Merge pull request #184389 from daphnemamsft/biceptemplatedeploypermissions

Added Include file for Bicep and Arm Template Permissions

Author: ShannonLeavitt

articles/azure-resource-manager/bicep/deploy-cli.md

@@ -25,6 +25,8 @@ Samples for the Azure CLI are written for the `bash` shell. To run this sample i
 
 If you don't have Azure CLI installed, you can use Azure Cloud Shell. For more information, see [Deploy Bicep files from Azure Cloud Shell](./deploy-cloud-shell.md).
 
+[!INCLUDE [permissions](../../../includes/template-deploy-permissions.md)]
+
 ## Deployment scope
 
 You can target your deployment to a resource group, subscription, management group, or tenant. Depending on the scope of the deployment, you use different commands.

articles/azure-resource-manager/bicep/deploy-powershell.md

@@ -22,6 +22,8 @@ You need Azure PowerShell and to be connected to Azure:
 
 If you don't have PowerShell installed, you can use Azure Cloud Shell. For more information, see [Deploy Bicep files from Azure Cloud Shell](./deploy-cloud-shell.md).
 
+[!INCLUDE [permissions](../../../includes/template-deploy-permissions.md)]
+
 ## Deployment scope
 
 You can target your deployment to a resource group, subscription, management group, or tenant. Depending on the scope of the deployment, you use different commands.

articles/azure-resource-manager/templates/deploy-cli.md

@@ -17,6 +17,8 @@ The deployment commands changed in Azure CLI version 2.2.0. The examples in this
 
 If you don't have Azure CLI installed, you can use Azure Cloud Shell. For more information, see [Deploy ARM templates from Azure Cloud Shell](deploy-cloud-shell.md).
 
+[!INCLUDE [permissions](../../../includes/template-deploy-permissions.md)]
+
 ## Deployment scope
 
 You can target your Azure deployment template to a resource group, subscription, management group, or tenant. Depending on the scope of the deployment, you use different commands.

articles/azure-resource-manager/templates/deploy-cloud-shell.md

@@ -11,6 +11,8 @@ You can use [Azure Cloud Shell](../../cloud-shell/overview.md) to deploy an Azur
 
 You can deploy to any scope. This article shows deploying to a resource group.
 
+[!INCLUDE [permissions](../../../includes/template-deploy-permissions.md)]
+
 ## Deploy remote template
 
 To deploy an external template, provide the URI of the template exactly as you would for any external deployment. The external template could be in a GitHub repository or and an external storage account.

articles/azure-resource-manager/templates/deploy-powershell.md

@@ -21,6 +21,8 @@ You need to install Azure PowerShell and connect to Azure:
 
 If you don't have PowerShell installed, you can use Azure Cloud Shell. For more information, see [Deploy ARM templates from Azure Cloud Shell](deploy-cloud-shell.md).
 
+[!INCLUDE [permissions](../../../includes/template-deploy-permissions.md)]
+
 ## Deployment scope
 
 You can target your deployment to a resource group, subscription, management group, or tenant. Depending on the scope of the deployment, you use different commands.

articles/azure-resource-manager/templates/deploy-rest.md

@@ -11,6 +11,8 @@ This article explains how to use the Azure Resource Manager REST API with Azure
 
 You can either include your template in the request body or link to a file. When using a file, it can be a local file or an external file that is available through a URI. When your template is in a storage account, you can restrict access to the template and provide a shared access signature (SAS) token during deployment.
 
+[!INCLUDE [permissions](../../../includes/template-deploy-permissions.md)]
+
 ## Deployment scope
 
 You can target your deployment to a resource group, Azure subscription, management group, or tenant. Depending on the scope of the deployment, you use different commands.

articles/azure-resource-manager/templates/deploy-to-azure-button.md

@@ -16,6 +16,8 @@ The deployment scope is determined by the template schema. For more information,
 - [management groups](deploy-to-management-group.md)
 - [tenants](deploy-to-tenant.md)
 
+[!INCLUDE [permissions](../../../includes/template-deploy-permissions.md)]
+
 ## Use common image
 
 To add the button to your web page or repository, use the following image:

includes/template-deploy-permissions.md

@@ -0,0 +1,14 @@
+---
+
+ms.author: daphnemamsft
+ms.service: bicep, arm-templates
+ms.topic: include
+ms.date: 1/07/2022
+
+---
+
+## Required permissions 
+
+To deploy a Bicep file or ARM template, you need write access on the resources you're deploying and access to all operations on the Microsoft.Resources/deployments resource type. For example, to deploy a virtual machine, you need `Microsoft.Compute/virtualMachines/write` and `Microsoft.Resources/deployments/*` permissions.
+
+For a list of roles and permissions, see [Azure built-in roles](../articles/role-based-access-control/built-in-roles.md).