Azure Fundamentals Training

Philip M. Buckalew 1 Reputation point
2019-12-10T18:16:14.85+00:00

I am currently in the step 4 of section 2 where you build a VM using the WordPress example. After following the steps, I am receiving the following error message:

"Resource 'ServicePlane8f85340-a5b8' was disallowed by policy..."

The raw message is as follows:

The client 'live.com#philip.xxxxxxx@Stuff .com' with object id 'fc38e633-a40b-4e80-b4aa-f5e17592d52d' does not have authorization to perform action 'Microsoft.Authorization/policyAssignments/read' over scope '/providers/Microsoft.Management/managementGroups/triplecrown2/providers/Microsoft.Authorization/policyAssignments/7bb64c0aa90247de8b4491c3' or the scope is invalid. If access was recently granted, please refresh your credentials. (Code: AuthorizationFailed)

I have tried several time making sure I did not miss something. Shouldn't I have the proper credentials in place to do certification training by default? Can't get beyond this issue.

Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
6,787 questions
{count} votes

16 answers

Sort by: Most helpful
  1. Vaibhav Chaudhari 38,556 Reputation points
    2019-12-11T06:20:17.5+00:00

    I have faced the authorization issues too while learning on Microsoft Learn.

    Sometimes log out and log in to the portal used to work, else I used to move on to the next lesson and try the pending hands on Module later by activating sandbox newly.

    1 person found this answer helpful.
    0 comments No comments

  2. Armand Brunelle 491 Reputation points
    2019-12-11T08:41:54.733+00:00

    Hi there @Philip M. Buckalew

    You can also go into group management, or management policies,

    Grand the user you want to use a special role or approved for futur actions.

    I had to grant even myself a permission from my own administration center.

    0 comments No comments

  3. Armand Brunelle 491 Reputation points
    2019-12-11T08:43:52.313+00:00

    Set it up in Microsoft Azure, i can't remember where exatly sorry about that,

    But this was at the very beginning. For mostly every job that you want to run, you have to have group policies and security, level acces, Admin acces etc. that you do by yourself since you the creator of the scene

    You will find it, i might try to see for you , brb in 2 min

    0 comments No comments

  4. Armand Brunelle 491 Reputation points
    2019-12-11T08:48:06.167+00:00

    @Philip M. Buckalew Here is where you need to look for i think this is the right place.

    All services
    Management groups
    Access control (IAM)

    You can add different roles, if i was you, i would set myself as a admin, then you have less limitations.

    0 comments No comments

  5. ajkuma 22,001 Reputation points Microsoft Employee
    2020-01-07T11:05:46.007+00:00

    @Philip M. Buckalew , Adding to the suggestions posted above & checking in to see if the above post helped answer your question. Kindly let us know if you have any further questions on this specific topic, we would be more than happy to assist you.
    Please do mark the post which was helpful by clicking on ‘Accept Answer’ & ‘Up-Vote’ to help the community find the right answers.

    You may also receive the errors for one of these reasons:

    • The required resource provider hasn't been registered for your subscription
    • API version not supported for the resource type
    • Location not supported for the resource type
    • For auto-shutdown of VMs, the Microsoft.DevTestLab resource provider must be registered.
    • Azure Policy scoped settings.

    Register the resource provider of the type you're trying to deploy and also review the Azure Policy for any restrictions.

    0 comments No comments