Verification Failed when trying to deploy custom Sentinel template on Azure

Question

Hello,
I am having an issue deploying my custom Sentinel template in which I can't get validated because I don't have the write permissions for 'microsoft.aadiam/diagnosticSettings/write' at scope '/providers/microsoft.aadiam/diagnosticSettings/SECURITY-Monitoring-aadDiagnosticSetttings'

'SECURITY-Monitoring' is my resource group name and workspace name and that's the scope it's in.

I have given myself the roles that should give me write access to finish deploying and registered the appropriate resource providers and still can't get to verify my deployment.

I've attached screenshots showing my resources and roles I assigned to myself. All assigned roles were assigned to my one and only subscription.

I am not sure what to do and only now speculate that since I am using a school account to do this and on their directory, I am limited on the privilege I can assign myself but I feel like it shouldn't conflict since it's my own subscription on that account and I am the owner of it.

Hope to hear back from anyone who has any ideas or has had this issue in the past.

Thank you!

Answer 1

You clearly have sufficient credentials but the error might be misleading. If this is for a class assignment, please check with your faculty. There may be a restriction or spending limit on your subscription preventing this activation. Sentinel can quickly burn though training credits. You might consider using free data sources like Azure Activity logs.