R12.3-2026Apr21 NetBrain Required Azure IAM Permissions Copy CodeCode{ "properties": { "roleName": "App_Netbrain_IE", "description": "Used for Netbrain IE API access", "assignableScopes": [ "/subscriptions/modifytoyoursubscription1", "/subscriptions/modifytoyoursubscriptions2" ], "permissions": [ { "actions": [ "*/read", "Microsoft.Network/applicationGateways/backendhealth/action", "Microsoft.Network/applicationGateways/getBackendHealthOnDemand/action", "Microsoft.Network/applicationGateways/effectiveNetworkSecurityGroups/action", "Microsoft.Network/applicationGateways/effectiveRouteTable/action", "Microsoft.Network/networkInterfaces/effectiveRouteTable/action", "Microsoft.Network/networkInterfaces/effectiveNetworkSecurityGroups/action", "Microsoft.Network/virtualHubs/effectiveRoutes/action", "Microsoft.Network/virtualnetworkgateways/getadvertisedroutes/action", "Microsoft.Network/virtualnetworkgateways/getbgppeerstatus/action", "Microsoft.Network/virtualnetworkgateways/getlearnedroutes/action", "Microsoft.Network/virtualnetworkgateways/supportedvpndevices/action", "Microsoft.Network/virtualwans/vpnconfiguration/action", "Microsoft.Network/vpngateways/getlearnedroutes/action", "Microsoft.Network/vpngateways/getadvertisedroutes/action", "Microsoft.Cdn/CheckResourceUsage/action", "Microsoft.Cdn/operationresults/profileresults/CheckResourceUsage/action", "Microsoft.Cdn/operationresults/profileresults/endpointresults/CheckResourceUsage/action", "Microsoft.Cdn/profiles/CheckResourceUsage/action", "Microsoft.Cdn/profiles/endpoints/CheckResourceUsage/action", "Microsoft.Network/publicIPAddresses/ddosProtectionStatus/action", "Microsoft.Network/virtualNetworks/ddosProtectionStatus/action", "Microsoft.Sql/servers/databases/encryptionProtector/revalidate/action", "Microsoft.Network/networkWatchers/availableProvidersList/action", "PaloAltoNetworks.Cloudngfw/firewalls/getGlobalRulestack/action", "Microsoft.NetApp/netAppAccounts/getKeyVaultStatus/action", "Microsoft.Cache/redisEnterprise/listSkusForScaling/action", "Microsoft.DocumentDB/databaseAccounts/readonlykeys/action", "Microsoft.DocumentDB/databaseAccounts/listKeys/action", "Microsoft.DocumentDB/databaseAccounts/listConnectionStrings/action", "Microsoft.DocumentDB/cassandraClusters/fetchNodeStatus/action", "Microsoft.Cache/redis/listKeys/action", "Microsoft.DataFactory/factories/querytriggers/action", "Microsoft.DataFactory/factories/getDataPlaneAccess/action", "microsoft.app/containerapps/listsecrets/action", "microsoft.app/containerapps/listcustomhostnameanalysis/action", "microsoft.app/containerapps/getauthtoken/action", "PaloAltoNetworks.Cloudngfw/firewalls/getSupportInfo/action", "PaloAltoNetworks.Cloudngfw/listCloudManagerTenants/action", "PaloAltoNetworks.Cloudngfw/listSupportInfo/action" ], "notActions": [], "dataActions": [], "notDataActions": [] } ] } } Appendix Exclude and Include VNets in Discovery