Permissions

The Enforce Azure Cosmos DB Database Accounts Are Accessible to Selected Networks policy pack requires 1 permission:

• microsoft.documentdb/databaseaccounts/write