...
You also need additional permissions based on the alias record resource types you are using. The additional permissions are explained in the following section:
Azure Configuration for Multi Subscription Discovery
To discover Azure DNS data for multiple subscriptions by enabling Multi-subscription discovery during Azure 3rd Party Provider creation, the credentials associated with the provider should have the all the necessary permissions to fetch data across subscriptions.
Create Azure App Registration & Credentials:
Complete the following steps to create required credentials:
Navigate to the App registrations.
Click New Registration and specify the Name, select the appropriate Supported account types and Register.
After Creating the App go to Client Secrets tab > Certificates & Secrets. Click New Client Secret, specify the Description, choose the Expiry time and click Add.
Copy the value under Value field which is the Client Secret.
Get the Tenant ID and Client ID from the Overview section of the App.
Assign Permissions the App
Complete the following steps to assign required permissions to the App
Navigate to the Subscription for which we want to assign permissions.
Go to Access Control (IAM) section and click on Add > Add Role Assignment, select the Role to be assigned and click on Next.
Select Assign access to User, group, or service principal and click Select Members. Search for the app created in the above step and select it.
Click on review and assign.
Repeat the above steps to assign permissions to all the subscriptions.