How to fix error: Failed to get resource ID for resource type 'Microsoft.Web/Sites' and resource name?

Question

I'm getting the following error:

##[error]Error: Failed to get resource ID for resource type 'Microsoft.Web/Sites' and resource name 'tailspin-space-game-web-dev-25097'. Error: The client 'e795ad1c-bc56-4dbd-9ed6-5846d70f65b3' with object id 'e795ad1c-bc56-4dbd-9ed6-5846d70f65b3' does not have authorization to perform action 'Microsoft.Resources/subscriptions/resources/read' over scope '/subscriptions/0319be96-78c5-493b-b557-3eb85b789a38' or the scope is invalid. If access was recently granted, please refresh your credentials. (CODE: 403)

when trying to go through this exercise and run the build to deploy to dev.

I already have the following role assignments but the issue is persisting.

Answer 1

Hello Alexandra T,

I am glad you resolved the issue.

Due to the Community policy of users being unable to accept their own answers , I will be reposting your answer so you can accept and it will be visible to other community users.

ISSUE:

##[error]Error: Failed to get resource ID for resource type 'Microsoft.Web/Sites' and resource name 'tailspin-space-game-web-dev-25097'. Error: The client 'e795ad1c-bc56-4dbd-9ed6-5846d70f65b3' with object id 'e795ad1c-bc56-4dbd-9ed6-5846d70f65b3' does not have authorization to perform action 'Microsoft.Resources/subscriptions/resources/read' over scope '/subscriptions/0319be96-78c5-493b-b557-3eb85b789a38' or the scope is invalid. If access was recently granted, please refresh your credentials. (CODE: 403)

ANSWER:

Alexandra T answered:

"After trying multiple solutions, I managed to make it work by following the first answer from here"

You can mark it 'Accept Answer' and 'Upvote' if this helped you

Regards,

Abiola

Answer 2

After trying multiple solutions, I managed to make it work by following the first answer from here

Answer 3

Hello Alexandra T,

Thanks for your question.

This typically means that the service principal or managed identity running the deployment does not have sufficient permissions to access the resource.

Try the command below to list the roles assigned. You need tat least the Contributor role at the subscription/RG scope

az role assignment list --assignee e795ad1c-bc56-4dbd-9ed6-5846d70f65b3

If the above does not have the assigned role, then assign.

az role assignment create --assignee e795ad1c-bc56-4dbd-9ed6-5846d70f65b3 --role Contributor --scope /subscriptions/0319be96-78c5-493b-b557-3eb85b789a38

See: https://learn.microsoft.com/en-us/cli/azure/role/assignment?view=azure-cli-latest#az-role-assignment-list

You can mark it 'Accept Answer' and 'Upvote' if this helped you

Regards,

Abiola