Azure permissions
Contributor Role
In the Azure portal, search for the contracted capacity and open the resource.

To add the user as a contributor, go to Access control (IAM) > Add > Add role assignment.

On the Add role assignment page, click the Role tab, then the Privileged administrator roles tab, and check the Contributor permission.
The Contributor permission on the capacity for the Power Embedded user (PowerEmbedded-App) is required to allow the system to change the SKU (Size) of the capacity, either manually or through Cost Optimization.
If it is not necessary for Power Embedded to change the capacity SKU, being limited only to turning the capacity on/off, you can grant the Reader permission instead of Contributor, which is less permissive. This Reader permission is found in the Job function roles tab.

Click the Members tab, then click Select members to search for the PowerEmbedded-App user and select it.

Now click Review + assign to complete this process.
Capacity Administrator

Still on the contracted capacity screen, go to Settings > Capacity administrators and click the Add button.
When the screen opens, search for PowerEmbedded-App and click Select.
In this tab, you can add the people who will have permission to assign a workspace to the capacity.
To confirm this change, click Save to save the information.

With these settings done, we can now configure Power Embedded.
Atualizado