Fine grained permissions for this exporter

[jaspreet-yb]

Currently as per requirement this exporter needs "Reader" permission at subscription level https://github.com/webdevops/azure-resourcemanager-exporter#azure-permissions. We have a use case where we need only quota usage. Is it possible to have a more fine grained permission , something like monitoring reader?

[mblaschke]

sure, the exporter needs at lest (should be Microsoft.Resources/subscriptions/read) and other permissions.
feel free to use a custom role for the exporter.

[marcoboffi]

sure, the exporter needs at lest (should be Microsoft.Resources/subscriptions/read) and other permissions. feel free to use a custom role for the exporter.

What are permissions required for azurerm_graph_* enablement ?

[mblaschke]

either Directory.Read.All (would not do it) or Application.Read.All should be enough (to get all apps/serviceprincipals)