Try providing the network contributor access permission for the objID over the resource group:
You can use the below command or you can do it through IAM on the resource group
az role assignment create --assignee <object_id> --role "Network Contributor" --scope /subscriptions/<subscription_id>/resourceGroups/<resource_group_name>
Regards,
Shiva.