...
To form an HA pair with vNIOS instances, the permissions defined outlined in this section are a minimum requirement. These The permissions are required for the vNIOS instance allow the instances to manage resources in the Azure cloud.
In Azure, create perform the following:
Create a custom role that is assigned with permissions listed in this section.
Create a user-assigned managed identity with
...
its Azure role assignment Scope as Subscription and assign the custom role that
...
you created.
Defining Subscription as the scope allows the managed identity to access all resources and/or resources groups in the subscription.
Note that the scope that you select displays under Resource Type after the role assignment is saved.Attach the managed identity to the vNIOS instance.
For more information about managed identities and custom roles, refer to Managed identities for Azure resources and Role-based access control respectively.
...