Azure B2B whitelisting using Azure Automation - permission problem

[efingdmi]

Hi all,

you are my last hope :)

I have an Azure Automation Account (Run As) with a runbook that will add an domain to the b2b whitelist. Now I recognized, that the Service Principle behind it needs "Global Admin" or "Security Admin" permissions to add a domain in the whitelist.

Are there other permissions that allow the Service Principle to write this data? Our security won't be happy, if my Automation Accounts needs one of those permissions.

The Graph API permissions won't work, because this is not yet included.

Any ideas?

Thanks,

Dominik

[#2]

@efingdmi Hi,
did you find any answer/solution? Which permission did you take to be able to whitelist domains?

BR, Elisabeth