Add Azure Active Directory Administrators fails

Question

Hi, I constantly failing with Adding Azure Active Directory Administrators (Azure AD Admins) on PostgreSQL Flexible Server.

{ "status": "Failed", "error": { "code": "DeploymentFailed", "message": "At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/arm-deployment-operations for usage details.", "details": [ { "code": "Conflict", "message": "{\r\n "status": "Failed",\r\n "error": {\r\n "code": "ResourceDeploymentFailure",\r\n "message": "The 'AzureAsyncOperationWaiting' resource operation completed with terminal provisioning state 'Failed'.",\r\n "details": [\r\n {\r\n "code": "AadAuthPrincipalCreationFailed",\r\n "message": "Failed to create Azure AD Principal. Reason - 0LP01: An unexpected error occurred while trying to validate user."\r\n }\r\n ]\r\n }\r\n}" } ] } }

Answer 1

If you have NSG/Firewall configured for the PostgreSQL subnet, you need to allow the connectivity to the AzureActiveDirectory service tag

https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/how-to-configure-sign-in-azure-ad-authentication#prerequisites

That solved it for me when I got this error message.

/Joachim