This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 8%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJL%3C/text%3E%3C/svg%3E)
When I run the command
ALTER ROLE db_datareader ADD MEMBER "XXXX"
It showed the error
Cannot add the principal 'XXXX', because it does not exist or you do not have permission.
But I'm very sure The server principal 'XXXX' already exists. and the account has the permission.
The login is available but seems you dont have previlege to add grant users permissions. Can you check what built-in role your login has?
Hey @Vinodh247 . Could you provider me more details about how to check it.
goto [azure portal-->synapse workspace-->IAM-->Role assignments] and see what role you currently have
Just checking in to see if the above workaround helped; pls confirm.
Hey @Vinodh247 . I got the elevation for this contributor group and run the command, but it still failed with same error before. Not sure which role I need to get.
Hi Jianjun Lv,
You can follow the link for similar issue https://github.com/MicrosoftDocs/sql-docs/issues/2323
I have seen the similar issue you can try using APPID insted of name and make sure you have Directory reader role.
Let me know how it goes. :)
Jianjun Lv: Can you get your login the 'Owner' role? Once you are in owner role you should be able to create login and assign roles to users
Owner: Grants full access to manage all resources, including the ability to assign roles in Azure RBAC.
Thanks so much. I switched to another branch and the command works. I don't think I have the permission to run this command in master branch but can run it in other branch. Thank you guys again.