can't create VM from shared gallary in another tenant

Question

can't create VM from shared gallary in another tenant

James Zhang 0

Hi,

We have Azure compute galleries in tenant1, and we hared images in this gallery, now we create VM in tenant2 from the image shared in the gallery in tenant1, we got the following error, but it was working before, we are using this guide: https://learn.microsoft.com/en-us/azure/virtual-machines/share-using-app-registration?tabs=cli#code-try-3

(AuthorizationFailed) The client '7afa5fa4-ec90-4f57-ad09-23bbecf8cb0f' with object id '7afa5fa4-ec90-4f57-ad09-23bbecf8cb0f' does not have authorization to perform action 'Microsoft.Compute/galleries/images/versions/read' over scope '/subscriptions/xxxxx-e85313190089/resourceGroups/Stellar/providers/Microsoft.Compute/galleries/xxxx/images/xxxx/versions/1.1.0' or the scope is invalid. If access was recently granted, please refresh your credentials.

Code: AuthorizationFailed

Thanks in advance

Jayden

Markapuram Sudheer Reddy 1,845 Reputation points Microsoft External Staff Moderator

2025-04-16T21:43:20.0933333+00:00

Hi James Zhang,

The error indicates Authorization Failed as try to assign appropriate necessary role to the service principal(client).

Ensure that the gallery is properly shared through RBAC

Could you please confirm how did VM is creating from image,

Your answer

Markapuram Sudheer Reddy 1,845 Reputation points Microsoft External Staff Moderator

2025-04-16T21:43:20.0933333+00:00

Hi James Zhang,

The error indicates Authorization Failed as try to assign appropriate necessary role to the service principal(client).

Ensure that the gallery is properly shared through RBAC

Could you please confirm how did VM is creating from image,

Share via

can't create VM from shared gallary in another tenant

Your answer