> ## Documentation Index
> Fetch the complete documentation index at: https://docs.langdock.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Azure Resource Manager

> Review the minimum OAuth scopes for every Azure Resource Manager action.

Review the minimum standard delegated scope mapping for every Azure Resource Manager action. Azure Resource Manager has no thinner OAuth sibling than `user_impersonation` on the ARM resource (`https://management.azure.com/user_impersonation`). Subscription, resource group, and resource access are Azure RBAC assignments, not extra OAuth scopes. `Sites.Selected` does not apply.

## Minimal scopes per action

<Note>
  Each Azure Resource Manager connection also requests `openid` and `offline_access`. These connection scopes apply in addition to the action scopes in the table.
</Note>

<div style={{overflowX: "auto"}}>
  <table style={{width: "100%", maxWidth: "100%", minWidth: 0, tableLayout: "fixed", whiteSpace: "normal", overflowWrap: "anywhere", wordBreak: "break-word"}}>
    <colgroup>
      <col style={{width: "20%"}} />

      <col style={{width: "25%"}} />

      <col style={{width: "55%"}} />
    </colgroup>

    <thead>
      <tr>
        <th style={{width: "20%"}}>Action</th>
        <th style={{width: "25%"}}>Description</th>
        <th style={{width: "55%"}}>Minimum scopes</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <td><strong>Get resource</strong></td>
        <td>Gets one Azure control-plane resource by ARM ID.</td>
        <td><code>[https://management.azure.com/user\_impersonation](https://management.azure.com/user_impersonation)</code></td>
      </tr>

      <tr>
        <td><strong>List activity logs</strong></td>
        <td>Lists Azure Activity Log management events for a subscription.</td>
        <td><code>[https://management.azure.com/user\_impersonation](https://management.azure.com/user_impersonation)</code></td>
      </tr>

      <tr>
        <td><strong>List resource changes</strong></td>
        <td>Lists Azure Resource Graph change-history rows.</td>
        <td><code>[https://management.azure.com/user\_impersonation](https://management.azure.com/user_impersonation)</code></td>
      </tr>

      <tr>
        <td><strong>List resource groups</strong></td>
        <td>Lists Azure resource groups the signed-in user can see.</td>
        <td><code>[https://management.azure.com/user\_impersonation](https://management.azure.com/user_impersonation)</code></td>
      </tr>

      <tr>
        <td><strong>List subscriptions</strong></td>
        <td>Lists Azure subscriptions the signed-in user can access.</td>
        <td><code>[https://management.azure.com/user\_impersonation](https://management.azure.com/user_impersonation)</code></td>
      </tr>

      <tr>
        <td><strong>Query resources</strong></td>
        <td>Runs a Kusto query against Azure Resource Graph.</td>
        <td><code>[https://management.azure.com/user\_impersonation](https://management.azure.com/user_impersonation)</code></td>
      </tr>

      <tr>
        <td><strong>Resolve resource</strong></td>
        <td>Resolves an Azure resource by ARM ID or name.</td>
        <td><code>[https://management.azure.com/user\_impersonation](https://management.azure.com/user_impersonation)</code></td>
      </tr>

      <tr>
        <td><strong>Resolve subscription</strong></td>
        <td>Resolves an Azure subscription by ID or display name.</td>
        <td><code>[https://management.azure.com/user\_impersonation](https://management.azure.com/user_impersonation)</code></td>
      </tr>

      <tr>
        <td><strong>Search resources</strong></td>
        <td>Searches Azure Resource Graph for control-plane inventory.</td>
        <td><code>[https://management.azure.com/user\_impersonation](https://management.azure.com/user_impersonation)</code></td>
      </tr>
    </tbody>
  </table>
</div>

## Related pages

* [Microsoft Integration Scopes](/en/admin/manage-integrations/microsoft-integration-scopes)
* [Microsoft integrations: permissions and admin approval](/en/admin/manage-integrations/integration-setup-guides/microsoft)