azure-policy
azure-policy copied to clipboard
Inherit a tag from the resource group if missing: Managed Identity Permission
Currently the Required Role for this Policy is "Contributor" and I think this is to much Permission for only modifing Azure Policies. Shouldn't be the "Tag Contributor" (Id: 4a9ae827-6dc8-4573-8ac7-8239d42aa03f) Role enough?
Any Feedback?