No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

Could you share the code to reproduce that?

And the detailed diff that you see on preview

I did a refresh after but that did not solve the issue. And it would be weird to have to do a refresh after a deploy without modifications of the resources.
The code to reproduce the error  : <https://gist.github.com/TechWatching/a49e0f450600b3f5db17dcea8d2e4a7b>

image.png

This is mentioned in <https://github.com/terraform-providers/terraform-provider-azurerm/issues/2547#issuecomment-449406507>

It looks like Azure adds those permissions when you assign `api` permission

You should probably change the code to `ReadPermissions = { "api", "draft", "extendqueries", "search", "aggregate"  }`

Thanks for the tip :slightly_smiling_face: I did not see the issue.