Permissions for @turbot/azure-compute

Taking a look at permissions and associated grant levels for each permission for Compute:

Permission	Grant Level	Help
microsoft.compute/availabilitysets/delete	admin
microsoft.compute/availabilitysets/read	metadata
microsoft.compute/availabilitysets/vmsizes/read	metadata
microsoft.compute/availabilitysets/write	admin
microsoft.compute/diskencryptionsets/delete	admin	delete disk encryption set
microsoft.compute/diskencryptionsets/read	metadata	get disk encryption set
microsoft.compute/diskencryptionsets/write	admin	create or update disk encryption set
microsoft.compute/disks/begingetaccess/action	admin
microsoft.compute/disks/delete	admin
microsoft.compute/disks/endgetaccess/action	admin
microsoft.compute/disks/read	metadata
microsoft.compute/disks/write	admin
microsoft.compute/images/delete	admin
microsoft.compute/images/read	metadata
microsoft.compute/images/write	admin
microsoft.compute/locations/diskoperations/read	metadata
microsoft.compute/locations/operations/read	metadata
microsoft.compute/locations/runcommands/read	metadata
microsoft.compute/locations/usages/read	metadata
microsoft.compute/locations/vmsizes/read	metadata
microsoft.compute/operations/read	metadata
microsoft.compute/restorepointcollections/delete	admin
microsoft.compute/restorepointcollections/read	metadata
microsoft.compute/restorepointcollections/restorepoints/delete	admin
microsoft.compute/restorepointcollections/restorepoints/read	metadata
microsoft.compute/restorepointcollections/restorepoints/retrievesasuris/action	metadata
microsoft.compute/restorepointcollections/restorepoints/write	admin
microsoft.compute/restorepointcollections/write	admin
microsoft.compute/snapshots/begingetaccess/action	admin
microsoft.compute/snapshots/delete	admin
microsoft.compute/snapshots/endgetaccess/action	admin
microsoft.compute/snapshots/read	metadata
microsoft.compute/snapshots/write	admin
microsoft.compute/sshpublickeys/delete	admin	delete ssh public key
microsoft.compute/sshpublickeys/generatekeypair/action	admin	generate ssh key pair
microsoft.compute/sshpublickeys/read	metadata	get ssh public key
microsoft.compute/sshpublickeys/write	admin	create or update ssh public key
microsoft.compute/virtualmachines/capture/action	admin
microsoft.compute/virtualmachines/converttomanageddisks/action	admin
microsoft.compute/virtualmachines/deallocate/action	admin
microsoft.compute/virtualmachines/delete	admin
microsoft.compute/virtualmachines/extensions/delete	admin
microsoft.compute/virtualmachines/extensions/read	metadata
microsoft.compute/virtualmachines/extensions/write	admin
microsoft.compute/virtualmachines/generalize/action	admin
microsoft.compute/virtualmachines/instanceview/read	metadata
microsoft.compute/virtualmachines/performmaintenance/action	admin
microsoft.compute/virtualmachines/poweroff/action	admin
microsoft.compute/virtualmachines/providers/microsoft.insights/metricdefinitions/read	metadata
microsoft.compute/virtualmachines/read	metadata
microsoft.compute/virtualmachines/redeploy/action	admin
microsoft.compute/virtualmachines/restart/action	admin
microsoft.compute/virtualmachines/runcommand/action	operator
microsoft.compute/virtualmachines/start/action	admin
microsoft.compute/virtualmachines/vmsizes/read	metadata
microsoft.compute/virtualmachines/write	admin
microsoft.compute/virtualmachinescalesets/deallocate/action	admin
microsoft.compute/virtualmachinescalesets/delete	admin
microsoft.compute/virtualmachinescalesets/delete/action	admin
microsoft.compute/virtualmachinescalesets/extensions/delete	admin
microsoft.compute/virtualmachinescalesets/extensions/read	metadata
microsoft.compute/virtualmachinescalesets/extensions/write	admin
microsoft.compute/virtualmachinescalesets/instanceview/read	metadata
microsoft.compute/virtualmachinescalesets/manualupgrade/action	admin
microsoft.compute/virtualmachinescalesets/poweroff/action	admin
microsoft.compute/virtualmachinescalesets/providers/microsoft.insights/metricdefinitions/read	metadata
microsoft.compute/virtualmachinescalesets/read	metadata
microsoft.compute/virtualmachinescalesets/reimage/action	admin
microsoft.compute/virtualmachinescalesets/restart/action	admin
microsoft.compute/virtualmachinescalesets/rollingupgrades/cancel/action	admin
microsoft.compute/virtualmachinescalesets/rollingupgrades/read	metadata
microsoft.compute/virtualmachinescalesets/scale/action	admin
microsoft.compute/virtualmachinescalesets/skus/read	metadata
microsoft.compute/virtualmachinescalesets/start/action	admin
microsoft.compute/virtualmachinescalesets/virtualmachines/deallocate/action	admin
microsoft.compute/virtualmachinescalesets/virtualmachines/delete	admin
microsoft.compute/virtualmachinescalesets/virtualmachines/instanceview/read	metadata
microsoft.compute/virtualmachinescalesets/virtualmachines/poweroff/action	admin
microsoft.compute/virtualmachinescalesets/virtualmachines/providers/microsoft.insights/metricdefinitions/read	metadata
microsoft.compute/virtualmachinescalesets/virtualmachines/read	metadata
microsoft.compute/virtualmachinescalesets/virtualmachines/reimage/action	admin
microsoft.compute/virtualmachinescalesets/virtualmachines/restart/action	admin
microsoft.compute/virtualmachinescalesets/virtualmachines/start/action	admin
microsoft.compute/virtualmachinescalesets/write	admin
microsoft.devtestlab/schedules/write	admin	creates an azure automation job schedule.
microsoft.network/networkinterfaces/delete	admin
microsoft.network/networkinterfaces/join/action	admin
microsoft.network/networkinterfaces/read	metadata
microsoft.network/networkinterfaces/write	admin	network interfaces can be safely used by the account inside the virtual network context.
microsoft.network/networksecuritygroups/join/action	admin	admin can join a network security group to the compute vm.
microsoft.network/networksecuritygroups/read	metadata
microsoft.network/publicipaddresses/join/action	admin
microsoft.network/publicipaddresses/read	metadata
microsoft.network/publicipaddresses/write	admin	admins can allocate new pubic ip addresses; this is considered safe as the proper routing still needs to be configured for public access through network guardrail.
microsoft.network/virtualnetworks/read	metadata	to list the available virtual networks while provisioning the compute.
microsoft.network/virtualnetworks/subnets/join/action	admin	admin can join a virtual network subnet to the compute vm.
microsoft.network/virtualnetworks/subnets/read	metadata
microsoft.resources/deployments/cancel/action	admin
microsoft.resources/deployments/delete	admin
microsoft.resources/deployments/operations/read	metadata
microsoft.resources/deployments/read	metadata
microsoft.resources/deployments/validate/action	admin
microsoft.resources/deployments/write	admin
microsoft.resources/subscriptions/resourcegroups/read	metadata
microsoft.storage/storageaccounts/read	metadata	to list the available storage account while provisioning the compute.