docs: add information about permissions for azure pat (#25534)

Co-authored-by: Daniel Koch <Daniel.Koch@arineo.com>

lib/modules/platform/azure/readme.md

@@ -9,6 +9,13 @@ Let Renovate use your PAT by doing _one_ of the following:
 - Set your PAT as an environment variable `RENOVATE_TOKEN`
 - Set your PAT when you run Renovate in the CLI with `--token=`
 
+Permissions for your PAT should be at minimum:
+
+| Scope        | Permission   | Description                       |
+| ------------ | ------------ | --------------------------------- |
+| `Code`       | Read & Write | Required                          |
+| `Work Items` | Read & write | Only needed for link to work item |
+
 Remember to set `platform=azure` somewhere in your Renovate config file.
 
 ## Features awaiting implementation