@Gibelli, David , Thank you for your question.
The "Get network interface effective route table" operation currently requires Microsoft.Network/networkInterfaces/effectiveRouteTable/action
. [Reference]
There is an open feature request to change the permission required to end in read
here. The Azure Networking team is evaluating for improvements and how to incorporate this in the future.
As a work around, for now, you need to have an Azure RBAC role that contains the Microsoft.Network/networkInterfaces/effectiveRouteTable/action
permission.
----------
Hope this helps.
Please "Accept as Answer" if it helped, so that it can help others in the community looking for help on similar topics.