> ## Documentation Index
> Fetch the complete documentation index at: https://docs.langdock.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Azure Resource Manager

> Review the minimum OAuth scopes for every Azure Resource Manager action.

Review the minimum standard delegated scope mapping for every Azure Resource Manager action.

<Warning>
  Azure Resource Manager uses `user_impersonation` on the ARM resource (`https://management.azure.com/user_impersonation`), not Microsoft Graph permissions. Subscription, resource group, and resource access are Azure RBAC assignments, not extra OAuth scopes. `Sites.Selected` does not apply.
</Warning>

## Minimal scopes per action

<Note>
  Each Azure Resource Manager connection also requests `openid` and `offline_access`. These connection scopes apply in addition to the action scopes in the table.
</Note>

<div style={{overflowX: "auto"}}>
  <table style={{width: "100%", maxWidth: "100%", minWidth: 0, tableLayout: "fixed", whiteSpace: "normal", overflowWrap: "anywhere", wordBreak: "break-word"}}>
    <colgroup>
      <col style={{width: "20%"}} />

      <col style={{width: "25%"}} />

      <col style={{width: "55%"}} />
    </colgroup>

    <thead>
      <tr>
        <th style={{width: "20%"}}>Action</th>
        <th style={{width: "25%"}}>Description</th>
        <th style={{width: "55%"}}>Minimum scopes</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <td><strong>Get resource</strong></td>
        <td>Gets one Azure control-plane resource by ARM ID.</td>
        <td><code>[https://management.azure.com/user\_impersonation](https://management.azure.com/user_impersonation)</code></td>
      </tr>

      <tr>
        <td><strong>List activity logs</strong></td>
        <td>Lists Azure Activity Log management events for a subscription.</td>
        <td><code>[https://management.azure.com/user\_impersonation](https://management.azure.com/user_impersonation)</code></td>
      </tr>

      <tr>
        <td><strong>List resource changes</strong></td>
        <td>Lists Azure Resource Graph change-history rows.</td>
        <td><code>[https://management.azure.com/user\_impersonation](https://management.azure.com/user_impersonation)</code></td>
      </tr>

      <tr>
        <td><strong>List resource groups</strong></td>
        <td>Lists Azure resource groups the signed-in user can see.</td>
        <td><code>[https://management.azure.com/user\_impersonation](https://management.azure.com/user_impersonation)</code></td>
      </tr>

      <tr>
        <td><strong>List subscriptions</strong></td>
        <td>Lists Azure subscriptions the signed-in user can access.</td>
        <td><code>[https://management.azure.com/user\_impersonation](https://management.azure.com/user_impersonation)</code></td>
      </tr>

      <tr>
        <td><strong>Query resources</strong></td>
        <td>Runs a Kusto query against Azure Resource Graph.</td>
        <td><code>[https://management.azure.com/user\_impersonation](https://management.azure.com/user_impersonation)</code></td>
      </tr>

      <tr>
        <td><strong>Resolve resource</strong></td>
        <td>Resolves an Azure resource by ARM ID or name.</td>
        <td><code>[https://management.azure.com/user\_impersonation](https://management.azure.com/user_impersonation)</code></td>
      </tr>

      <tr>
        <td><strong>Resolve subscription</strong></td>
        <td>Resolves an Azure subscription by ID or display name.</td>
        <td><code>[https://management.azure.com/user\_impersonation](https://management.azure.com/user_impersonation)</code></td>
      </tr>

      <tr>
        <td><strong>Search resources</strong></td>
        <td>Searches Azure Resource Graph for control-plane inventory.</td>
        <td><code>[https://management.azure.com/user\_impersonation](https://management.azure.com/user_impersonation)</code></td>
      </tr>
    </tbody>
  </table>
</div>

## Related pages

* [Microsoft Integration Scopes](/en/admin/manage-integrations/microsoft-integration-scopes)
* [Microsoft integrations: permissions and admin approval](/en/admin/manage-integrations/integration-setup-guides/microsoft)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.