In this exercise, you assign the contributor role to the service principal at the subscription level.

1. In the navigation bar on the left, select Subscriptions.
2. Click the name of the subscription.
3. Copy and save the subscription ID to use when you deploy the pod.

1. Click Access control (IAM).
2. Click Add to display the Add permissions window.

1. In the Add permission window, provide the following information:
   • Role: From the drop-down menu of built-in roles, select Contributor.
   • Assign access to: From the drop-down menu, select Azure AD user, group, or application.
   • Select: Search for and select the service principal by the name you gave it earlier.
2. Click Save.

1. Click your service principal to select it
2. Click Save.

After you finish assigning a role to the service principal, proceed to the next section to verify the required resource providers.