Skip to content

Commit b00a08d

Browse files
Merge pull request #208743 from mbender-ms/patch-13
AVNM- Update to Permissions required
2 parents 9b07572 + 5fa9578 commit b00a08d

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

articles/virtual-network-manager/concept-azure-policy-integration.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -63,7 +63,7 @@ Policy definitions and assignment can be created through with API/PS/CLI or [Azu
6363
## Required permissions
6464

6565
To use Azure Policy with network groups, users need the following permissions:
66-
- `Microsoft.ApiManagement/service/apis/operations/policy/write` is needed at the scope you're assigning.
66+
- `Microsoft.Authorization/policyassignments/Write` and `Microsoft.Authorization/policydefinitions/Write` are needed at the scope you're assigning.
6767
- `Microsoft.Network/networkManagers/networkGroups/join/action` action is needed on the target network group referenced in the **Add to network group** section. This permission allows for the adding and removing of objects from the target network group.
6868
- When using set definitions to assign multiple policies at the same time, concurrent `networkGroup/join/action` permissions are needed on all definitions being assigned at the time of assignment.
6969

0 commit comments

Comments
 (0)