---
title: "Supported Azure services"
description: "The Azure services Guardian can scan, and the permissions each needs."
product: "Guardian"
edition: "Classic"
type: "reference"
url: "https://docs.cloudhouse.com/guardian/classic/inventory/add-nodes/supported-cloud-services/supported-azure-services/"
---
# Supported Azure services

Guardian supports a range of Azure services. For more information on how to add an Azure service node in Guardian, see [Azure Node](https://docs.cloudhouse.com/guardian/classic/inventory/add-nodes/add-a-single-node/agentless/azure-node/index.md).

Applies to: `Guardian Classic`

## App services

Azure App Service is a HTTP-based service for hosting web applications, REST APIs, and mobile back ends. For more information, see [App Service](https://azure.microsoft.com/en-ca/products/app-service/#overview) in Azure.

### Required app services permissions

The following code snippet describes the permissions required for the App Services service.

```
Website Reader
```

## Key Vault

Azure Key Vault is a cloud service that provides a secure store for secrets. You can securely store keys, passwords, certificates, and other secrets. For more information, see [Key Vault](https://azure.microsoft.com/en-gb/products/key-vault/#product-overview) in Azure.

### Required key Vault permissions

The following code snippet describes the permissions required for the Key Vault service.

```
Key Vault Reader
```

## MySQL Server

Azure Database for MySQL is a fully managed database service, which means that Microsoft automates the management and maintenance of your infrastructure and database server, including routine updates, backups, and security. For more information, see [Azure Database for MySQL](https://azure.microsoft.com/en-us/products/mysql/#overview) in Azure.

### Required MySQL Server permissions

The following code snippet describes the permissions required for the MySQL Server service.

```
db_datareader
```

## PostgreSQL Server

Azure Database for PostgreSQL is a fully-managed database as a service with built-in capabilities, such as high availability and intelligence. For more information, see [Azure Database for PostgreSQL pricing](https://azure.microsoft.com/en-in/pricing/details/postgresql/server/) in Azure.

### Required PostgreSQL Server permissions

The following code snippet describes the permissions required for the PostgreSQL Server service.

```
db_datareader
```

## Security group

A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources. For more information, see [Network security groups](https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview) in Microsoft.

### Required security group permissions

The following code snippet describes the permissions required for the Security Group service.

```
Key Vault Reader, CDN Profile Reader, CDN Endpoint Reader
```

## SQL Servers

Azure Database for Microsoft SQL is a fully-managed database as a service with built-in capabilities, such as high availability and intelligence. For more information, see [Azure SQL](https://azure.microsoft.com/en-au/products/azure-sql/) in Azure.

### Required SQL Servers permissions

The following code snippet describes the permissions required for the SQL Servers service.

```
db_datareader
```

## Storage account

An Azure storage account contains all of your Azure Storage data objects, including blobs, file shares, queues, tables, and disks. For more information, see [Storage account overview](https://learn.microsoft.com/en-us/azure/storage/common/storage-account-overview) in Azure.

### Required storage account permissions

The following code snippet describes the permissions required for the Storage Account service.

```
Disk Backup Reader, Backup Reader, Storage Blob Data Reader
```

## Virtual machine

Azure Virtual Machines are image service instances that provide on-demand and scalable computing resources with usage-based pricing. For more information, see [Virtual Machines](https://azure.microsoft.com/en-us/products/virtual-machines/) in Azure.

### Required virtual machine permissions

The following code snippet describes the permissions required for the Virtual Machine service.

```
Disk Backup Reader, Backup Reader, Storage Blob Data Reader, Domain Services Reader, Key Vault Reader, CDN Profile Reader, CDN Endpoint Reader
```