Permissions error when creating a Deploy Pipeline for my Azure Function

Question

Permissions error when creating a Deploy Pipeline for my Azure Function

Jorge Lopez 51

Hi,

I'm trying to create a Pipeline to automatically build and deploy my Python Azure Function from Azure Repos Git, but I am getting error when creating the pipeline. I am following these steps:

In Azure DevOps Pipelines tab, click the button to create a New Pipeline
In connect I choose Azure Repos Git
Then I select the Repository
In configure I choose Python Function App to Linux on Azure, then I select the appropriate Azure Subscription, and the Function App name and directory, and click on Validate and configure
But then I get the following error:

error_msg

It seems to be a permissions related error, but I have the Owner role in the Function App IAM, and full permissions on DevOps Pipelines:

Screenshot 2023-07-03 101636

Does anyone know what the problem could be?

MayankBargali-MSFT 70,936 Reputation points Moderator

2023-07-06T09:21:15.3633333+00:00

Hi @Jorge Lopez

Following up to see if my answer helps. Feel free to get back to me if you need any assistance.

Please "Accept Answer" if the answer is helpful so that it can help others in the community.
MayankBargali-MSFT 70,936 Reputation points Moderator

2023-07-11T04:53:02.46+00:00

Hi @Jorge Lopez

I hope the answer helps. Feel free to get back to me if you need any assistance.

Please "Accept Answer" if the answer is helpful so that it can help others in the community.

Accepted answer

0 additional answers

Your answer

MayankBargali-MSFT 70,936 Reputation points Moderator

2023-07-06T09:21:15.3633333+00:00

Hi @Jorge Lopez

Following up to see if my answer helps. Feel free to get back to me if you need any assistance.

Please "Accept Answer" if the answer is helpful so that it can help others in the community.
MayankBargali-MSFT 70,936 Reputation points Moderator

2023-07-11T04:53:02.46+00:00

Hi @Jorge Lopez

I hope the answer helps. Feel free to get back to me if you need any assistance.

Please "Accept Answer" if the answer is helpful so that it can help others in the community.

Answer 1

MayankBargali-MSFT 70,936 Moderator

@Jorge Lopez Thanks for reaching out. The error message you are seeing indicates that the Azure DevOps service principal does not have the necessary permissions to deploy the Azure Function App. Here are a few things you can check to resolve this issue:

Verify that the Azure DevOps service principal has the necessary permissions. The service principal needs to have the Contributor role or higher on the Azure subscription that the Function App is deployed to. Make sure that the service principal has been granted this role.
Check the scope of the permission. The scope of the permission needs to match the scope of the resource. In this case, the scope is the Azure subscription that the Function App is deployed to. Make sure that the service principal has been granted the Contributor role on this scope.
Check the Azure Function App configuration. Make sure that the Function App is configured correctly and that it is accessible from the Azure DevOps pipeline. For example, make sure that the Function App is deployed to the correct region and that it is not behind a firewall or virtual network.
Check the Azure DevOps pipeline configuration. Make sure that the pipeline is configured correctly and that it is using the correct service principle. For example, make sure that the service principal has been added to the pipeline's service connections and that the correct service connection is being used in the pipeline.

Alternatively you can ask any of your administrators to perform the operation and give the necessary permission.

Jorge Lopez 51 Reputation points

2023-07-13T09:57:39.1366667+00:00

Hi @MayankBargali-MSFT and Thanks for your answer and support!

I contact my administrator to create the pipeline and successfully he created it without any permission problems.

However we still don't know which permission I'm missing, because our goal is that I have the ability to create new pipelines without relying on a third person.

I have owner role permission in both the Azure Subscription and Azure Function scopes. And also all the permissions allowed in DevOps Pipleines
MayankBargali-MSFT 70,936 Reputation points Moderator

2023-07-19T05:40:37.6133333+00:00

@Jorge Lopez You should have the user has 'Owner' or 'User Access Administrator' permissions on the Subscription for the function app that you have configured. I suggest you to review the Project Settings and check the Service Connections logs and verify it further. In case if you still face the issue then I will suggest you reach out to the experts in the dedicated forum over here.

https://stackoverflow.com/questions/tagged/devops

https://developercommunity.visualstudio.com/spaces/21/index.html
MayankBargali-MSFT 70,936 Reputation points Moderator

2023-07-24T04:23:31.2233333+00:00

@Jorge Lopez Gamarra Following up to see if you need any assistance from function app.
Jorge Lopez 51 Reputation points

2023-07-31T06:58:29.6166667+00:00

@MayankBargali-MSFT thanks you for your support!

My admin grant me the administrator permission in the project and now I can create the pipeline without any issue

Share via

Permissions error when creating a Deploy Pipeline for my Azure Function

0 additional answers

Your answer