Enable ACR Tasks

Question

Enable ACR Tasks

SUNIT SAMUDRE 0

Hello Community,

I need ACR Tasks enabled for my subscription to deploy an AI agent application.


LOCATION: East US 2

ERROR: TasksOperationsNotAllowed when running "azd deploy"

FULL ERROR MESSAGE:
"ACR Tasks requests for the registry abc and 
xyz are not permitted."

PURPOSE: 
Deploying Azure AI Agents application using Azure Developer CLI.
Project uses Azure OpenAI GPT-5 Mini and Azure Container Apps.
ACR Tasks required for automated container image builds.

REQUEST:
how to enable ACR Tasks for this subscription and registry.

Thank you.

Jerald Felix 9,840 Reputation points

2025-10-22T03:24:12.0033333+00:00
Hello SUNIT SAMUDRE,

So that error is telling you ACR Tasks aren't enabled for your registries. Good news is this is usually just a permissions or configuration thing you can fix yourself - you don't necessarily need Microsoft to flip a switch.

Here's what to check:

Your ACR SKU - ACR Tasks only work on Standard and Premium tiers, not Basic. Run this to check:
az acr show --name abc --resource-group xyz --query sku.name
If it says "Basic", you'll need to upgrade to Standard or Premium

Permissions - Make sure you have the right role assignments:

You need at least AcrPush role on the registry

The service principal or managed identity you're using needs Contributor or AcrDelete + AcrPush

Check if Tasks are actually disabled - Sometimes registries have Tasks blocked by policy. Try running a simple task manually first to test:
az acr build --registry abc --image test:v1 .

If it's truly a subscription-level restriction:

This can happen if:

Your subscription type doesn't support ACR Tasks (rare, but some education/trial subs have limits)

There's an Azure Policy blocking it

Regional capacity issues in East US 2

Quick workaround while you figure it out:

Instead of using azd deploy which tries to use ACR Tasks, you could:

Build your container locally

Push it to ACR manually

Deploy the pre-built image

Something like:

docker build -t abc.azurecr.io/myapp:latest . az acr login --name abc docker push abc.azurecr.io/myapp:latest

If none of that works:

Then yeah, you might need to open a support ticket. But try the SKU upgrade first - that's the most common cause of this error.

Let me know what your ACR SKU shows and we can narrow it down!

Best Regards,

Jerald Felix
Himanshu Shekhar 1,780 Reputation points Microsoft External Staff Moderator

2025-10-28T03:44:54.99+00:00

SUNIT SAMUDRE,

Kindly let us know if the suggested steps helps or you need further assistance on this issue.

Sent you a private message requesting some details related to your subscription to ensure your privacy is protected. Please check your messages and let me know if you have any questions

1 answer

Your answer

Jerald Felix 9,840 Reputation points

2025-10-22T03:24:12.0033333+00:00

Hello SUNIT SAMUDRE,

So that error is telling you ACR Tasks aren't enabled for your registries. Good news is this is usually just a permissions or configuration thing you can fix yourself - you don't necessarily need Microsoft to flip a switch.

Here's what to check:

Your ACR SKU - ACR Tasks only work on Standard and Premium tiers, not Basic. Run this to check:
az acr show --name abc --resource-group xyz --query sku.name
If it says "Basic", you'll need to upgrade to Standard or Premium

Permissions - Make sure you have the right role assignments:

You need at least AcrPush role on the registry

The service principal or managed identity you're using needs Contributor or AcrDelete + AcrPush

Check if Tasks are actually disabled - Sometimes registries have Tasks blocked by policy. Try running a simple task manually first to test:
az acr build --registry abc --image test:v1 .

If it's truly a subscription-level restriction:

This can happen if:

Your subscription type doesn't support ACR Tasks (rare, but some education/trial subs have limits)

There's an Azure Policy blocking it

Regional capacity issues in East US 2

Quick workaround while you figure it out:

Instead of using azd deploy which tries to use ACR Tasks, you could:

Build your container locally

Push it to ACR manually

Deploy the pre-built image

Something like:

docker build -t abc.azurecr.io/myapp:latest . az acr login --name abc docker push abc.azurecr.io/myapp:latest

If none of that works:

Then yeah, you might need to open a support ticket. But try the SKU upgrade first - that's the most common cause of this error.

Let me know what your ACR SKU shows and we can narrow it down!

Best Regards,

Jerald Felix
Himanshu Shekhar 1,780 Reputation points Microsoft External Staff Moderator

2025-10-28T03:44:54.99+00:00

SUNIT SAMUDRE,

Kindly let us know if the suggested steps helps or you need further assistance on this issue.

Sent you a private message requesting some details related to your subscription to ensure your privacy is protected. Please check your messages and let me know if you have any questions

Answer 1

Hello @SUNIT SAMUDRE

ACR will be temporarily pausing ACR Tasks runs from subscriptions that are using Azure trial credits.

please check public documentation and let us know if that helps here:

https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-overview

Please check for subscription type :

 az account show

You may need to Upgrade to Pay-As-You-Go

Sign in to the Azure Portal > Navigate to Subscriptions > Select your current subscription

Click Upgrade or Change offer > Select Pay-As-You-Go

Here Upgrading will not affect existing resources or data and you will only be charged for usage used beyond the free tier limits.

For Nonprofit Azure Sponsorship ($2,000 USD annual grant available) : https://learn.microsoft.com/en-us/industry/nonprofit/microsoft-for-nonprofits/claim-activate-nonprofit-azure-grant and non-profit FAQ :https://www.microsoft.com/en-us/nonprofits/faq

Additionally, you can check here below :

az account show --query "{Name:name, SubscriptionId:id, State:state}"

Check for ACR SKU: (Azure Container Registry service tiers-https://learn.microsoft.com/en-us/azure/container-registry/container-registry-skus )

az acr show --name <your created registryname> --resource-group <yourresorcegroupname> --query sku.name

If it is under SKU Basic it needs to be upgraded either to Standard or Premium using:

az acr update --name <yourregistryname> --sku Standard

At least please see if the AcrPush role should be assigned. Additionally, the service principal or managed identity you are using should have either the Contributor or both AcrDelete and AcrPush roles.

please refer the documentation : Azure Container Registry Entra permissions and role assignments overview https://learn.microsoft.com/en-us/azure/container-registry/container-registry-rbac-built-in-roles-directory-reference?tabs=registries-configured-with-rbac-registry-abac-repository-permissions

Authenticate with an Azure container registry : https://learn.microsoft.com/en-us/azure/container-registry/container-registry-authentication?tabs=azure-cli

Kindly let us know if the suggested steps helps or you need further assistance on this issue. Additionally reached for few details via private messages

Regards

Himanshu

Share via

Enable ACR Tasks

1 answer

Your answer