Privileges are not sufficient to complete the operation. | Certificates and Secrets

piercarlo schiavo 46

Dears,

I ceated in my Azure Portal a multi-tenant "Azure Bot" Resource.

After Creation, I can access the resource "Configuration".

But when I try to access the "Microsoft App Id ("manage password")" I get

"Privileges are not sufficient to complete the operation. | Certificates and Secrets"

Message.

I checked my user privileges in "Access Control (IAM)" of the resource and I have the owner privilege so full controll.

Where I need to check to fix the access the "Certificates and Secrets" of this resource ?

Thank you for help

Piercarlo

romungi-MSFT 42,116 Reputation points Microsoft Employee

2023-01-19T06:45:35.9+00:00

@piercarlo schiavo When you search for the user under Users blade of your Azure active directory do you see the user as user type Member under principal name XXXXX@YourTenant.onmicrosoft.com where your tenant and user name is substituted?

If this is not the case then this is the reason for the message seen.

Also ensure either global administrator, or application contributor or owner role is assigned to the user. The changes make take 5-10 minutes and you should be able to perform the earlier action successfully.
piercarlo schiavo 46 Reputation points

2023-01-19T07:15:58.5666667+00:00

Dear Romungi,

I checked the User Blade configuration, and it is as you described:

#####@(my email without @ and point).onmicrosoft.com

and I have global administrator and owner role setted to this user too.

But the situation doesnt change.

Some other suggestions ?

Thank you

Piercarlo
romungi-MSFT 42,116 Reputation points Microsoft Employee

2023-01-19T07:35:37.0466667+00:00
Is it possible to add a new user for now? Since, I am not sure what other settings might be missing for this user in your subscription.

On your azure active directory create a tenant specific user for example XXXXX@YourTenanat.onmicrosoft.com

Assign subscription role on newly created account by navigating to the subscription page and access Access control (IAM) page

Assign either global administrator, or application contributor or owner role on it

Login with the above user and try the same scenario to check the certificates blade

If the above also fails, then I would suggest raising a support case to have the settings reviewed in the subscription.