Unable to upload a new project to the locker when using EntraID

Question

CycleCloud is up to date with the version 8.8.1.  

Other commands on cyclecloud-cli works as expected, except the upload project that shows this error: > cyclecloud project upload sweden-sub-storage **** Error: Unexpected command failure: [WinError 5] Access is denied

This does not happen when EntraID is disabled.

Answer 1

Hello Mario Vicente Quinto (Ascendion Inc) ,

The error WinError 5: Access is denied usually points to a local permission or authentication mismatch when Entra ID is enabled.

Recommended steps:

1. Run CLI as Administrator and ensure your project folder is accessible.
2. Check the locker’s authentication mode:
   • If using Managed Identity, confirm the identity has Storage Blob Data Contributor on the storage account.
     • If using Shared Access Key, verify key access is allowed.
     1. Re-authenticate the CLI with Entra ID and confirm your config matches the locker settings.

If it still fails, run:

cyclecloud --loglevel=DEBUG project upload sweden-sub-storage

and share the output for deeper analysis.

The Entra ID authentication looks fine—the CLI successfully retrieves tokens and locker credentials. The failure occurs when CycleCloud tries to launch AzCopy via subprocess.call, and Windows returns WinError 5: Access is denied. This is a local execution issue, not an Entra ID token problem.

How to fix:

1. Install AzCopy v10 and ensure it’s executable:
   • Download from https://aka.ms/downloadazcopy-v10-windows.
     • Add the folder to your PATH or configure CycleCloud to point to the correct azcopy.exe.
       • Verify with: azcopy --version

• Run CLI as Administrator (elevated PowerShell or CMD) to avoid UAC restrictions.

1. Confirm the locker’s authentication mode:
   • If using Managed Identity, ensure the identity has Storage Blob Data Contributor on the storage account.
     • If using Shared Access Key, verify key access is allowed.

After installing AzCopy and running elevated, retry:

cyclecloud project upload Sweden-sub-storage

For your reference:

Copy or move data to Azure Storage by using AzCopy v10 | Microsoft Learn

Storage - Blobs and Lockers - Azure CycleCloud | Microsoft Learn

Using Managed Identities - Azure CycleCloud | Microsoft Learn