add additional privilages required to deployment role
"Description": "Permissions required for OneFuzz deployment",
"Actions": [
"Microsoft.Authorization/locks/*",
- "Microsoft.Keyvault/vaults/*",
"Microsoft.Authorization/roleAssignments/write",
"Microsoft.EventGrid/eventSubscriptions/read",
"Microsoft.EventGrid/eventSubscriptions/write",
"Microsoft.Insights/components/read",
"Microsoft.Insights/components/write",
+ "Microsoft.Keyvault/vaults/*",
+ "Microsoft.OperationalInsights/workspaces/datasources/write",
+ "Microsoft.OperationalInsights/workspaces/write",
+ "Microsoft.OperationsManagement/solutions/write",
"Microsoft.Resources/deployments/operationStatuses/read",
"Microsoft.Resources/deployments/read",
- "Microsoft.Resources/deployments/write",
"Microsoft.Resources/deployments/validate/action",
+ "Microsoft.Resources/deployments/write",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.Resources/subscriptions/resourceGroups/write",
"Microsoft.Resources/subscriptions/resourcegroups/delete",
+ "Microsoft.SignalRService/SignalR/listkeys/action",
+ "Microsoft.SignalRService/SignalR/write",
"Microsoft.Storage/storageAccounts/blobServices/containers/write",
"Microsoft.Storage/storageAccounts/blobServices/write",
+ "Microsoft.Storage/storageAccounts/listAccountSas/action",
"Microsoft.Storage/storageAccounts/listKeys/action",
"Microsoft.Storage/storageAccounts/read",
"Microsoft.Storage/storageAccounts/write",
- "Microsoft.Web/serverfarms/write",
"Microsoft.Web/serverfarms/read",
- "Microsoft.Web/sites/config/list/action",
- "Microsoft.Web/sites/config/read",
- "Microsoft.Web/sites/config/write",
- "Microsoft.Web/sites/publishxml/action",
- "Microsoft.Web/sites/restart/action",
- "Microsoft.Web/sites/read",
- "Microsoft.Web/sites/write"
+ "Microsoft.Web/serverfarms/write",
+ "Microsoft.Web/sites/*",
+ "Microsoft.insights/autoscalesettings/write",
+ "Microsoft.insights/workbooks/write",
+ "Microsoft.ManagedIdentity/userAssignedIdentities/write"
],
"DataActions": [],
"NotDataActions": [],
