Hi there I am having a basic problem related to permissions to import resources in pulumi. The fact is that I work with a client who gave me access as a

reader

throughout their Azure system and this way I cannot

import

resources, nor does he want to give me access as `owner`/`admin`. Is there any possibility of using a role for the config?

It depends on the service. For some services the built-in

Reader

role will only give you access to certain configuration values. If I remember correctly f.x. it will not allow you to inspect environment variable values within App Services. For that you'd need either the generic

Contributor

role or some service specific roles which grant access to all paramters. Some services don't even have specific roles and would require custom roles to be created for granular access control. But what's the point in importing something in a IaC state if you won't have any access to provision updates?