fix rbac issue

JelleBroekhuijsen · Aug 8, 2023 · b2c0439 · b2c0439
1 parent 4509089
commit b2c0439
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 4 deletions.
diff --git a/README.md b/README.md
@@ -14,8 +14,8 @@ This repository contains a set of scripts and workflows to cleanup an Azure tena
 
 The workflows utilize a Service Principal to perform the cleanup. The Service Principal must have the following permissions:
 
-- Contributor on the subscriptions you want to cleanup for resource cleanup.
-- Contributor on the root tenant group if you want to cleanup management groups.
+- Contributor on the subscriptions if you want to cleanup for resource cleanup.
+- Owner on the root tenant group if you want to cleanup management groups.
 
 The workflows rely on OpenId Connect for authentication. See [this](https://learn.microsoft.com/en-us/azure/developer/github/connect-from-azure?tabs=azure-portal%2Cwindows#use-the-azure-login-action-with-openid-connect) for info on how to configure your SPN for OIDC-authentication.
 

diff --git a/Remove-AzManagementGroups.ps1 b/Remove-AzManagementGroups.ps1
@@ -23,8 +23,6 @@ param (
     $TenantId
 )
 
-# $ErrorActionPreference = 'SilentlyContinue'
-
 #Get all management groups except the root group
 $managementGroups = Get-AzManagementGroup | Where-Object { $_.Name -ne $TenantId }