Azure devops pipeline failed

Question

I am getting this error while running a Azure devops pipeline to deploy some applications. At one stage in the pipeline we need to create resource groups in Azure before proceeding to the next stage of deploying apps. But the pipeline fails because unable to create resource groups due to authorization.

Failed to create the resource group. Error: "The client id XXXXX with object id XXXXX does not have authorization to perform action 'Microsoft.Resources/subscriptions/resourcegroups/write' over scope or the scope is invalid

Please help

rickvdbosch · Accepted Answer · 2021-11-03 14:27:46Z

2

The problem is right there in the error text:

"The client id XXXXX with object id XXXXX does not have authorization to perform action 'Microsoft.Resources/subscriptions/resourcegroups/write' over scope or the scope is invalid

Chances are the service principal that's used doesn't have the correct role(s) assigned to it. Find the service principal with the client id from the error message and assign them at least the Contributor role on subscription level.

The Contributor role ...

Grants full access to manage all resources, but does not allow you to assign roles in Azure RBAC, manage assignments in Azure Blueprints, or share image galleries.

More information: Azure built-in roles.

answered Nov 3, 2021 at 14:27

rickvdbosch

15.8k2 gold badges47 silver badges60 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Kanna Over a year ago

The same service principal works fine with the different environment like test and dev but fails in prd

MoonHorse Over a year ago

@Kanna, i guess your prod env is another subscription. Probably, the SP doesn't have the same permissions as in dev and test

Collectives™ on Stack Overflow

Azure devops pipeline failed

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related