PermissionsThe Azure CIS v2.0.0 - Section 5 - Logging and Monitoring policy pack requires 2 permissions:microsoft.network/networkwatchers/flowlogs/deletemicrosoft.storage/storageaccounts/blobservices/containers/write