I get a permisions error eventhough I am the global admin

Scott Pendleton 26 Reputation points
2020-10-27T20:09:43.867+00:00

I am trying to create an Azure Migrate Appliance and in step 1 under discover machines I get this error when I name the machine and generate a key:

"Logged in user does not have enough permissions to deploy artifacts. User should have at least Contributor permissions to deploy artifacts."

I used the check access tool and I have verified I am the Global Admin which is above Contributor on the hierarchy, so there is no permission I should not have.

Azure Migrate
Azure Migrate
A central hub of Azure cloud migration services and tools to discover, assess, and migrate workloads to the cloud.
932 questions
{count} votes

Accepted answer
  1. SadiqhAhmed-MSFT 49,331 Reputation points Microsoft Employee Moderator
    2020-10-28T16:00:21.387+00:00

    Hello @Scott Pendleton
    Welcome Microsoft Q&A forum!

    Admin roles are defined at different scope = (Subscription & Directory/Tenant).

    Global admin is the supreme role defined at directory level to:

    • Manage access to all administrative features in Azure Active Directory, as well as services that federate to Azure Active Directory
    • Assign administrator roles to others
    • Reset the password for any user and all other administrators

    Contributor role is defined at subscription scope to:

    • Create and manage all of types of Azure resources
    • Create a new tenant in Azure Active Directory
    • Cannot grant access to others

    Though you have Global admin permissions but that doesn't suffice the requirement. You need contributor permissions too.

    To better understand roles, please refer to this link - https://learn.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles#azure-roles

    Just as a reference - Azure Migrate support matrix

    Hope this clarifies!

    ------------------------------------------------------------------------------------------------------------------------------

    If an Answer is helpful, please “Accept Answer” and Up-Vote for the same which might be beneficial to other community members reading this thread.


1 additional answer

Sort by: Most helpful
  1. Victor Gomes Rosati 1 Reputation point
    2020-11-01T23:54:37.12+00:00

    I'm the owner of my account I'm facing the same issue, There are no any other user in my subscription since I'm the owner and I created the account but I receive the same error f this guy ![36577-capture.png][1] [1]: /api/attachments/36577-capture.png?platform=QnA


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.