Explanation: Your account must meet one of the following to enable traffic analytics: Your account must have any one of the following Azure roles at the subscription scope: owner, contributor, reader, or network contributor. Reference: https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics-faq