Unable to delete an Synapse Analytics resource group

Question

Tring to delet resource gro9uop and getting the following message:

Failed to delete resource group synapse-ark123: The client 'live.com#******@hotmail.com' with object id '1e8b0e92-93f2-417d-8d5e-ada6a281d72d' has permission to perform action 'Microsoft.Resources/subscriptions/resourceGroups/delete' on scope '/subscriptions/79a9e91f-d946-43c6-a5f2-022a28bab76f/resourceGroups/synapse-ark123'; however, the access is denied because of the deny assignment with name '69081c58-9255-49fa-8a82-1c71c8691a03' and Id '69081c58925549fa8a821c71c8691a03' at scope '/subscriptions/79a9e91f-d946-43c6-a5f2-022a28bab76f/resourceGroups/synapse-ark123'. (Code: DenyAssignmentAuthorizationFailed)

Cannot figure out how to change permissions so that i can delete it.

Answer 1

Hi Andrew Kerekes

Welcome to Microsoft Q&A platform and thanks for posting your question here.

To delete the resource group, you need to remove the deny assignment that is blocking the deletion. you can do this by signing in to the Azure portal, navigating to the resource group, clicking on the "Access control (IAM)" tab, searching for the deny assignment with the specified name and ID, and then deleting it. If you are unable to remove the deny assignment, you should contact your Azure administrator or the owner of the subscription to grant them the necessary permissions.

Reference
https://learn.microsoft.com/en-us/azure/role-based-access-control/deny-assignments?tabs=azure-portal#list-deny-assignments
https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/delete-resource-group?tabs=azure-powershell

Hope this helps. Do let us know if you any further queries.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Answer 2

Hi @Andrew Kerekes

I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to accept the answer.

Issue:
Tring to delet resource gro9uop and getting the following message:

Failed to delete resource group synapse-ark123: The client 'live.com#******@hotmail.com' with object id '1e8b0e92-93f2-417d-8d5e-ada6a281d72d' has permission to perform action 'Microsoft.Resources/subscriptions/resourceGroups/delete' on scope '/subscriptions/79a9e91f-d946-43c6-a5f2-022a28bab76f/resourceGroups/synapse-ark123'; however, the access is denied because of the deny assignment with name '69081c58-9255-49fa-8a82-1c71c8691a03' and Id '69081c58925549fa8a821c71c8691a03' at scope '/subscriptions/79a9e91f-d946-43c6-a5f2-022a28bab76f/resourceGroups/synapse-ark123'. (Code: DenyAssignmentAuthorizationFailed)

Cannot figure out how to change permissions so that i can delete it.

Solution:
I have deleted master resource group through powershell ... problem "solved"

If I missed anything please let me know and I'd be happy to add it to my answer, or feel free to comment below with any additional information.

Hope this helps. Do let us know if you any further queries.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.