diff --git a/pkg/cluster/deploybaseresources_additional.go b/pkg/cluster/deploybaseresources_additional.go
index d9e8b0bbe29..b0a6b867ba8 100644
--- a/pkg/cluster/deploybaseresources_additional.go
+++ b/pkg/cluster/deploybaseresources_additional.go
@@ -37,6 +37,12 @@ func (m *manager) denyAssignment() *arm.Resource {
 							"Microsoft.Compute/disks/beginGetAccess/action",
 							"Microsoft.Compute/disks/endGetAccess/action",
 							"Microsoft.Compute/disks/write",
+							"Microsoft.Insights/ActionGroups/write",
+							"Microsoft.Insights/ActionGroups/delete",
+							"Microsoft.Insights/MetricAlerts/write",
+							"Microsoft.Insights/MetricAlerts/delete",
+							"Microsoft.Insights/ActivityLogAlerts/write",
+							"Microsoft.Insights/ActivityLogAlerts/delete",
 							"Microsoft.Compute/snapshots/beginGetAccess/action",
 							"Microsoft.Compute/snapshots/delete",
 							"Microsoft.Compute/snapshots/endGetAccess/action",