Please make sure that the access request is within the allowed policy properties.

[grendo]

Hi, been trying to get the script to work. I created the rbac role, assigned a user at the subscription level. Then I went into security centre and tried to request access. I get the following error

The given access request is not a subset of policy '/subscriptions//resourceGroups//providers/Microsoft.Security/locations/australiaeast/jitNetworkAccessPolicies/default'. Please make sure that the access request is within the allowed policy properties.

Does the rbac role work for you through the azure portal ?