From 6c7bb45c1e0df9a4e3d874ad8ac79a3a5733f099 Mon Sep 17 00:00:00 2001
From: Eytan Naim <eytan.naim@imperva.com>
Date: Wed, 31 Jan 2024 19:03:56 +0200
Subject: [PATCH] wip

---
 .../azure/OnboardMssqlPermissions.txt         | 23 +++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 permissions_samples/azure/OnboardMssqlPermissions.txt

diff --git a/permissions_samples/azure/OnboardMssqlPermissions.txt b/permissions_samples/azure/OnboardMssqlPermissions.txt
new file mode 100644
index 000000000..566e905b1
--- /dev/null
+++ b/permissions_samples/azure/OnboardMssqlPermissions.txt
@@ -0,0 +1,23 @@
+{
+    "properties": {
+        "roleName": "dsf_role",
+        "description": "Azure role for DSF Kit",
+        "assignableScopes": [
+           # Fill subscription scope here
+        ],
+        "permissions": [
+            {
+                "actions": [
+                    "Microsoft.EventHub/namespaces/*",
+                    "Microsoft.Insights/diagnosticSettings/*",
+                    "Microsoft.Sql/locations/connectionPoliciesAzureAsyncOperation/*",
+                    "Microsoft.Sql/servers/*",
+                    "Microsoft.Storage/storageAccounts/*",
+                ],
+                "notActions": [],
+                "dataActions": [],
+                "notDataActions": []
+            }
+        ]
+    }
+}
\ No newline at end of file