Share via

cannot run kubernetes in learn sandbox subscriptions

Abiona 0 Reputation points
2024-07-26T04:20:50.4+00:00

Your organization has a policy that doesn't allow you to create a cluster in this subscription.

(AuthorizationFailed) The client 'live.com#saksabi@yahoo.com' with object id 'bfe12883-437d-4243-8127-c39ca7a259e6' does not have authorization to perform action 'Microsoft.PolicyInsights/register/action' over scope '/subscriptions/f1f238e7-bfca-4e49-a77a-07cc9eb0560d' or the scope is invalid. If access was recently granted, please refresh your credentials.

This question is related to the following Learning Module

Azure Training
Azure Training
Azure: A cloud computing platform and infrastructure for building, deploying and managing applications and services through a worldwide network of Microsoft-managed datacenters.Training: Instruction to develop new skills.
1,312 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. SiddeshTN 3,520 Reputation points Microsoft Vendor
    2024-07-26T09:56:44.47+00:00

    Hi Abiona,

    Thank you for reaching out to us on Microsoft Q&A forum. 

    The error you're encountering suggests that your account does not have the necessary permissions to create an AKS cluster within the Learn sandbox subscription due to organizational policies.

    Here are a few steps you can take to troubleshoot and resolve this issue:

    1.Confirm that you're using the correct Azure subscription.
    2. Verify that you have the required permissions, usually "Owner" or "Contributor," to create resources.
    3.To refresh your credentials, log out of the Azure portal and then log back in.
    4.If you're using an organizational account, there might be policies in place that limit your ability to create resources. Reach out to your Azure administrator to learn about any restrictions that could be affecting your subscription.
    5.If the sandbox environment proves to be too restrictive, consider using an alternative Azure subscription. You can sign up for a free Azure account by visiting the https://azure.microsoft.com/en-us/free/.
    6.Please reach out to your Azure administrator to request the appropriate role assignments needed to perform actions such as 'Microsoft.PolicyInsights/register/action'.

    If you're still encountering the issue, try checking this link, it might help resolve the problem:

    Troubleshoot the Linked Authorization Failed error code: https://learn.microsoft.com/en-us/troubleshoot/azure/azure-kubernetes/create-upgrade-delete/error-code-linkedauthorizationfailed#symptoms

    If you are still facing issues, I recommend reviewing similar threads for potential solutions as they might be helpful:
    1.https://learn.microsoft.com/en-us/answers/questions/1528579/failed-to-register-the-assignments-scopes-to-micro
    2.https://learn.microsoft.com/en-us/answers/questions/1281628/how-to-fix-authorization-error-for-aks

    If you continue to face issues, please let us know in the comments. We are here to help.

    If you find this information helpful, please acknowledge by clicking the "Accept answer" & "Upvote" buttons on the post.

    0 comments