Which permissions must be given so that a developer can Login through AAD?

[ChrisRichner]

Hi there,

We try to apply "least privilege principle" in our Azure Environment.

The goal is to enable developers to use the "Azure Iot Explorer" offerings without sharing Connection Strings and a like.

I guess the easy way is to assign Contributor role to every developer, but that's not exactly least privilege, right?

So my question is which permission must one have to troubleshoot issues with "Azure Iot Explorer" in Azure IAM.

Thanks