Permissions

The Enforce Azure Network Security Groups to Reject All Ingress, RDP, and SSH Inbound Access policy pack requires 2 permissions:

• microsoft.network/networksecuritygroups/read
• microsoft.network/networksecuritygroups/write