PermissionsThe Enforce Azure Cosmos DB Database Accounts Are Accessible to Selected Networks policy pack requires 1 permission:microsoft.documentdb/databaseaccounts/write