...
Logged-in users must have the Template Spec Contributor predefined role attached
Users deploying template spec must have access to Azure cloud shell. If it is disabled, then the user must have az-cli installed and configured. For more information about CLI, see Azure documentation.
For the remaining basic prerequisites to deploy Kyvos on Azure using Template Specs, refer to the Prerequisites for Kyvos Deployment on Azure section.