When deploying a container image to Azure Container App I get this error

Question

When deploying a container image to Azure Container App I get this error :

The client <PII removed>' with object id '<PII>' does not have authorization to perform action 'Microsoft.App/register/action' over scope '/subscriptions/<PII>' or the scope is invalid. If access was recently granted, please refresh your credentials. (Code: AuthorizationFailed) (Code: AuthorizationFailed)

Answer 1

The error message you are encountering indicates that the user account does not have the necessary permissions to perform the action Microsoft.App/register/action on the specified subscription scope. This typically means that the user needs to be granted additional permissions or roles that allow them to deploy resources in Azure Container Apps.

To resolve this issue, you can take the following steps:

1. Check Role Assignments: Ensure that the user has the appropriate role assigned at the subscription or resource group level. Common roles that may be required include "Contributor" or "Owner".
2. Assign Role: If the user does not have the necessary role, you can assign it through the Azure portal:
   • Navigate to the subscription or resource group in the Azure portal.
   • Go to the "Access control (IAM)" section.
   • Click on "Add role assignment" and select the appropriate role for the user.
3. Refresh Credentials: If access was recently granted, ask the user to refresh their credentials or log out and log back into the Azure portal.

By ensuring the user has the correct permissions, you should be able to resolve the authorization error and successfully deploy the container image to Azure Container Apps.

Answer 2

Hello @Swapnil Mishra It looks like you're running into an authorization issue while deploying your container image to Azure Container Apps. The error message indicates that the client you're using doesn't have permission to perform the required action. Please try below:

1. Check Azure Role Assignments: Ensure that your user account or service principal has the necessary permissions to access the resource. You might need to be assigned a role like Contributor or Owner for the relevant subscription or resource group.
2. Verify Subscription and Resource Group: Make sure that you are operating within the correct subscription and resource group where your Azure Container Apps service is deployed.
3. Refresh Credentials: If access was recently granted, try refreshing your Azure credentials. This can be done by logging out and back in or using the Azure CLI command az login.
4. Use Azure CLI or Portal: Sometimes, using the Azure CLI directly for deployment might provide clearer error messages. Review the command you are using and verify that the parameters are correctly set.
5. Permissions on Container Registry: If you're pulling the image from an Azure Container Registry, make sure your user has permissions to access that registry as well, particularly if it’s a private registry.