The request did not have a subscription or a valid tenant level resource provider

Question

I've received the error below when trying to assign a role to a group on EntraID while scoping it to a given cluster.

az role assignment create \
    --assignee a-test-group \
    --role "Azure Kubernetes Service Cluster User Role" \
    --scope /subscriptions/xxx/resourceGroups/yyy/providers/Microsoft.ContainerService/managedClusters/my-cluster

error message

(MissingSubscription) The request did not have a subscription or a valid tenant level resource provider. Code: MissingSubscription Message: The request did not have a subscription or a valid tenant level resource provider.

I can confirm I have the right permission and cli has been configured to point to the right subscription.

Any help is welcome.

Answer 1

Thank you for your post!

Error Message:

(MissingSubscription) The request did not have a subscription or a valid tenant level resource provider. Code: MissingSubscription Message: The request did not have a subscription or a valid tenant level resource provider.

From the error message that you received, this indicates that the request didn't have a subscription or a valid tenant level resource provider. To hopefully help point you in the right direction, you can try the following steps to troubleshoot.

1. Double-check that Azure CLI is configured to use the correct subscription. You can use the following command to set the default subscription:

Replace `<subscription-id>` with the ID of the subscription you want to use.

az account set --subscription <subscription-id>

2. Ensure that Azure CLI command's --scope for your resource is the full resource ID, such as:

/subscriptions/<guid>/resourceGroups/myResourceGroup

/subscriptions/<guid>/resourceGroups/myResourceGroupVnet/providers/Microsoft.Network/virtualNetworks/myVnet.

3. If assigning the Azure Kubernetes Service Cluster User Role to a group on within MS Entra ID isn't working from CLI on your desktop, you can see if using Bash from the Azure Portal helps to resolve the issue.

If you're still having issues, please share the documentation that you're following so I can try to reproduce your issue on my end.

---

Additional Links:

• Learn to use Bash with the Azure CLI
• az role assignment create
• Delegate access to other Azure resources

I hope this helps!

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

---

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.