Exercise - Create an Azure virtual machine NOT WORKING KEEP GETTING AN ERROR

Question

Exercise - Create an Azure virtual machine NOT WORKING KEEP GETTING AN ERROR

Victor Lausell 35

I am a student in Texas and I keep getting the same error. Tried changing my credentials but with my account that is not possible . I am simply trying to learn. Was working on the module Describe Azure compute and networking services

The task requires:

Task 1: Create a Linux virtual machine and install Nginx

Use the following Azure CLI commands to create a Linux VM and install Nginx. After your VM is created, you'll use the Custom Script Extension to install Nginx. The Custom Script Extension is an easy way to download and run scripts on your Azure VMs. It's just one of the many ways you can configure the system after your VM is up and running.

From Cloud Shell, run the following az vm create command to create a Linux VM:

Keep getting the following error:

PS /home/victor_lausell> az vm create --resource-group learn-36e18f87-0615-4b1e-8b69-b63858b521b4 --name my-vm --public-ip-sku Standard --image Ubuntu2204 --admin-username azureuser --generate-ssh-keys

(AuthorizationFailed) The client '******@my.tccd.edu' with object id 'c9478cca-6c66-43c0-b940-41732552dff8' does not have authorization to perform action 'Microsoft.Resources/subscriptions/resourcegroups/read' over scope '/subscriptions/8b4dc032-74e8-4cbb-9bf2-ba780a5c236f/resourcegroups/learn-36e18f87-0615-4b1e-8b69-b63858b521b4' or the scope is invalid. If access was recently granted, please refresh your credentials.

Code: AuthorizationFailed

Message: The client '******@my.tccd.edu' with object id 'c9478cca-6c66-43c0-b940-41732552dff8' does not have authorization to perform action 'Microsoft.Resources/subscriptions/resourcegroups/read' over scope '/subscriptions/8b4dc032-74e8-4cbb-9bf2-ba780a5c236f/resourcegroups/learn-36e18f87-0615-4b1e-8b69-b63858b521b4' or the scope is invalid. If access was recently granted, please refresh your credentials.

https://learn.microsoft.com/en-us/training/modules/describe-azure-compute-networking-services/3-exercise-create-azure-virtual-machine

kobulloc-MSFT 26,846 Reputation points Microsoft Employee Moderator

2023-11-30T22:04:15.75+00:00

For Azure training modules like this, sandbox environments and subscriptions should be automatically configured. I've updated the tag so the Azure Training team can review this.
Victor Lausell 35 Reputation points

2023-11-30T23:13:48.2+00:00

That makes sense. I learned a lot about how this can happen and apparently, I need to have certain permissions to create a VM . Currently, I dont have them nor can I change them.

1 answer

Your answer

kobulloc-MSFT 26,846 Reputation points Microsoft Employee Moderator

2023-11-30T22:04:15.75+00:00

For Azure training modules like this, sandbox environments and subscriptions should be automatically configured. I've updated the tag so the Azure Training team can review this.
Victor Lausell 35 Reputation points

2023-11-30T23:13:48.2+00:00

That makes sense. I learned a lot about how this can happen and apparently, I need to have certain permissions to create a VM . Currently, I dont have them nor can I change them.

Answer 1

Andriy Bilous 12,076 MVP Volunteer Moderator

Hello @Victor Lausell

Yes, you must assign Azure role Contributor to your user ******@my.tccd.edu to create azure resources as per this article.

Victor Lausell 35 Reputation points

2023-11-30T22:36:34.6466667+00:00

Hello @Andriy Bilous ,

I thought so too, but my learning account doesn't allow me to do so. I don't understand why they would assign such exercise. It seems to me that without such exercise is futile.

Unless, there is another way of doing this
pnaroju 3,170 Reputation points Microsoft External Staff Moderator

2023-12-01T05:38:40.9933333+00:00

Hi Victor Lausell,

Thank you for reaching out to Microsoft Q&A forum.

We see that you are facing an issue during your training on Microsoft Learn path:

https://learn.microsoft.com/en-us/training/modules/describe-azure-compute-networking-services/3-exercise-create-azure-virtual-machine

We apologize for the inconvenience caused.

As mentioned by @Andriy Bilous, we need to have a role assigned as "Contributor" to your user '******@my.tccd.edu' in order to create Azure resources as mentioned in the below screenshot for your reference.

To check this role assignment, kindly follow the below mentioned steps from the Azure portal:

1.Go to Subscriptions from the home page.

2.Select your subscription. (for example: Concierge subscription)

3.Click on Access control (IAM).

4.Click on "View my access" under Check access tab.

5.We can see role as "Contributor" from the Current role assignments tab. (for example: Concierge subscription).

We have tried multiple times from our end doing the exercise from the learn path, but we were able to create the VM without any error message. Kindly find the screenshot for your reference of VM creation as shown below:

We request you to kindly check with your organization administrator to get you access for Azure resources, as the admin might have restricted the access for some users.

Users need permission to manage Azure resources, administrator must assign users to a role that provide the permissions they need.

A user’s access consists of the type of user, their role assignments, and their ownership of individual objects.

If you are still running into issues, kindly attach the screenshots for reference and please let us know in the comments. We are glad to help you.

Thank you.
pnaroju 3,170 Reputation points Microsoft External Staff Moderator

2023-12-02T07:14:26.4866667+00:00

Hi Victor Lausell,

Just checking in to see if you had an opportunity to see the above comment. Please let us know if your issue is resolved or not.

If the information is helpful, please accept the answer by clicking the "Accept Answer" on the post.

If you are still facing the issue, please don't hesitate to reach out to us. We are happy to help you.

Thank you.
Victor Lausell 35 Reputation points

2023-12-02T19:28:34.38+00:00

I tried your method but I kept getting the same problem. When I clicked on view my access under Concierge subscription the same thing happened: "YOU DO NOT HAVE PERMISSIONS...."

However, under another post I found the correct answer.

See link : https://learn.microsoft.com/en-us/answers/questions/1454968/exercise-create-an-azure-virtual-machine-not-worki?comment=question#comment-1441522

Now it's working. Thanks
pnaroju 3,170 Reputation points Microsoft External Staff Moderator

2023-12-03T10:52:32.76+00:00
Hi Victor Lausell,

We are glad to know that the issue is resolved for you.

Apologies for confusion.

In Concierge subscription, role assignments to a user are granted at the resource group scope level only not at the subscription scope level.

Due to this role assignment, we have to use only the default resource group created by the Concierge subscription to work with Azure resources. We cannot create a new resource group under Concierge subscription.

Please find the screenshots attached showing the role assignments to a user at 1. Subscription scope level and 2. Resource group scope level for reference:

Subscription scope level:

2.Resource group scope level:

The steps provided in the previous comment (screenshot attached below) are valid if the role assignments are granted to a user only at Subscription scope level.

To check the role assignment to a user at Resource group scope level, kindly follow the below mentioned steps from the Azure portal:

1.Go to Resource groups from the home page.

2.Select your Resource group. (for example: learn-e26c1fb6-e983-4fa1-a68a-875b27db19be)

3.Click on Access control (IAM).

4.Click on "View my access" under Check access tab.

5.We can see role as "Contributor" from the Current role assignments tab.

If you are still running into issues, please let us know in the comments. We are happy to assist you.

If the answer has been helpful in resolving the issue, please consider accepting the answer by clicking on "Accept answer" button to help increase visibility of this question for other members of the Microsoft Q&A community.

Thank you.
pnaroju 3,170 Reputation points Microsoft External Staff Moderator

2023-12-04T16:13:20.3233333+00:00

Hi Victor Lausell,

Just checking in to see if you had an opportunity to see the above comment. If the information is helpful, please accept the answer by clicking the "Accept Answer" on the post.

If you are still facing any issue, please don't hesitate to reach out to us. We are happy to assist you.

Thank you.
Victor Lausell 35 Reputation points

2023-12-04T18:37:46.3466667+00:00

I tried your method but I kept getting the same problem. When I clicked on view my access under Concierge subscription the same thing happened: "YOU DO NOT HAVE PERMISSIONS...."

However, under another post I found the correct answer.

See link : https://learn.microsoft.com/en-us/answers/questions/1454968/exercise-create-an-azure-virtual-machine-not-worki?comment=question#comment-1441522

Nontheless,

The additional info on your second post is very helpful. Now I know that to check permissions we need to go to subscriptions and roles. Best, Victor

Now it's working. Thanks
pnaroju 3,170 Reputation points Microsoft External Staff Moderator

2023-12-05T03:16:17.08+00:00

Hi Victor Lausell,

We are glad to know that the information provided is helpful and the issue is resolved.

If you are still facing any issues, please don't hesitate to reach out to us. We are happy to help you.

Thank you.

Share via

Exercise - Create an Azure virtual machine NOT WORKING KEEP GETTING AN ERROR

1 answer

Your answer