No permissions specs specified for the azure appliance

Hi,

I seem unable to find the necessary azure permissions to use the -spn flag for the scollector.

I set up an azure appliance/service principal i thought might be the necessary permissions, but it failed with "access denied to specified API version" and ending with "Insufficent privileges to complete the operation.

I don't know any other way to dump the logs. Can someone direct me to where the necessary azure permissions are for the -spn flag?

Thanks in advance