Tools
Azure role checker
Verify role assignment readiness before onboarding a tenant into recurring security reporting workflows.
Required checks
- 1. Directory Reader assigned in Microsoft Entra ID
- 2. Security Reader assigned on target Azure subscription scope
- 3. Reader assigned on target Azure subscription scope
- 4. At least one enabled subscription is visible to the connected account
- 5. Validation checks pass for Graph, Resource Graph, and subscription read access