R12.1-JA-2025June05

NetworkBrain Required Azure IAM Permissions

Code
{
"properties": {
"roleName": "Role_App_Netbrain_IE",
"description": "Used for Netbrain IE API access. /action permissions are used due to Azure design for some processes like downloading some tables which are generated at run-time.",
"assignableScopes": [
"/subscriptions/modifytoyoursubscription1",
"/subscriptions/modifytoyoursubscription2"
]
},
"permissions": [
{
"actions": [
"Microsoft.Resources/tenants/*/read",
"Microsoft.Resources/subscriptions/*/read",
"Microsoft.Subscription/*/read",
"Microsoft.Network/*/read",
"Microsoft.Compute/*/read",
"Microsoft.Insights/Metrics/*/Read",
"Microsoft.DocumentDB/databaseAccounts/*/Read",
"Microsoft.DBforMariaDB/servers/*/Read",
"Microsoft.DBforMySQL/servers/*/Read",
"Microsoft.DBforPostgreSQL/servers/*/Read",
"Microsoft.Sql/servers/*/Read",
"Microsoft.Storage/storageAccounts/*/read",
"Microsoft.CostManagement/*/read",
"PaloAltoNetworks.Cloudngfw/*/read",
"Microsoft.ResourceHealth/*/read"

"Microsoft.Network/applicationGateways/backendhealth/action",
"Microsoft.Network/applicationGateways/getBackendHealthOnDemand/action",
"Microsoft.Network/applicationGateways/effectiveNetworkSecurityGroups/action",
"Microsoft.Network/applicationGateways/effectiveRouteTable/action",
"Microsoft.Network/networkInterfaces/effectiveRouteTable/action",
"Microsoft.Network/networkInterfaces/effectiveNetworkSecurityGroups/action",
"Microsoft.Network/virtualHubs/effectiveRoutes/action",
"Microsoft.Network/virtualNetworkGateways/getadvertisedroutes/action",
"Microsoft.Network/virtualNetworkGateways/getbgppeerstatus/action",
"Microsoft.Network/virtualNetworkGateways/getlearnedroutes/action",
"Microsoft.Network/virtualNetworkGateways/supportedvpndevices/action",
"Microsoft.Network/virtualwans/vpnconfiguration/action",
"Microsoft.Network/vpnGateways/getLearnedRoutes/action",
"Microsoft.Network/vpnGateways/getAdvertisedRoutes/action",
"Microsoft.Network/virtualNetworkGateways/read",
"Microsoft.Network/virtualHubs/bgpConnections/advertisedRoutes/action",
"Microsoft.Network/virtualHubs/bgpConnections/learnedRoutes/action"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
]
}