Azure Templates - Failed to save template

Bhargav Patel 26

Hi all,

I am struggling to save my first Azure Template.
I am trying to add new template from Home > Templates > Add template.
I filled out Name, Description and copied valid JSON template. When I press OK, I get following error message.

Failed to save template.
The client 'live.com#XYZ@Karima ben .com' with object id 'abcd1234-1234-XXXX-b7db-5245401e1234' does not have authorization to perform action 'Microsoft.Gallery/register/action' over scope '/providers/Microsoft.Gallery' or the scope is invalid. If access was recently granted, please refresh your credentials.

I have PAYG Subscription and I am logged in as a Global Administrator. I have also allowed my user an elevated permissions through the Active Directory > Properties > Access management for Azure resources = Yes.

Now, I do not know what is missing, can anyone suggest a solution?

Thanks.
Bhargav

SadiqhAhmed-MSFT 46,036 Reputation points Microsoft Employee

2021-07-27T10:06:45.543+00:00

@Bhargav Patel Thank you for contacting us!

Could you please provide more context about your use case?

What is the Azure service for which you are trying to save the template for?

What is your scenario requirement?
Bhargav Patel 26 Reputation points

2021-07-28T02:13:21.797+00:00

Hi Sadiqh,

I am learning about the Azure products and I don't have any production workload. I have created PAYG subscription and have logged in using same account, which is a Global Administrator and have elevated my privilege as mentioned above.

I have created attached gif to explain. Let me know if that helps.
The same error happens if I try to create template from any existing resource (e.g. Go to VM > Automate > Export Template > Add to Library (preview) > save template. So this happens for any scenario I try to upload template for.

Thanks in Advance.
SadiqhAhmed-MSFT 46,036 Reputation points Microsoft Employee

2021-07-28T10:44:21.083+00:00

@Bhargav Patel - Could you please verify and confirm you are the owner of PAYG subscription. Because the Global administrator is a directory level privilege not a subscription level permission.
Bhargav Patel 26 Reputation points

2021-07-28T11:33:17.217+00:00

Hi Sadiqh,
I believe so, this is what I see under subscription > my permissions. What am I missing?
kjoaz104 1 Reputation point

2021-08-07T19:11:29.41+00:00

Hello Everybody,

I am facing the same exact issue on a free subscription.

When creating a new ARM template either by adding a new resource or directly from a resource group i get the error message

The client xxxxx with object id xxxxx does not have authorization to perform action 'Microsoft.Gallery/register/action' over scope '/providers/Microsoft.Gallery' or the scope is invalid. If access was recently granted, please refresh your credentials

My account is owner of the subscription and i have taken the actions depicted in elevate-access-global-admin for good measure, with no success.

II also tried creating a new user in AzureAD, assign the global admin role in AD level and also the owner role in subscription level with, still, no luck.

I am starting to think that maybe the "scope is invalid part" of the error message is more relevant, but i am at a loss on how to troubleshoot this scenario.

Has there been any development with your case? I see that you haven't upvoted the one answer by Ahmed. Thank you.
Bhargav Patel 26 Reputation points

2021-08-08T08:03:54.077+00:00

No, I have not upvoted the answer as it hasn't helped.
PJ 1 Reputation point

2021-08-13T06:15:56.017+00:00

I am having the exact same issue on a fresh account - have templates stopped working altogether @SadiqhAhmed-MSFT ?
Kiran Joshi 1 Reputation point

2021-08-16T09:45:38.553+00:00

I'm also having exact same issue, not able to save templates. Lets' hope we get solution for this.

2 answers

Bhargav Patel 26 Reputation points

2021-08-16T06:26:13.847+00:00
I reached out to Microsoft support as @SadiqhAhmed-MSFT mentioned and I got below response.

I have checked it and it works on my machine/account :) .

As per Microsoft there are the 2 mitigations provided by the production team:

Use “template spec” feature instead of “template” feature. The old “template” feature related to gallery is deprecated and will be removed from portal soon. Please check https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/template-spec-convert for details.

Let the tenant admin create the first gallery template to turn on the ability to create templates for all users under the same tenant.

I tried Template Spec and it works for me, The creation steps is basically the same as “template” feature.

Go to “template spec” in portal

Select “Create template spec”

Fill in the form and create (note that templates with the same name will be overridden by the latest version)

Hope this answer helps others too.
Please sign in to rate this answer.

2 people found this answer helpful.
SadiqhAhmed-MSFT 46,036 Reputation points Microsoft Employee

2021-08-16T06:40:08.153+00:00

@Bhargav Patel Glad to know the issue is resolved now. Thanks for sharing the solution with the community.

Kiran Joshi 1 Reputation point

2021-08-16T11:11:24.96+00:00

Hi Bhargav, thank you for posting solution. I tried using 'Template Spec' with bicep template (which also has parameters in it's json code) to deploy VM & it worked so far.

jpk 1 Reputation point

2021-08-16T16:51:58.743+00:00

It works now! Thanks @SadiqhAhmed-MSFT for the workaround and @Bhargav Patel for sharing it here.

Cheers!
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
SadiqhAhmed-MSFT 46,036 Reputation points Microsoft Employee

2021-07-29T14:49:09.933+00:00

@Bhargav Patel You must have permission to do the /register/action operation for the resource provider. The permission is included in the Contributor and Owner roles. Ref doc: https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/resource-providers-and-types#register-resource-provider

If you are the Global Administrator of the AAD tenant you can use the steps documented here elevate-access-global-admin to regain access to the subscription. You should then be able to perform to operation to save ARM template.

---------------------------------------------------------------------------------------------------------------

If the response helped, do "Accept Answer" and up-vote it.
Please sign in to rate this answer.
Bhargav Patel 26 Reputation points

2021-08-08T08:06:19.833+00:00

Hi @SadiqhAhmed-MSFT , I have followed the steps to register resource provider by it hasn't helped. My account is already global administrator with elevated access, as mentioned earlier, so I removed the access and granted it again with no luck.

SadiqhAhmed-MSFT 46,036 Reputation points Microsoft Employee

2021-08-09T08:26:49.437+00:00

@Bhargav Patel I recommend you reach out to Azure technical support team for further assistance with this issue.

jpk 1 Reputation point

2021-08-11T08:06:44.617+00:00

@Bhargav Patel , Any luck with this? I am running into the exact same issue and MS wants me to pay to raise a support ticket. In fact, it doesn't even have the ARM service listed in the service list for the ticket.

Bhargav Patel 26 Reputation points

2021-08-12T04:41:31.82+00:00

No, but I will raise request soon as Sadiqh said. Sorry I have been away.

HHinparadise 6 Reputation points

2021-08-12T16:26:45.783+00:00

Having the same issue and I am a subscription owner.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Azure Templates - Failed to save template

2 answers

Your answer