NetBackup™ Marketplace Deployment on Azure Cloud

Permissions required for User Managed Identity in Marketplace

Below are the permission that are required for User Managed Identity in Azure Marketplace.

{

    "id": "/subscriptions/<susbcription ID>/providers/Microsoft.Authorization/roleDefinitions/<id>",

    "properties": {

 "roleName": "<snapshot-manager>",

"description": "Necessary permissions for Azure plug-in operations in CloudPoint",

"assignableScopes": [
],

 "permissions": [

   {

     "actions": [

     "Microsoft.Storage/*/read",

     "Microsoft.Compute/*/read",

     "Microsoft.Sql/*/read",

     "Microsoft.Compute/disks/write",

     "Microsoft.Compute/disks/delete",

     "Microsoft.Compute/disks/beginGetAccess/action",

     "Microsoft.Compute/disks/endGetAccess/action",

     "Microsoft.Compute/snapshots/delete",

     "Microsoft.Compute/snapshots/write",

     "Microsoft.Compute/snapshots/beginGetAccess/action",

     "Microsoft.Compute/snapshots/endGetAccess/action",

     "Microsoft.Compute/virtualMachines/write",

     "Microsoft.Compute/virtualMachines/delete",

     "Microsoft.Compute/virtualMachines/start/action",

     "Microsoft.Compute/virtualMachines/vmSizes/read",

     "Microsoft.Compute/virtualMachines/powerOff/action",

     "Microsoft.Network/*/read",

     "Microsoft.Network/networkInterfaces/delete",

     "Microsoft.Network/networkInterfaces/effectiveNetworkSecurityGroups/action",

     "Microsoft.Network/networkInterfaces/join/action",

     "Microsoft.Network/networkInterfaces/write",

     "Microsoft.Network/networkSecurityGroups/join/action",

     "Microsoft.Network/networkSecurityGroups/write",

     "Microsoft.Network/publicIPAddresses/delete",

     "Microsoft.Network/publicIPAddresses/join/action",

     "Microsoft.Network/publicIPAddresses/write",

     "Microsoft.Network/virtualNetworks/subnets/join/action",

     "Microsoft.Resources/*/read",

     "Microsoft.Resources/subscriptions/tagNames/tagValues/write",

     "Microsoft.Resources/subscriptions/tagNames/write",

     "Microsoft.Subscription/*/read",

     "Microsoft.Authorization/locks/*",

     "Microsoft.Authorization/*/read",

     "Microsoft.ContainerService/managedClusters/agentPools/read",

     "Microsoft.ContainerService/managedClusters/read",

     "Microsoft.Compute/virtualMachineScaleSets/write",

     "Microsoft.Compute/virtualMachineScaleSets/delete/action",

     "Microsoft.Compute/virtualMachineScaleSets/virtualMachines/write",

     "Microsoft.Network/privateDnsZones/A/write"

           ],

            "notActions": [],

            "dataActions": [],

            "notDataActions": []

            }

        ]

    }

}