What SN feature is better for Azure Cloud Discover…

What SN feature is better for Azure Cloud Discovery (Azure Service Graph OR Pattern based Cloud Discovery)? We want to do Horizontal discovery on Azure VMs but foreseeing issues like VPN, Credentials. Would SG connector able to retrieve SW Installs and Running processes without any additional access? If yes, isn’t this a security issue if Connector is able to read target host information without getting adequate access? Or does it require access from VM Owner?