diff --git a/.github/workflows/setup_azure.yaml b/.github/workflows/setup_azure.yaml
index 053fc4e27a..8c4ce35cce 100644
--- a/.github/workflows/setup_azure.yaml
+++ b/.github/workflows/setup_azure.yaml
@@ -1,5 +1,7 @@
 name: Set up Azure environment
 on: workflow_dispatch
+permissions:
+  id-token: write
 
 env:
   SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}