Adding missing permissions (#946)

Azure · Jan 23, 2025 · 4a55500 · 4a55500
1 parent 2edf93b
commit 4a55500
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/infra-as-code/bicep/modules/policy/assignments/alzDefaults/alzDefaultPolicyAssignments.bicep b/infra-as-code/bicep/modules/policy/assignments/alzDefaults/alzDefaultPolicyAssignments.bicep
@@ -1730,6 +1730,9 @@ module modPolicyAssignmentLzsDeployVmArcTrack '../../../policy/assignments/polic
       varRbacRoleDefinitionIds.monitoringContributor
       varRbacRoleDefinitionIds.reader
     ]
+    parPolicyAssignmentIdentityRoleAssignmentsAdditionalMgs: [
+      string(varManagementGroupIds.platform)
+    ]
     parTelemetryOptOut: parTelemetryOptOut
   }
 }
@@ -1761,6 +1764,9 @@ module modPolicyAssignmentLzsDeployVmChangeTrack '../../../policy/assignments/po
       varRbacRoleDefinitionIds.managedIdentityOperator
       varRbacRoleDefinitionIds.reader
     ]
+    parPolicyAssignmentIdentityRoleAssignmentsAdditionalMgs: [
+      string(varManagementGroupIds.platform)
+    ]
     parTelemetryOptOut: parTelemetryOptOut
   }
 }
@@ -1792,6 +1798,9 @@ module modPolicyAssignmentLzsDeployVmssChangeTrack '../../../policy/assignments/
       varRbacRoleDefinitionIds.managedIdentityOperator
       varRbacRoleDefinitionIds.reader
     ]
+    parPolicyAssignmentIdentityRoleAssignmentsAdditionalMgs: [
+      string(varManagementGroupIds.platform)
+    ]
     parTelemetryOptOut: parTelemetryOptOut
   }
 }
@@ -1819,6 +1828,9 @@ module modPolicyAssignmentLzsDeployVmArcMonitor '../../../policy/assignments/pol
       varRbacRoleDefinitionIds.reader
       varRbacRoleDefinitionIds.connectedMachineResourceAdministrator
     ]
+    parPolicyAssignmentIdentityRoleAssignmentsAdditionalMgs: [
+      string(varManagementGroupIds.platform)
+    ]
     parTelemetryOptOut: parTelemetryOptOut
   }
 }