Share via

App Gateway Doc issue

James Denning 20 Reputation points
2026-03-24T17:25:42.57+00:00

The Permissions section of the Application Gateway Infrastructure Configuration page at https://learn.microsoft.com/en-us/azure/application-gateway/configuration-infrastructure#permissions has two issues:

  1. The underlying md file markup is not right meaning it is not being rendered correctly and is not readable (it's missing some carriage returns in the file in the relevant git repo perhaps)
  2. It is not clear what or to whom the permissions describe should be assigned to - is this to the managed identity assigned to the App Gateway or to the identity/user that is deploying the App Gateway?
Azure Application Gateway
Azure Application Gateway

An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.

0 comments No comments

Answer accepted by question author
  1. Venkatesan S 6,115 Reputation points Microsoft External Staff Moderator
    2026-03-24T17:48:11.5366667+00:00

    Hi James Denning,

    Thanks for reaching out in Microsoft Q&A forum,

    • The underlying md file markup is not right meaning it is not being rendered correctly and is not readable (it's missing some carriage returns in the file in the relevant git repo perhaps)
    • It is not clear what or to whom the permissions describe should be assigned to - is this to the managed identity assigned to the App Gateway or to the identity/user that is deploying the App Gateway?

    Thank you for clarifying the permissions requirements for deploying Azure Application Gateway. The official docs at https://learn.microsoft.com/en-us/azure/application-gateway/configuration-infrastructure#permissions have a rendering issue where table entries run together due to Markdown formatting errors in the source file.Key points to note:

    • Permissions target: Assign these RBAC actions (like Microsoft.Network/virtualNetworks/subnets/write, /read, /join/action) to the deploying identity your user, service principal, group, or managed identity—not the Application Gateway itself.
    • Scope: Apply at the resource group or subscription level covering dependent resources (subnets, public IPs, WAF policies). "Network Contributor" role works well.

    Raw source for clarity: azure-docs/articles/application-gateway/configuration-infrastructure.md at main · MicrosoftDocs/azure-docs · GitHub

    Kindly let us know if the above helps or you need further assistance on this issue.

    Please do not forget to 210246-screenshot-2021-12-10-121802.pngand “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.