An error occurred in Delegate resource management

asked 2020-05-22T07:28:47.277+00:00
Anonymous

I want to realize "Monitor Azure AD B2C with Azure Monitor". So, I followed the documentation and ran the command. [azure-monitor][1] As a result, an error has occurred. I'm looking for a solution. 1.Connect-AzAccount -tenant xxxx.onmicrosoft.com 2.Select-AzSubscription <subscription ID> 3.New-AzDeployment -Name "AzureADB2C" -Location "japanwest" -TemplateFile "C:\work\rgDelegatedResourceManagement.json" -TemplateParameterFile "C:\work\rgDelegatedResourceManagement.parameters.json" -Verbose 4.I got an error message. PS C:\WINDOWS\system32> New-AzDeployment -Name "AzureADB2C" >> -Location "japanwest" >> -TemplateFile "C:\work\rgDelegatedResourceManagement.json" >> -TemplateParameterFile "C:\work\rgDelegatedResourceManagement.parameters.json" >> -Verbose >> WARNING: Breaking changes in the cmdlet 'New-AzDeployment' : WARNING: - The cmdlet 'New-AzSubscriptionDeployment' is replacing this cmdlet. WARNING: NOTE : Go to https://aka.ms/azps-changewarnings for steps to suppress this breaking change warning, and other information on breaking changes in Azure PowerShell. VERBOSE: 16:00:43 - Template is valid. VERBOSE: 16:00:44 - Create template deployment 'AzureADB2C' VERBOSE: 16:00:44 - Checking deployment status in 5 seconds VERBOSE: 16:00:49 - Checking deployment status in 5 seconds VERBOSE: 16:00:54 - Resource Microsoft.ManagedServices/registrationDefinitions '27108163-xxxx-xxxx-xxxx-xxxxxxxxxxxx' provisioning status is running VERBOSE: 16:00:54 - Checking deployment status in 11 seconds VERBOSE: 16:01:05 - Checking deployment status in 5 seconds VERBOSE: 16:01:10 - Resource Microsoft.Resources/deployments 'rgAssignment' provisioning status is running New-AzDeployment : 16:01:10 - Resource Microsoft.ManagedServices/registrationAssignments '8d0b7ad5-xxxx-xxxx-xxxx-xxxxxxxxxxxx' failed with message '{ "error": { "code": "RegistrationAssignmentInvalidUpdate", "message": "Registration assignment '8d0b7ad5-xxxx-xxxx-xxxx-xxxxxxxxxxxx' not allowed to update registration definition reference." } }' At line:1 char:1 + New-AzDeployment -Name "AzureADB2C" + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [New-AzDeployment], Exception + FullyQualifiedErrorId : Microsoft.Azure.Commands.ResourceManager.Cmdlets.Implementation.NewAzureDeploymentCmdlet New-AzDeployment : 16:01:10 - Template output evaluation skipped: at least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details. At line:1 char:1 + New-AzDeployment -Name "AzureADB2C" + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [New-AzDeployment], Exception + FullyQualifiedErrorId : Microsoft.Azure.Commands.ResourceManager.Cmdlets.Implementation.NewAzureDeploymentCmdlet New-AzDeployment : 16:01:10 - Template output evaluation skipped: at least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details. At line:1 char:1 + New-AzDeployment -Name "AzureADB2C" + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [New-AzDeployment], Exception + FullyQualifiedErrorId : Microsoft.Azure.Commands.ResourceManager.Cmdlets.Implementation.NewAzureDeploymentCmdlet VERBOSE: 16:01:10 - Resource Microsoft.ManagedServices/registrationDefinitions '27108163-xxxx-xxxx-xxxx-xxxxxxxxxxxx' provisioning status is succeeded VERBOSE: 16:01:10 - Checking deployment status in 5 seconds New-AzDeployment : 16:01:16 - Resource Microsoft.Resources/deployments 'rgAssignment' failed with message '{ "status": "Failed", "error": { "code": "ResourceDeploymentFailure", "message": "The resource operation completed with terminal provisioning state 'Failed'.", "details": [ { "code": "DeploymentFailed", "message": "At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details.", "details": [ { "code": "BadRequest", "message": "{\r\n \"error\": {\r\n \"code\": \"RegistrationAssignmentInvalidUpdate\",\r\n \"message\": \"Registration assignment '8d0b7ad5-xxxx-xxxx-xxxx-xxxxxxxxxxxx' not allowed to update registration definition reference.\"\r\n }\r\n}" } ] } ] } }' At line:1 char:1 + New-AzDeployment -Name "AzureADB2C" + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [New-AzDeployment], Exception + FullyQualifiedErrorId : Microsoft.Azure.Commands.ResourceManager.Cmdlets.Implementation.NewAzureDeploymentCmdlet New-AzDeployment : 16:01:16 - At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details. At line:1 char:1 + New-AzDeployment -Name "AzureADB2C" + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [New-AzDeployment], Exception + FullyQualifiedErrorId : Microsoft.Azure.Commands.ResourceManager.Cmdlets.Implementation.NewAzureDeploymentCmdlet New-AzDeployment : 16:01:16 - Template output evaluation skipped: at least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details. At line:1 char:1 + New-AzDeployment -Name "AzureADB2C" + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [New-AzDeployment], Exception + FullyQualifiedErrorId : Microsoft.Azure.Commands.ResourceManager.Cmdlets.Implementation.NewAzureDeploymentCmdlet New-AzDeployment : 16:01:16 - Template output evaluation skipped: at least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details. At line:1 char:1 + New-AzDeployment -Name "AzureADB2C" ` + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [New-AzDeployment], Exception + FullyQualifiedErrorId : Microsoft.Azure.Commands.ResourceManager.Cmdlets.Implementation.NewAzureDeploymentCmdlet DeploymentName : AzureADB2C Location : japanwest ProvisioningState : Failed Timestamp : 2020/05/22 7:01:13 Mode : Incremental TemplateLink : Parameters : Name Type Value ===================== ========================= ========== mspOfferName String Azure AD B2C Managed Services mspOfferDescription String Enables Azure Monitor in Azure AD B2C managedByTenantId String xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx authorizations Array [ { "principalId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx", "roleDefinitionId": "b24988ac-6180-42a0-ab88-20f7382dd24c", "principalIdDisplayName": "Azure AD B2C tenant administrator" } ] rgName String rg-xxx Outputs : DeploymentDebugLogLevel : [8537-rgdelegatedresourcemanagementjson.txt][2] [8538-rgdelegatedresourcemanagementparametersjson.txt][3] [1]: https://learn.microsoft.com/en-us/azure/active-directory-b2c/azure-monitor#deploy-the-azure-resource-manager-templates [2]: /api/attachments/8537-rgdelegatedresourcemanagementjson.txt?platform=QnA [3]: /api/attachments/8538-rgdelegatedresourcemanagementparametersjson.txt?platform=QnA

Azure Active Directory External Identities
No comments
{count} votes

1 answer

Sort by: Most helpful
  1. answered 2020-05-22T14:38:34.89+00:00
    AmanpreetSingh-MSFT 55,186 Reputation points

    Hi anonymous user-7828,

    As per the error: At least one resource deployment operation failed. Please view deployment history and fix the error that you see in operation details as mentioned here: https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/deployment-history?tabs=azure-portal.

    -----------------------------------------------------------------------------------------------------------

    Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.