API permissions for resource query on securityresources?

Question

I need to perform Microsoft.ResourceGraph query on securityresources.
I get the response I don't have the permissions for the resource.
I'm getting the following error :
'Access is denied to the requested resource. The user might not have enough permission'

the full url:
https://management.azure.com/providers/Microsoft.ResourceGraph/resources?api-version=2021-03-01

the query body:
{
"subscriptions": [
"my subscription id here"
],
"query": "securityresources | where type == 'microsoft.security/securescores/securescorecontrols'"
}

the token is generated for resource:
https://management.core.windows.net

using an app with the api permission:
Microsoft Graph -> User.Read

Does anyone know which permissions are needed on the application for this resource?

Thanks in advance

Answer 1

Hi @Rami Yankelov

You should grant delegate permissions under the Azure Service Management endpoint instead of the Microsoft Graph endpoint.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

I am still getting the same error after making changes