Merge pull request #294742 from ApnaLakshay/added-missing-roles-and-permissions

added missing permissions in AUM and Microsoft Maintenance docs

Author: prmerger-automator[bot]

articles/role-based-access-control/built-in-roles/management-and-governance.md

@@ -2143,6 +2143,11 @@ Provides access to manage maintenance configurations with maintenance scope InGu
 > | [Microsoft.Maintenance](../permissions/management-and-governance.md#microsoftmaintenance)/configurationAssignments/read | Read maintenance configuration assignment. |
 > | [Microsoft.Maintenance](../permissions/management-and-governance.md#microsoftmaintenance)/configurationAssignments/write | Create or update maintenance configuration assignment. |
 > | [Microsoft.Maintenance](../permissions/management-and-governance.md#microsoftmaintenance)/configurationAssignments/delete | Delete maintenance configuration assignment. |
+> | [Microsoft.Maintenance](../permissions/management-and-governance.md#microsoftmaintenance)/updates/read | Read maintenance updates resource. |
+> | [Microsoft.Maintenance](../permissions/management-and-governance.md#microsoftmaintenance)/applyUpdates/read | Read maintenance apply updates resource. |
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/read | Get list of update deployment |
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/write | Create or update an update deployment |
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/operation statuses | Get a list of update deployment operation statuses |
 > | [Microsoft.Maintenance](../permissions/management-and-governance.md#microsoftmaintenance)/configurationAssignments/maintenanceScope/InGuestPatch/read | Read maintenance configuration assignment for InGuestPatch maintenance scope. |
 > | [Microsoft.Maintenance](../permissions/management-and-governance.md#microsoftmaintenance)/configurationAssignments/maintenanceScope/InGuestPatch/write | Create or update a maintenance configuration assignment for InGuestPatch maintenance scope. |
 > | [Microsoft.Maintenance](../permissions/management-and-governance.md#microsoftmaintenance)/configurationAssignments/maintenanceScope/InGuestPatch/delete | Delete maintenance configuration assignment for InGuestPatch maintenance scope. |

articles/update-manager/roles-permissions.md

@@ -62,12 +62,22 @@ Note that below permissions would be required in addition to permissions on indi
 |---|---|---|
 | **Register the subscription for the** **Microsoft.Maintenance resource provider** | Microsoft.Maintenance/register/action | Subscription |
 | **Create/modify maintenance configuration** | Microsoft.Maintenance/maintenanceConfigurations/write | Subscription/resource group |
+| **Read maintenance configuration** | Microsoft.Maintenance/maintenanceConfigurations/read | Subscription/resource group |
+| **Delete maintenance configuration** | Microsoft.Maintenance/maintenanceConfigurations/delete | Subscription/resource group |
 | **Create/modify configuration assignments** | Microsoft.Maintenance/configurationAssignments/write | Subscription/Resource group / machine |
-| **Read permission for Maintenance updates resource** | Microsoft.Maintenance/updates/read | Machine |
-| **Read permission for Maintenance apply updates resource** | Microsoft.Maintenance/applyUpdates/read | Machine |
+| **Read configuration assignments** | Microsoft.Maintenance/configurationAssignments/read | Subscription/Resource group / machine |
+| **Delete configuration assignments** | Microsoft.Maintenance/configurationAssignments/delete | Subscription/Resource group / machine |
+| **Read maintenance updates resource** | Microsoft.Maintenance/updates/read | Machine |
+| **Read maintenance apply updates resource** | Microsoft.Maintenance/applyUpdates/read | Machine |
 | **Get list of update  deployment** | Microsoft.Resources/deployments/read | Maintenance configuration and virtual machine subscription |
 | **Create or update an update deployment** | Microsoft.Resources/deployments/write | Maintenance configuration and virtual machine subscription |
 | **Get a list of update deployment operation statuses** | Microsoft.Resources/deployments/operation statuses | Maintenance configuration and virtual machine subscription |
+| **Read maintenance configuration assignment for InGuestPatch maintenance scope** | Microsoft.Maintenance/configurationAssignments/maintenanceScope/InGuestPatch/read | Subscription/Resource group / machine |
+| **Create/modify maintenance configuration assignment for InGuestPatch maintenance scope** | Microsoft.Maintenance/configurationAssignments/maintenanceScope/InGuestPatch/write | Subscription/Resource group / machine |
+| **Delete maintenance configuration assignment for InGuestPatch maintenance scope** | Microsoft.Maintenance/configurationAssignments/maintenanceScope/InGuestPatch/delete | Subscription/Resource group / machine |
+| **Read maintenance configuration for InGuestPatch maintenance scope** | Microsoft.Maintenance/maintenanceConfigurations/maintenanceScope/InGuestPatch/read | Subscription/resource group |
+| **Create/modify maintenance configuration for InGuestPatch maintenance scope** | Microsoft.Maintenance/maintenanceConfigurations/maintenanceScope/InGuestPatch/write | Subscription/resource group |
+| **Delete maintenance configuration for InGuestPatch maintenance scope** | Microsoft.Maintenance/maintenanceConfigurations/maintenanceScope/InGuestPatch/delete | Subscription/resource group |
 
 ## Next steps
 - [Prerequisites of Update Manager](prerequisites.md).