CostManagement REST API using a Managed Identity is failing authorization.

Question

I'm setting up a Python script in an Azure Container Instance that will read costs from my resources using the CostManagement REST API through a Managed Identity. However, it is being rejected despite having the correct authorization. Important things to note:

1. The query works correctly on my computer with my personal credentials
2. The query does not work when run on an Azure Container Instance using a Managed Identity. Instead, I get the following error:

`{'error': {'code': 'AuthorizationFailed', 'message': "The client '

Answer 1

@Alex Ho - Welcome to Microsoft Q&A and thanks for reaching out to us.

The issue might be because of not having necessary permissions for Managed Identity that is being used by Azure Container Instance to access the Cost Management REST API.

Please ensure that Managed Identity has the appropriate role-based access control (RBAC) role for the Cost Management API. You can assign the Managed Identity the "Cost Management Contributor" role, which provides read and write access to cost management data.

Hope this helps. and please feel free to reach out if you have any further questions.

---

If the above response was helpful, please feel free to "Accept as Answer" and click "Yes" so it can be beneficial to the community.