Event Subscription with System Topic parent for Private Storage Account fails

Question

It was working with a public Storage Account, but now that the Storage Account is private the deployment of the event subscription (StorageAccount:Queue -> System Topic) is failing with "Internal Error".

Could you please follow up on this: e20ce182-4c43-4850-bf57-f7d593708496:6/1/2023 10:58:09 AM (UTC)

Answer 1

@LaurentG I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to "Accept " the answer.

Issue: Event Subscription with System Topic parent for Private Storage Account fails

Solution: In the Storage Account Networking set "Public Network Access" to "Enabled from selected virtual networks and IP addresses" and then choose "Resource instances" and set the "Microsoft.EventGrid/topics" Instance and then the deployment worked successfully!

---

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

Answer 2

Hello @LaurentG !

Welcome to Microsoft QnA!

I see you are having trouble wit a storage Account , connecting from Event Hub since you changed to Private Access

Have you checked the Access Control on the blob ?

Go to :

Also go here https://learn.microsoft.com/en-us/azure/storage/blobs/anonymous-read-access-configure?tabs=portal

and have a look on the different levels for a better understanding!

I hope this helps!

Kindly mark the answer as Accepted and Upvote in case it helped!

Regards

Answer 3

Hello @Graebner, Laurent !

Thank you for the info

Please add the role

Storage Queue Data Contributor OR Storage Account Contributor OR Storage Blob Data Contributor

These roles are having the effect required , and supersede the simple Subscription level role

You can try all of them and then remove the ones you do not need , after testing

I hope this helps!

Kindly mark the answer as Accepted and Upvote in case it helped!

Regards