Cannot publish pipelines in Azure data factory.

Brian Sullivan 5

A user that is set up as an owner, contributor and data factory contributor for a data factory resource cannot publish pipelines. Is there a specific role or setting required for this? DevOps is not involved, just directly publishing a pipeline.

Tjomme Vergauwen 0

We have the same issue: User has the Data Factory Contributor role, but can't publish.

Error (in Dutch):

Error code: OK Inner error code: AuthorizationFailed Message: De client xxx@yyy.be met object-id xxx heeft geen toestemming voor het uitvoeren van de actie Microsoft.Resources/deployments/write voor het bereik /subscriptions/zzz/resourcegroups/ppp/providers/Microsoft.Resources/deployments/publishing_1710239441041 of het bereik is ongeldig. Als u onlangs toegang hebt verleend, moet u uw referenties vernieuwen.

It seems the required access rights are not sufficient

BhargavaGunnam-MSFT 26,136 Reputation points Microsoft Employee

2024-03-12T18:13:16.0566667+00:00

Hello Tjomme Vergauwen,

Can you explicitly provide Microsoft.DataFactory/factories/write and see if it works?

Tjomme Vergauwen 0

Created custom role on the data factory with the following permissions:

        "permissions": [
            {
                "actions": [
                    "Microsoft.DataFactory/factories/write"
                ],
                "notActions": [],
                "dataActions": [],
                "notDataActions": []
            }
        ]

This resulted in the same error as above.

When assigning the following custom role to the user the error message remains the same

        "assignableScopes": [
            "/subscriptions/zzz/resourceGroups/ppp"
        ],
        "permissions": [
            {
                "actions": [
                    "Microsoft.DataFactory/factories/write",
                    "Microsoft.Resources/deployments/write"
                ],
                "notActions": [],
                "dataActions": [],
                "notDataActions": []
            }
        ]

BhargavaGunnam-MSFT 26,136 Reputation points Microsoft Employee

2024-03-13T21:47:14.9366667+00:00

Hello Tjomme Vergauwen,

Can you please check if there are any policy restrictions causing this issue?
https://learn.microsoft.com/en-us/azure/governance/policy/overview https://learn.microsoft.com/en-us/azure/governance/policy/concepts/effects?WT.mc_id=modinfra-21296-socuff
Tjomme Vergauwen 0 Reputation points

2024-03-27T16:11:11.0233333+00:00

As far as I could check, there are no policies in place that would block this. The error message does not refer to a policy either

1 answer

BhargavaGunnam-MSFT 26,136 Reputation points Microsoft Employee

2024-03-08T21:36:48.51+00:00

Hello Brian Sullivan,

To publish the piplelines, The Data Factory Contributor role at the resource group level or above is needed

In publish context, Microsoft.DataFactory/factories/write permission applies.

So the user should have the "Contributor" role or a custom role with the "Microsoft.DataFactory/factories/write" permission needed.

and make sure user signed in to the correct Azure account.

if you are still facing the issue, please let me know.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment