diff --git a/quickstart/201-vmss-disk-encryption-extension/main.tf b/quickstart/201-vmss-disk-encryption-extension/main.tf
index e59ad4505..7f369758d 100644
--- a/quickstart/201-vmss-disk-encryption-extension/main.tf
+++ b/quickstart/201-vmss-disk-encryption-extension/main.tf
@@ -30,6 +30,7 @@ resource "azurerm_key_vault_access_policy" "service-principal" {
     "Create",
     "Delete",
     "Get",
+    "GetRotationPolicy",
     "Update",
   ]
 
@@ -141,4 +142,4 @@ resource "random_password" "password" {
 resource "random_pet" "prefix" {
   prefix = var.prefix
   length = 1
-}
\ No newline at end of file
+}