Cannot publish pipelines in Azure data factory.

Brian Sullivan 5

A user that is set up as an owner, contributor and data factory contributor for a data factory resource cannot publish pipelines. Is there a specific role or setting required for this? DevOps is not involved, just directly publishing a pipeline.

Tjomme Vergauwen 0

We have the same issue: User has the Data Factory Contributor role, but can't publish.

Error (in Dutch):

Error code: OK Inner error code: AuthorizationFailed Message: De client xxx@yyy.be met object-id xxx heeft geen toestemming voor het uitvoeren van de actie Microsoft.Resources/deployments/write voor het bereik /subscriptions/zzz/resourcegroups/ppp/providers/Microsoft.Resources/deployments/publishing_1710239441041 of het bereik is ongeldig. Als u onlangs toegang hebt verleend, moet u uw referenties vernieuwen.

It seems the required access rights are not sufficient

Bhargava-MSFT 31,121 Reputation points Microsoft Employee

2024-03-12T18:13:16.0566667+00:00

Hello Tjomme Vergauwen,

Can you explicitly provide Microsoft.DataFactory/factories/write and see if it works?

Tjomme Vergauwen 0

Created custom role on the data factory with the following permissions:

        "permissions": [
            {
                "actions": [
                    "Microsoft.DataFactory/factories/write"
                ],
                "notActions": [],
                "dataActions": [],
                "notDataActions": []
            }
        ]

This resulted in the same error as above.

When assigning the following custom role to the user the error message remains the same

        "assignableScopes": [
            "/subscriptions/zzz/resourceGroups/ppp"
        ],
        "permissions": [
            {
                "actions": [
                    "Microsoft.DataFactory/factories/write",
                    "Microsoft.Resources/deployments/write"
                ],
                "notActions": [],
                "dataActions": [],
                "notDataActions": []
            }
        ]

Bhargava-MSFT 31,121 Reputation points Microsoft Employee

2024-03-13T21:47:14.9366667+00:00

Hello Tjomme Vergauwen,

Can you please check if there are any policy restrictions causing this issue?
https://learn.microsoft.com/en-us/azure/governance/policy/overview https://learn.microsoft.com/en-us/azure/governance/policy/concepts/effects?WT.mc_id=modinfra-21296-socuff
Tjomme Vergauwen 0 Reputation points

2024-03-27T16:11:11.0233333+00:00

As far as I could check, there are no policies in place that would block this. The error message does not refer to a policy either

1 answer

Bhargava-MSFT 31,121 Microsoft Employee

Hello Brian Sullivan,

To publish the piplelines, The Data Factory Contributor role at the resource group level or above is needed

In publish context, Microsoft.DataFactory/factories/write permission applies.

So the user should have the "Contributor" role or a custom role with the "Microsoft.DataFactory/factories/write" permission needed.

and make sure user signed in to the correct Azure account.

if you are still facing the issue, please let me know.

Ardi Yudhaprawira 0

Hallo @Bhargava-MSFT

i also facing the same issue. i already have the permissions but still i can't publish the pipeline

{
    "properties": {
        "roleName": "Data Factory Contributor",
        "description": "Create and manage data factories, as well as child resources within them.",
        "assignableScopes": [
            "/"
        ],
        "permissions": [
            {
                "actions": [
                    "Microsoft.DataFactory/dataFactories/*",
                    "Microsoft.DataFactory/factories/*",
                ],
                "notActions": [],
                "dataActions": [],
                "notDataActions": []
            }
        ]
    }
}

Alejandro Castro 0

Hello guys, same here as above.

"permissions": [
            {
                "actions": [
                    "Microsoft.Authorization/*/read",
                    "Microsoft.DataFactory/dataFactories/*",
                    "Microsoft.DataFactory/factories/*",
                    "Microsoft.Insights/alertRules/*",
                    "Microsoft.ResourceHealth/availabilityStatuses/read",
                    "Microsoft.Resources/deployments/*",
                    "Microsoft.Resources/subscriptions/resourceGroups/read",
                    "Microsoft.Support/*",
                    "Microsoft.EventGrid/eventSubscriptions/write"
                ],
                "notActions": [],
                "dataActions": [],
                "notDataActions": []
            }
        ]

PLease let us know how to assign the permission or how to verify what is missing.

Share via

Cannot publish pipelines in Azure data factory.

1 answer

Your answer