diff --git a/modules/azure/storage-account/backplane/main.tf b/modules/azure/storage-account/backplane/main.tf
index cf3533f8..0684b504 100644
--- a/modules/azure/storage-account/backplane/main.tf
+++ b/modules/azure/storage-account/backplane/main.tf
@@ -42,6 +42,8 @@ resource "azurerm_role_definition" "buildingblock_deploy" {
   scope       = var.scope
   permissions {
     actions = [
+      # resource manager
+      "*/register/action",
       # storage accounts
       "Microsoft.Storage/storageAccounts/write",
       "Microsoft.Storage/storageAccounts/read",