An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
Hi James Denning,
Thanks for reaching out in Microsoft Q&A forum,
- The underlying md file markup is not right meaning it is not being rendered correctly and is not readable (it's missing some carriage returns in the file in the relevant git repo perhaps)
- It is not clear what or to whom the permissions describe should be assigned to - is this to the managed identity assigned to the App Gateway or to the identity/user that is deploying the App Gateway?
Thank you for clarifying the permissions requirements for deploying Azure Application Gateway. The official docs at https://learn.microsoft.com/en-us/azure/application-gateway/configuration-infrastructure#permissions have a rendering issue where table entries run together due to Markdown formatting errors in the source file.Key points to note:
- Permissions target: Assign these RBAC actions (like
Microsoft.Network/virtualNetworks/subnets/write,/read,/join/action) to the deploying identity your user, service principal, group, or managed identity—not the Application Gateway itself. - Scope: Apply at the resource group or subscription level covering dependent resources (subnets, public IPs, WAF policies). "Network Contributor" role works well.
Raw source for clarity: azure-docs/articles/application-gateway/configuration-infrastructure.md at main · MicrosoftDocs/azure-docs · GitHub
Kindly let us know if the above helps or you need further assistance on this issue.
Please do not forget to
and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.