The client credentials used to register the virtual machine should exist in any of the following Azure roles - Virtual Machine contributor, Contributor, or Owner.