Azure rest API授权失败

Question

我尝试通过以下azure API读取警报

endpoint = 'https://management.azure.com/subscriptions/{subscription_id}/providers/microsoft.Security/alerts?api-version=2016-03-01'
headers = {"Authorization": 'Bearer ' + access_token}
json_output = requests.get(endpoint, headers=headers).json()

它返回以下错误消息

{u'error': {u'message': u"The client '8447xxxx-xxxx-xxxx-xxxx-49bb99abxxxx' with object id '8447xxxx-xxxx-xxxx-xxxx-49bb99abxxxx' does not have authorization to perform action 'microsoft.Security/alerts/read' over scope '/subscriptions/{subscription_id}'.", u'code': u'AuthorizationFailed'}}

Answer 1

关于您的邮件，您需要在凭据中添加“安全管理器”角色：

• 请参阅角色描述：https://azure.microsoft.com/documentation/articles/role-based-access-built-in-roles/#security-manager
• 如何应用角色（PS、CLI或RestAPI）：https://azure.microsoft.com/documentation/articles/role-based-access-control-manage-access-azure-cli/

在订阅范围应用“安全管理器”角色应该可以解决您的问题。在