Get-AzRecoveryServicesBackupRecommendedArchivableRPGroup requires '/action' permission

[MarcSteene]

Description

Hi,

I'm attempting to use Get-AzRecoveryServicesBackupRecommendedArchivableRPGroup to get the recovery points recommended for move to archive tier for cost savings. A 'get' or 'read' command like this I'd expect would only require read permissions to retrieve the recovery points, but it requires an action permission meaning the Reader role is insufficient: ‘Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems/recoveryPointsRecommendedForMove/action‘

This makes things awkward from a reporting perspective as a custom role has to be created or an overprivileged role such as backup operator needs to be assigned.

Script or Debug output

No response

Environment data

No response

Module versions

No response

Error output

No response

[ghost]

Thank you for your feedback. This has been routed to the support team for assistance.

[RakeshMohanMSFT]

@MarcSteene Thank you for reaching out, we are looking into it.

[Daya-Patil]

@MarcSteene do you still experience the issue ?

[hiaga]

Please share debug logs by adding the -Debug parameter to this command and re-open this issue. we can check further on this