Exercise - Create an Azure virtual machine

Question

Exercise - Create an Azure virtual machine

Anonymous

Hi,

I'm unable to proceed with this learning module due to this error... Please help.

sathiyan_m [ ~ ]$ az vm create \

--resource-group "learn-52f1cd9d-83c1-42c6-99dd-b5b8824035c9" \

--name my-vm \

--public-ip-sku Standard \

--image Ubuntu2204 \

--admin-username azureuser \

--generate-ssh-keys

(AuthorizationFailed) The client 'live.com#******@hotmail.com' with object id '7700015b-3d83-4dfa-8d4f-30ad79b3bf33' does not have authorization to perform action 'Microsoft.Resources/subscriptions/resourcegroups/read' over scope '/subscriptions/3ec6e182-44d1-4344-b855-5aa01ff748e6/resourcegroups/learn-52f1cd9d-83c1-42c6-99dd-b5b8824035c9' or the scope is invalid. If access was recently granted, please refresh your credentials.

Code: AuthorizationFailed

Message: The client 'live.com#******@hotmail.com' with object id '7700015b-3d83-4dfa-8d4f-30ad79b3bf33' does not have authorization to perform action 'Microsoft.Resources/subscriptions/resourcegroups/read' over scope '/subscriptions/3ec6e182-44d1-4344-b855-5aa01ff748e6/resourcegroups/learn-52f1cd9d-83c1-42c6-99dd-b5b8824035c9' or the scope is invalid. If access was recently granted, please refresh your credentials.

sathiyan_m [ ~ ]$ az vm create --resource-group "learn-6a11c2af-689a-4248-a13a-5aae8ad55376" --name m

y-vm --public-ip-sku Standard --image Ubuntu2204 --admin-username azureuser --generate-ssh-keys

(AuthorizationFailed) The client 'live.com#******@hotmail.com' with object id '7700015b-3d83-4dfa-8d4f-30ad79b3bf33' does not have authorization to perform action 'Microsoft.Resources/subscriptions/resourcegroups/read' over scope '/subscriptions/3ec6e182-44d1-4344-b855-5aa01ff748e6/resourcegroups/learn-6a11c2af-689a-4248-a13a-5aae8ad55376' or the scope is invalid. If access was recently granted, please refresh your credentials.

Code: AuthorizationFailed

This question is related to the following Learning Module

1 answer

Your answer

Answer 1

Anonymous

Hi Sathi,

Thank you for reaching out to Microsoft Q & A forum.

Where am I seeing this?

Subject: AZ-900/Azure Fundamentals

Learning Path: Describe Azure architecture and services.
Module: Describe Azure compute and networking services
Unit: 3 - Exercise - Create an Azure virtual machine

Based on the provided error code, it is recommended to substitute "[sandbox resource group name]" with the default resource group name, commencing with "learn......" (for instance: learn-52f1cd9d-83c1-42c6-99dd-b5b8824035c9). This replacement should be made adjacent to the --resource-group name, as illustrated in the accompanying. screenshot below.
RG11 Note: Kindly refrain from utilizing a personalized resource group name, such as (e.g., my-group-01). Instead, consider employing a resource group name that begins with learn-f063fbde-8087-4d3b-91a3-cc2475106779, as illustrated in the provided screenshot below.

now

If you encounter any future issues, please feel free to contact us, and we will be pleased to assist you further.

If you have found the answer provided to be helpful, please click on the "Accept answer" button so that it is useful for other members in the Microsoft Q&A community.

Thank you.

Anonymous

2024-06-06T17:29:32.0366667+00:00

@Anonymous I attempted this exact workaround as mentioned in other articles, and it did not work.
Is this not correct? --resource-group "learn-52f1cd9d-83c1-42c6-99dd-b5b8824035c9"
Anonymous

2024-06-06T19:49:01.96+00:00

Hi Sathi,

Thanks for your response

We apologize that your issue remains unresolved.

The error you're encountering, (Authorization Failed), indicates that your Azure account does not have sufficient permissions to perform the operation you're attempting. Specifically, you lack authorization to access the specified resource groups within the provided subscription.

Here’s a step-by-step guide to troubleshoot and resolve this issue:

1.Make sure to verify your Azure role assignments. Confirm that your account has the appropriate role at the subscription or resource group level. The roles that usually possess the necessary permissions are:

-Owner

-Contributor

-VM Contributor

To check and modify role assignments:
Go to the Azure portal and navigate to your subscription, select "Access control (IAM)" from the left menu, click on "Role assignments" to see your current role, and if necessary, click "Add role assignment" to add a new role for your user account.

2.Verify Resource Group Permissions:
Ensure you have the necessary permissions on the specific resource group by
-navigating to it in the Azure portal, clicking on "Access control (IAM)," and checking your role assignments to ensure you have at least the "Contributor" role.

3.If you have recently been granted permissions, you might need to refresh your Azure CLI credentials.

If your issue is still not resolved, please try these general steps:
1.Resolve repetitive verification prompts by clearing your browser's cache and cookies.
2.Switch to an alternative web browser such as Firefox or Edge if you encounter issues.
3.Maintain a stable internet connection to prevent recurring verification problems.
4.Address interference by disabling browser extensions like ad blockers or using incognito mode to bypass stored data.

Just now, we attempted from our end again, and everything appears to be working fine. Please see the screenshot provided for reference. If you encounter any future issues, please feel free to contact us, and we will be pleased to assist you further.

If you have found the answer provided to be helpful, please click on the "Accept answer" button so that it is useful for other members in the Microsoft Q&A community.

Thank you.
Anonymous

2024-06-07T13:16:22.48+00:00

Tried to add roles, but it is disabled. I also cleared cookies and cache, that too did not work.
Anonymous

2024-06-07T18:54:41.6+00:00
Hi Sathi,
Thank you for your response.

It looks like you don't have the necessary permissions to add role assignments or manage access control.
Here are some steps you can take to resolve this:

Please reach out to the administrator or owner of the subscription. They have the required permissions to assign roles and can grant you the necessary access.

If you're using an organizational account, your IT department may have specific policies and restrictions in place. Could you contact them to request the necessary permissions!

If possible, you might want to use a different account that already has the necessary permissions to perform the tasks.

Please ensure that you are logged into the correct Azure account and that it is the account associated with the subscription you're trying to use.

By following these steps, you should be able to gain the necessary permissions to complete your task.

We attempted the exercise again, and everything is functioning correctly on our end.

If you have found the answer provided to be helpful, please click on the "Accept answer" button so that it is useful for other members in the Microsoft Q&A community.

Thank you.

Share via

Exercise - Create an Azure virtual machine

1 answer

Your answer