Merge pull request #3170 from hawkowl/hawkowl/denyassignment-insights

Allow metricalerts, actiongroups, and activitylogalerts for monitoring in the denyassignment
Azure · Feb 6, 2024 · 2d7fc45 · 2d7fc45
2 parents 47121a5 + a9fca79
commit 2d7fc45
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/pkg/cluster/deploybaseresources_additional.go b/pkg/cluster/deploybaseresources_additional.go
@@ -37,6 +37,12 @@ func (m *manager) denyAssignment() *arm.Resource {
 							"Microsoft.Compute/disks/beginGetAccess/action",
 							"Microsoft.Compute/disks/endGetAccess/action",
 							"Microsoft.Compute/disks/write",
+							"Microsoft.Insights/ActionGroups/write",
+							"Microsoft.Insights/ActionGroups/delete",
+							"Microsoft.Insights/MetricAlerts/write",
+							"Microsoft.Insights/MetricAlerts/delete",
+							"Microsoft.Insights/ActivityLogAlerts/write",
+							"Microsoft.Insights/ActivityLogAlerts/delete",
 							"Microsoft.Compute/snapshots/beginGetAccess/action",
 							"Microsoft.Compute/snapshots/delete",
 							"Microsoft.Compute/snapshots/endGetAccess/action",