Ok thank you - my fault the Reader role was time limited and had to be activated. Once activated, it was working as expected. I would prefer not have to give Reader level access to the subscription so looks like #107 will suit my needs going forward - thanks!
Originally posted by @murphm54 in #119