I am unable to view service tags while adding a network rule in Azure Firewall.

Question

Title

Unable to View Service Tags When Adding a Network Rule in Azure Firewall

Details

I am unable to view service tags while adding a network rule in Azure Firewall.

I am selecting the Destination type as Service Tag, but I can only see Office 365 service tags and not others. Kindly help me understand what's missing.

Answer 1

I am have below permissions assigned through a Custom PIM Role.

is anything missing in the role because of which it does not let me read service tags?

what would be least permission i should have in-order to view the service tags in my Firewall network rules?

        "permissions": [
            {
                "actions": [
                    "Microsoft.Network/azurefirewalls/*/read",
                    "Microsoft.Network/azureFirewalls/applicationRuleCollections/read",
                    "Microsoft.Network/azurefirewalls/providers/Microsoft.Insights/logDefinitions/read",
                    "Microsoft.Network/azureFirewalls/natRuleCollections/read",
                    "Microsoft.Network/azureFirewalls/networkRuleCollections/read",
                    "Microsoft.Network/azurefirewalls/providers/Microsoft.Insights/metricDefinitions/read",
                    "Microsoft.Network/azureFirewallFqdnTags/read",
                    "Microsoft.Network/firewallPolicies/*/read",
                    "Microsoft.Insights/*/read",
                    "Microsoft.Network/azurefirewalls/write",
                    "Microsoft.Network/azureFirewalls/applicationRuleCollections/write",
                    "Microsoft.Network/azureFirewalls/natRuleCollections/write",
                    "Microsoft.Network/azureFirewalls/networkRuleCollections/write",
                    "Microsoft.Network/firewallPolicies/*/write",
                    "Microsoft.Network/ipGroups/read",
                    "Microsoft.Network/ipGroups/write",
                    "Microsoft.Network/locations/serviceTagDetails/read",
                    "Microsoft.Network/locations/serviceTags/read"