How do I deploy the Landing Zone accelerator with proper authorization within a learn module using a personal Microsoft account?

Question

I am trying to deploy the Landing Zone accelerator within a AZ 305 learn module using my personal Microsoft account with the default directory (personal_email.onmicrosoft.com. I created separate subscriptions but I am getting an error that reads: You don’t have authorization to perform action 'Microsoft.Resources/deployments/validate/action'. I am the owner of the account. I proceeded to upgrade my Azure subscription account to a Pay-As-You-Go to no joy. How can I deploy the LZ accelerator successfully from the module? The specific unit is AZ 305: Accelerate cloud adoption with the Microsoft Cloud Adoption Framework for Azure - Choose the best Azure landing zone.... - unit 8.

Answer 1

Hi Arthur Simbarashe Nyikayaramba,

Thank you for asking this question on the Microsoft Q&A Platform.

To rectify the issue, kindly proceed with the following steps:

Before you deploy the Azure landing zone accelerator, you need to create two Azure subscriptions: A networking subscription to host networking & connectivity assets and an identity subscription to host identity and access management assets.

Ensure that your personal Microsoft account (associated with your default directory like personal_email.onmicrosoft.com) has the necessary Azure role assignments. As you mentioned you are the owner, verify that this role has sufficient permissions. Typically, the Owner role should allow all actions by default, but sometimes custom RBAC (Role-Based Access Control) configurations or policy assignments can restrict specific actions.

Since you've already upgraded your Azure subscription to Pay-As-You-Go, ensure that this subscription is the one you are using in your Azure portal when attempting the deployment. Sometimes, there might be multiple subscriptions and the context could be set to a different subscription than the one you upgraded.

Additionally,consider using a free Azure trial as it provides full access to Azure features, allowing you to deploy the LZ accelerator for learning purposes. · Here's how to set up a free trial: https://azure.microsoft.com/en-us/free

If you encounter any future issues, please feel free to contact us, and we will be pleased to assist you further.

If you have found the answer provided to be helpful, please click on the "Accept answer/Upvote" button so that it is useful for other members in the Microsoft Q&A community.

Answer 2

I also had the same problem and was able to solve it by following this article: https://luke.geek.nz/azure/you-don-t-have-authorization-to-perform-action-microsoft.resources-deployments-validate-action/

Key query that I had to use was executing:

New-AzRoleAssignment -Scope '/' -RoleDefinitionName 'Owner' -ObjectId $user.Id

Also do remember to revert it to previous state (also mentioned in the link). Hope it helps people in future.