Configure Cloud Configuration - Asset Intune Access denied

[tenupmoc]

Hi everyone,

we are currently setting up our Azure Cloud assets dashboard and ran into some issues/questions.

In the Lansweeper documentation, it's mentioned that the RBAC Reader role should be sufficient for Lansweeper.
While we do get the virtual machines and the network components (as stated in the documentation), we get also some errors on resources like:
- App Services
- Functions App
- Application Insights

The error message we are getting is simply: "Cloud Sensor - Access denied"

We could decrease the number of errors by granting our Lansweeper service principal the contributor role, but there are still some services (same as above) which are getting the "access denied" error.

What we can't figure out is, if Lansweeper should usually only scan the virtual machine / network components or if there is something we are missing regarding scanning "all assets".

Any help would be appreciated, unfortunately we can't find additional information about this issue in the documentation.

[tenupmoc]

Sorry, Azure is right.

[PatrickCloud]

Hello @tenupmoc, you mention Intune in the title of this thread but then refer to Azure resources (App services, Function App), is it a typo ?

Also, you mention an error message, do you see it as Scan issues on these assets ?

Thanks

[tenupmoc]

yes, we can see Scan Issues for these assets. In the meantime, we opened a case for support.