How can I ensure that my Service account with the Global Reader roles, can perform the Get-AzManagementGroup ?
Error message:
'The client 'serviceaccount@domain.com' with object id '123-GUID-XXX' does not have authorization to perform action 'Microsoft.Management/managementGroups/read' over scope '/providers/Microsoft.Management' or the scope is invalid.


