Azure App Registration – Read Subscriptions/resources/entra GAs I assume this is a role I am missing..
