security

Permissions we request

Exactly which Azure scopes we ask for and why.

  • Reader on each subscription — read configuration of resources
  • Directory.Read.All — read users, groups, role assignments
  • Security Reader — read Defender for Cloud findings