Permissions

The Enforce Encryption at Rest Is Enabled for Azure Compute Disks policy pack requires 2 permissions:

• microsoft.compute/diskencryptionsets/read
• microsoft.compute/disks/write