Connecting IoT Device to Azure IoT Hub requires EZCA to have access to your IoT Hubs. EZCA needs RBAC Contributor Role to add and update CA certificates as trusted CAs.