Unable to create Synapse through CSP using CLI or Portal

Question

I am a CSP partner and I am trying to create a Synapse workspace on a client's tenancy.

I tried creating the workspace in Azure Portal and Azure CLI cloud shell, and in both cases, I am getting this error:
{
"status": "Failed",
"error": {
"code": "WorkspaceCreateOrUpdateApiFailed",
"message": "An error has occurred. Please contact Microsoft support with correlation ID: ???",
"details": [
{
"code": "WorkspaceAdminInfoMissing",
"message": "Workspace AAD admin information is missing. If you are a CSP partner, please provide workspace admin info in workspace request payload."
}]}}

Microsoft.Synapse is registered in the subscription, as well as Microsoft.SQL.
What should I do to proceed?

Answer 1

Hello @Rafi Trad ,

Welcome to the MS Q&A platform.

It seems like a permission issue.

To create an Azure Synapse workspace, a user must have Azure Contributor role and User Access Administrator permissions, or the Owner role in the subscription.

As per the error message, you will need to work with your cloud solution provider to get the correct level of access. Please look into this document explained about how to manage subscriptions and resources under the Azure plan

I hope this helps.

Answer 2

The only solution we found was to use REST API calls to create Synapse resources on CSP tenancies, while supplying a correct value in:

"cspWorkspaceAdminProperties": {
"initialWorkspaceAdminObjectId": "X-X-X-X"

Here is the article that describes how to do that: https://learn.microsoft.com/en-us/rest/api/synapse/workspaces/create-or-update?tabs=HTTP&tryIt=true&source=docs

It is a deal breaker for our use-case, and we are thinking to stop using Synapse altogether, especially that we cannot automate creating Synapse easily when we have to go through REST API calls! Way too unnecessary.

Thank you.