Add Microsoft.Compute/virtualMachines/runCommand/action as a required…

… permission for VM scanning. (#208) Signed-off-by: Preslav <[email protected]>
mondoohq · Jun 3, 2024 · efc5736 · efc5736
1 parent 8d2cd34
commit efc5736
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 3 deletions.
diff --git a/docs/platform/infra/cloud/azure/_include-webapp.mdx b/docs/platform/infra/cloud/azure/_include-webapp.mdx
@@ -46,7 +46,8 @@ Grant web app permissions by creating a custom RBAC role for Mondoo and assignin
         "Microsoft.KeyVault/vaults/*/read",
         "Microsoft.KeyVault/operations/read",
         "Microsoft.Compute/virtualMachines/runCommands/read",
-        "Microsoft.Compute/virtualMachines/runCommands/write"
+        "Microsoft.Compute/virtualMachines/runCommands/write",
+        "Microsoft.Compute/virtualMachines/runCommand/action"
        ],
       "notActions": [],
        "dataActions": [

diff --git a/docs/platform/infra/cloud/azure/azure-integration-scan-group.mdx b/docs/platform/infra/cloud/azure/azure-integration-scan-group.mdx
@@ -172,7 +172,8 @@ To assign this role across all subscriptions under a management group, follow th
        "Microsoft.KeyVault/vaults/*/read",
        "Microsoft.KeyVault/operations/read",
        "Microsoft.Compute/virtualMachines/runCommands/read",
-       "Microsoft.Compute/virtualMachines/runCommands/write"
+       "Microsoft.Compute/virtualMachines/runCommands/write",
+       "Microsoft.Compute/virtualMachines/runCommand/action"
      ],
      "notActions": [],
      "dataActions": [

diff --git a/docs/platform/infra/cloud/azure/azure-integration-scan-subscription.mdx b/docs/platform/infra/cloud/azure/azure-integration-scan-subscription.mdx
@@ -190,7 +190,8 @@ Follow these steps, substituting the subscription ID(s) you copied in Step A for
        "Microsoft.KeyVault/vaults/*/read",
        "Microsoft.KeyVault/operations/read",
        "Microsoft.Compute/virtualMachines/runCommands/read",
-       "Microsoft.Compute/virtualMachines/runCommands/write"
+       "Microsoft.Compute/virtualMachines/runCommands/write",
+       "Microsoft.Compute/virtualMachines/runCommand/action"
      ],
      "notActions": [],
      "dataActions": [