# Azure permissions

### Contributor Role

In the Azure portal, search for the contracted capacity and open the resource.

<figure><img src="/files/Em3EepYYvbg7dBj4HbaW" alt=""><figcaption></figcaption></figure>

To add the user as a contributor, go to **Access control (IAM) > Add > Add role assignment.**

<figure><img src="/files/Hqh9Be4HsvPjQxUot9XV" alt=""><figcaption></figcaption></figure>

On the **Add role assignment** page, click the **Role** tab, then the **Privileged administrator roles** tab, and check the **Contributor** permission.

{% hint style="warning" %}
The **Contributor** permission on the capacity for the Power Embedded user (PowerEmbedded-App) is required to allow the system to change the SKU (Size) of the capacity, either manually or through Cost Optimization.

If it is not necessary for Power Embedded to change the capacity SKU, being limited only to turning the capacity on/off, you can grant the **Reader** permission instead of **Contributor**, which is less permissive. This Reader permission is found in the **Job function roles** tab.
{% endhint %}

<figure><img src="/files/cS6YrWC5eCtRDES3ZFeJ" alt=""><figcaption></figcaption></figure>

Click the **Members** tab, then click **Select members** to search for the PowerEmbedded-App user and select it.

<figure><img src="/files/6eHtfPTTt2Sxa5atnKJc" alt=""><figcaption></figcaption></figure>

Now click **Review + assign** to complete this process.

### Capacity Administrator

<figure><img src="/files/eD7cMzk2RQiwF0A7dH1c" alt=""><figcaption></figcaption></figure>

Still on the contracted capacity screen, go to **Settings > Capacity administrators** and click the **Add** button.

When the screen opens, search for ***PowerEmbedded-App*** and click **Select.**

In this tab, you can add the people who will have permission to assign a workspace to the capacity.

To confirm this change, click **Save** to save the information.

<div align="left"><figure><img src="/files/VAjp6go9NhTJihNNkDWK" alt=""><figcaption></figcaption></figure></div>

With these settings done, we can now configure Power Embedded.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.powerembedded.com/administration-portal/artifacts/capacities/azure-permissions.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
