I get a permisions error eventhough I am the global admin

Scott Pendleton 26 Reputation points
2020-10-27T20:09:43.867+00:00

I am trying to create an Azure Migrate Appliance and in step 1 under discover machines I get this error when I name the machine and generate a key:

"Logged in user does not have enough permissions to deploy artifacts. User should have at least Contributor permissions to deploy artifacts."

I used the check access tool and I have verified I am the Global Admin which is above Contributor on the hierarchy, so there is no permission I should not have.

Azure Migrate
Azure Migrate
A central hub of Azure cloud migration services and tools to discover, assess, and migrate workloads to the cloud.
719 questions
Accepted answer
  1. SadiqhAhmed-MSFT 38,401 Reputation points Microsoft Employee
    2020-10-28T16:00:21.387+00:00

    Hello @Scott Pendleton
    Welcome Microsoft Q&A forum!

    Admin roles are defined at different scope = (Subscription & Directory/Tenant).

    Global admin is the supreme role defined at directory level to:

    • Manage access to all administrative features in Azure Active Directory, as well as services that federate to Azure Active Directory
    • Assign administrator roles to others
    • Reset the password for any user and all other administrators

    Contributor role is defined at subscription scope to:

    • Create and manage all of types of Azure resources
    • Create a new tenant in Azure Active Directory
    • Cannot grant access to others

    Though you have Global admin permissions but that doesn't suffice the requirement. You need contributor permissions too.

    To better understand roles, please refer to this link - https://learn.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles#azure-roles

    Just as a reference - Azure Migrate support matrix

    Hope this clarifies!

    ------------------------------------------------------------------------------------------------------------------------------

    If an Answer is helpful, please “Accept Answer” and Up-Vote for the same which might be beneficial to other community members reading this thread.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Victor Gomes do Nascimento 96 Reputation points
    2020-11-01T23:54:37.12+00:00

    I'm the owner of my account I'm facing the same issue, There are no any other user in my subscription since I'm the owner and I created the account but I receive the same error f this guy ![36577-capture.png][1] [1]: /api/attachments/36577-capture.png?platform=QnA