You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
As Azure services and supporting APIs evolve, it is becoming more difficult to follow and implement the practice granting least-privileged access. Many times, the only option is to grant r/w just so that teams can perform necessary operations (an example would be restarting an Azure Web App, VM, etc.) because it is very difficult to map operations to permissions.
Please consider including in the documentation for all automation libraries and commands the required permissions to perform the associated action. This will greatly simplify the task of evaluating and implementing custom RBAC roles for use in large enterprise organizations.