Problemunvalidated
Build in Azure Reader role+ ability to read app service config. Tension: ole does give write access to these. The built in contributor role seems to heavy handed of an approach. Outcome: I believe you're looking for `microsoft.web/sites/config/web/appsettings/read` for a single Web App, and `microsoft.web/sites/config/appsettings/read` for all Web Apps.
cd869d51-e0c7-4f39-850e-8046082a857d
Build in Azure Reader role+ ability to read app service config. Tension: ole does give write access to these. The built in contributor role seems to heavy handed of an approach. Outcome: I believe you're looking for microsoft.web/sites/config/web/appsettings/read for a single Web App, and microsoft.web/sites/config/appsettings/read for all Web Apps.