How to delete a RG that has a deny assignment, can't be removed

Question

How to delete a RG that has a deny assignment, can't be removed

Mazen Mohamed Abdalla 20

Failed to delete resource group aro-infra-lq0ru6wm-demoopenshift: The client 'XXXX' with object id 'YYYY' has permission to perform action 'Microsoft.Resources/subscriptions/resourceGroups/delete' on scope '/subscriptions/ZZZ/resourceGroups/NNN'; however, the access is denied because of the deny assignment with name 'KKK' and Id 'OOO' at scope '/subscriptions/ZZZ/resourcegroups/NNN'. (Code: DenyAssignmentAuthorizationFailed)

How to remove this resource group it was created automatically while i was creating an openshift cluster resource

JamesTran-MSFT 36,871 Reputation points Microsoft Employee Moderator

2023-12-20T23:38:59.2933333+00:00

@Mazen Mohamed Abdalla

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

1 answer

Your answer

JamesTran-MSFT 36,871 Reputation points Microsoft Employee Moderator

2023-12-20T23:38:59.2933333+00:00

@Mazen Mohamed Abdalla

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

Answer 1

Andreas Baumgarten 121.1K MVP Moderator

Hi @Mazen Mohamed Abdalla ,

it seems there is a Deny Assignment applied to the resource. You can check this here on the resource:

vm01_2

This assignment was done by a Deployment Stack: Deployment stacks (Preview) It's possible to remove the Deny Assignment via PowerShell: Control detachment and deletion

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards Andreas Baumgarten

JamesTran-MSFT 36,871 Reputation points Microsoft Employee Moderator

2024-01-03T20:20:16.3466667+00:00

@Mazen Mohamed Abdalla

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

Share via

How to delete a RG that has a deny assignment, can't be removed

1 answer

Your answer