What is the minimum set of permissions allowed to create Azure Migrate VM Groups and Assessments

@Luke Walters Thank you for reaching out to us on Microsoft Q&A platform. Happy to help! From the details shared above, I understand that you are trying to create Azure Migrate VM Groups and Assessments and it fails with "The user does not have authorization to perform this action." Please refer to the link - https://video2.skills-academy.com/en-us/azure/role-based-access-control/resource-provider-operations#migration and check the ones specific to assessment. Hope this helps!

Hi Sadiqh, thanks for the reply. As I mentioned, these are the permissions that have been granted so far

"permissions": [
            {
                "actions": [
                    "Microsoft.Migrate/projects/assessments/read",
                    "Microsoft.Migrate/projects/groups/read",
                    "Microsoft.Migrate/projects/groups/write",
                    "Microsoft.Migrate/projects/groups/delete",
                    "Microsoft.Migrate/projects/groups/assessments/read",
                    "Microsoft.Migrate/projects/groups/assessments/write",
                    "Microsoft.Migrate/projects/groups/assessments/delete",
                    "Microsoft.Migrate/projects/groups/assessments/downloadurl/action",
                    "Microsoft.Migrate/projects/groups/assessments/assessedmachines/read",
                    "Microsoft.Migrate/projects/machines/read",
                    "Microsoft.Migrate/resourcetypes/read"

However I still can't run an assessment. Do you know if we need to apply the same permissions on the "Microsoft.Migrate/assessmentprojects/*"" resources? How do we differentiate between projects or assessmentsprojects for permissions?