Question:
A freshly deployed application service exists within a specific subscription. When the application goes live and gains users, a support team will oversee logs and assist with subsequent deployments. To enable the support team to view subscription details via RBAC, which access roles should be granted?
Answer:
*/read grants read access to all resources within the subscription.
Microsoft.Insights/diagnosticSettings/*/read is incorrect because it only allows read access to Microsoft Insights, but support team wants all resources.