Authorization failed for template resource

Question

Authorization failed for template resource '[removed]' of type 'Microsoft.Authorization/roleAssignments'. The client '[removed]' with object id '[removed]' does not have permission to perform action

Answer 1

Hello, @Chin Keong Lam (Ascendion Inc) !

Why am I receiving an authorization failure message?

Based on the error you've provided, the user (also sometimes service principal) does not have permission to complete the action being requested. To assign Azure roles, you must have Microsoft.Authorization/roleAssignments/write permissions, such as Role Based Access Control Administrator or User Access Administrator. Check the role your account belongs to, and its access for the deployment scope:

• Assign Azure roles using the Azure portal

Additional reading:

• What is Azure role-based access control (Azure RBAC)?
• Troubleshoot common Azure deployment errors
• Troubleshoot Azure RBAC

---

I hope this has been helpful! Your feedback is important so please take a moment to accept answers.

If you still have questions, please let us know what is needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!