Setting permissions for scanning Azure virtual machines

Overview

To scan Azure virtual machines by using the Azure Inventory data provider, you need to set necessary permissions to be able to use the Run Command feature.

Assigning the Virtual Machine Contributor role to your subscriptions

1. Open Subscriptions from the Microsoft Azure home page and go to a subscription that contains the virtual machines to be scanned.
2. Open Access Control (IAM) and use the Add button to add role assignment.
3. On the Role > Job function roles tab select the Virtual Machine Contributor role and click Next.
4. On the Members tab, choose the Assign access to radio button and select your registered application as a member of this role.

5. Click Next and then Review + assign to save your changes.

Now you can see the new role assignment under Access Control (IAM) > Role assignments.