aquasecurity / aquasecurity/cloudsploit
Users resource on Azure inaccessible
- Dominant language
- JavaScript
- Stars
- 3.8k
- Forks
- 751
- Avg merge
- 11d 9h
- Merged PRs (30d)
- 3
Description
I'm able to access all other resources in the `collection` response. For example, virtual machines, databases, and storage accounts. But there's this error message in Users resource.
`{"list"=>{"global"=>{"err"=>"Insufficient privileges to complete the operation. RequestId: c96f5a39-6b7f-41df-97e8-fbcef9914a84"}}}`
I've followed all the instructions mentioned here https://github.com/cloudsploit/scans/blob/master/docs/azure.md#cloud-provider-configuration otherwise I wouldn't have been able to access the other resources. But can't seem to access the users even after granting all extra API permissions to the Azure app and assigning all additional roles to Azure subscription.
Any help will be greatly appreciated. Thanks in advance.
Contributor guide
Research direction
Start with docs/azure.md, especially the cloud-provider configuration instructions, then reproduce the collection request and isolate the Users resource response. Check which Azure app permissions and subscription roles are required for that resource; done means the Users resource is accessible or the missing requirement is documented.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure
- Domain
- authorization, cloud
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100