Add Reader role to the Subscription

Add a Reader role to the Subscription that is going to be added FortiCASB. The purpose is to provide FortiCASB with read access to the resources under the Subscription.

1. Search and click on Subscriptions.
2. Click on the Subscription that is going to be used on FortiCASB.
3. In the Subscription menu, click on Access control (IAM).



4. Click on +Add and select "Add role assignment".
5. In Add role assignment drop down menu, click on Select a role and select Reader.
6. Leave Assign access to as "Azure AD user, group, or service principal".



7. In Select field, search and select a member (user account) that will be associated with the role.

The member (user account) should have a Global Administrator role, Application Administrator + Global Reader roles, or Cloud Application Administrator + Global Reader roles as stated in the Perquisite.

8. Click Save to finish creating the Reader role.