ -248,7 +248,8 @@
                                         "actions": [
                                             "Microsoft.Web/sites/*/read",
                                             "Microsoft.Web/sites/config/Read",
-                                            "Microsoft.Web/sites/config/list/Action"
+                                            "Microsoft.Web/sites/config/list/Action",
+                                            "microsoft.directory/servicePrincipals/read"
                                         ]
                                     }
                                 ],
diff --git a/deploy/asset-inventory-arm/ARM-for-single-account.json b/deploy/asset-inventory-arm/ARM-for-single-account.json
index 68564ce5c9..712762df58 100644
--- a/deploy/asset-inventory-arm/ARM-for-single-account.json
+++ b/deploy/asset-inventory-arm/ARM-for-single-account.json
@@ -271,7 +271,8 @@
                                         "actions": [
                                             "Microsoft.Web/sites/*/read",
                                             "Microsoft.Web/sites/config/Read",
-                                            "Microsoft.Web/sites/config/list/Action"
+                                            "Microsoft.Web/sites/config/list/Action",
+                                            "microsoft.directory/servicePrincipals/read"
                                         ]
                                     }
                                 ],