Guardrails for GitHub →
Mods
Azure

IAM Role: Azure/Metadata

PermissionGrant
microsoft.resources/deployments/operations/readMetadata
microsoft.resources/deployments/readMetadata
microsoft.resources/links/readMetadata
microsoft.resources/providers/readMetadata
microsoft.resources/resources/readMetadata
microsoft.resources/subscriptions/locations/readMetadata
microsoft.resources/subscriptions/operationresults/readMetadata
microsoft.resources/subscriptions/providers/readMetadata
microsoft.resources/subscriptions/readMetadata
microsoft.resources/subscriptions/resourcegroups/readMetadata
microsoft.resources/subscriptions/resourcegroups/deployments/operations/readMetadata
microsoft.resources/subscriptions/resourcegroups/deployments/operationstatuses/readMetadata
microsoft.resources/subscriptions/resourcegroups/deployments/readMetadata
microsoft.resources/subscriptions/resourcegroups/resources/readMetadata
microsoft.resources/subscriptions/resources/readMetadata
microsoft.resources/subscriptions/tagNames/readMetadata
microsoft.resources/subscriptions/tagNames/tagValues/readMetadata
microsoft.resources/tenants/readMetadata
microsoft.resources/tags/readMetadata