Cloud Management Portal Permissions

Resource	Permission Name	Description
Graph	Application.Read.All	Allows the Cloud Management Portal app to validate permissions for Cloud Security Center
Azure Resource Manager	user_impersonation	Required to deploy resources via the Azure Resource Manager as the user
Windows Defender	IntegrationConfiguration.ReadWrite	Required to deploy Sentinel with the correct configuration.