Users resource on Azure inaccessible

sarmad90 commented 4 years ago

I'm able to access all other resources in the collection response. For example, virtual machines, databases, and storage accounts. But there's this error message in Users resource. {"list"=>{"global"=>{"err"=>"Insufficient privileges to complete the operation. RequestId: c96f5a39-6b7f-41df-97e8-fbcef9914a84"}}} I've followed all the instructions mentioned here https://github.com/cloudsploit/scans/blob/master/docs/azure.md#cloud-provider-configuration otherwise I wouldn't have been able to access the other resources. But can't seem to access the users even after granting all extra API permissions to the Azure app and assigning all additional roles to Azure subscription.

Any help will be greatly appreciated. Thanks in advance.

ajit-sutreja commented 4 years ago

I am also having the similar issue getting a permission error. I am not able to get the results for "Ensure No Guest User" for Active Directory category. @sarmad90 were you able to fix this?

sarmad90 commented 4 years ago

Unfortunately no.

brainbug89 commented 4 years ago

Probably you need to grant permissions for the Active Directory. e.g.

sarmad90 commented 3 years ago

These are the permissions I've granted to the app. Still no luck.

sarmad90 commented 3 years ago

Latest permissions for reference:

aquasecurity / cloudsploit

Users resource on Azure inaccessible #309