Skip to main content
Matrix42 Self-Service Help Center

Permissions required for scanning Azure subscriptions


For every subscription whose data you want to import via the Azure Hybrid Benefit extension, you need to set up access rights.

Permissions required for scanning an Azure subscription

To configure required permissions, open Subscriptions from Azure Portal home page and take the following steps for each subscription that will be scanned:

  1. Click the subscription from the list of all subscriptions.
  2. In the navigation pane click Resource Providers. Check that the following resource providers are listed as registered:
  • Microsoft.ClassicSubscription
  • Microsoft.Subscription
  • Microsoft.SqlVirtualMachine
  • Microsoft.Sql
  • Microsoft.Compute
  • Microsoft.Resources

If any of them is not registered, run the Register action for it. 

  1. In the navigation page for the same subscription, click Access Control.
  2. On the Check access tab, click Add role assignment.
  3. On the page that open, select Reader under Role > Job Function Roles.


  1. Proceed to the next page and add a user whose credentials will be used to authenticate when creating the Azure Hybrid Benefit service connection.
  2. Proceed to the next page and click Review + assign to finish the role assignment. 

On the Role assignments tab, you can see all current assignments.

  • Was this article helpful?