Starting from 4.17, IPI cluster on Azure platform are installed by using CAPI, related installer epic: https://issues.redhat.com/browse/CORS-3061

Following additional permissions required to make sure that cluster be installed successfully with minimal permissions listed in doc[1].

    "Microsoft.Network/loadBalancers/inboundNatRules/read",
    "Microsoft.Network/loadBalancers/inboundNatRules/write",
    "Microsoft.Network/loadBalancers/inboundNatRules/join/action",
    "Microsoft.Network/loadBalancers/inboundNatRules/delete"

[1] https://docs.openshift.com/container-platform/4.16/installing/installing_azure/installing-azure-account.html#minimum-required-permissions-ipi-azure_installing-azure-account

4.17    

    1.
    2.
    3.