For Kentik for Azure setup, Kentik needs permission to access selected Azure endpoints on your behalf in order to collect metadata and metrics, as detailed here.
Azure Metadata Endpoints
Entity type:
subscriptionsapplicationGatewaysexpressRouteGatewaysexpressRouteCircuitsazureFirewallsloadBalancerslocalNetworkGatewayslocationsnatGatewaysnetworkSecurityGroupsp2SVpnGatewaysresourceGroupsnetworkInterfacesnetworkWatchersflowLogsprivateEndpointspublicIPAddressesrouteTablesvirtualHubshubVirtualNetworkConnectionshubRouteTablesvirtualWansvmsvmScaleSetsvmScaleSetVMsvmScaleSetInterfacesvnetsclassicVnetsvnetGatewaysvnetGatewayConnectionsvpnGatewaysvpnSitesexpressCircuitPeeringRouteTables
