PermissionsThe Azure CIS v2.0.0 - Section 6 - Networking policy pack requires 3 permissions:microsoft.network/networksecuritygroups/writemicrosoft.network/networkwatchers/deletemicrosoft.network/networkwatchers/flowlogs/write