aquasecurity / aquasecurity/cloudsploit

Users resource on Azure inaccessible

Open
#309 5 comments 1 reaction 0 assignees View on GitHub
Dominant language
JavaScript
Stars
3.8k
Forks
751
Avg merge
11d 9h
Merged PRs (30d)
3

Description

I'm able to access all other resources in the `collection` response. For example, virtual machines, databases, and storage accounts. But there's this error message in Users resource.
`{"list"=>{"global"=>{"err"=>"Insufficient privileges to complete the operation. RequestId: c96f5a39-6b7f-41df-97e8-fbcef9914a84"}}}`
I've followed all the instructions mentioned here https://github.com/cloudsploit/scans/blob/master/docs/azure.md#cloud-provider-configuration otherwise I wouldn't have been able to access the other resources. But can't seem to access the users even after granting all extra API permissions to the Azure app and assigning all additional roles to Azure subscription.

Any help will be greatly appreciated. Thanks in advance.

Contributor guide

Open the contributing guide

Research direction

Start with docs/azure.md, especially the cloud-provider configuration instructions, then reproduce the collection request and isolate the Users resource response. Check which Azure app permissions and subscription roles are required for that resource; done means the Users resource is accessible or the missing requirement is documented.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure
Domain
authorization, cloud
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.