Deployment for Azure ML EndPoint is failing in Provisioning State

Question

Deployment for Azure ML EndPoint is failing in Provisioning State

Narayana Reddy Vennapusa (INFOSYS LIMITED) 0 Microsoft External Staff

Hi,

I have created an end point in Azure ML Workspace and I have created a deployment but it is failing while provisioning state with incorrect role assignments on resource. I have checked the accesses and all are present. The end point managed Identity is having Storage Blob Data Contributor access on associated storage account which is attached to ML workspace and ArcPull access on the container registry which is associated with the ML workspace but still getting the access error.

User's image

https://learn.microsoft.com/en-us/azure/machine-learning/how-to-troubleshoot-online-endpoints?view=azureml-api-2&tabs=cli#authorization-error

It is showing the above error in ARM error log.

User's image

Can you please check and help me to resolve the error.

Luis Arias 9,486 Reputation points Volunteer Moderator

2026-02-03T22:51:30.59+00:00

Hi Narayana,

Welcome to Microsoft Q&A, You already did more of the checking but just to be sure verify you have contributor(AzureML Data Scientist / AzureML Contributor) access on the ML workspace resource group, reader on Key vault and finally if the Trusted microsoft services is checked on the Networking configuration in the storage account (Asuming you don't have an isolated environment with PE and others.)

Let me know after you did this checks.

Luis
Narayana Reddy Vennapusa (INFOSYS LIMITED) 0 Reputation points Microsoft External Staff

2026-02-03T23:12:19.2933333+00:00

Online deployment log.txt

Hi Luis,

Thankyou for responding. I am having Contributor access and access to key valut. The storage account is associated with Network Security Perimeter but for testing I have enabled the public access and it is still failing.
Luis Arias 9,486 Reputation points Volunteer Moderator

2026-02-05T21:29:09.8266667+00:00
Hi again Narayana, Sorry for the delay can you do this quick check:

check storage‑initializer logs … az ml compute-instance logs --container storage-initializer

verify model name/version/path exists

validate datastore credentials and file presence

re-upload or re-register model if folder is empty

Try to find where is the error log , check the storage account and acr logs (This require diagnostics settings configure).

Let me know.
SRILAKSHMI C 14,140 Reputation points Microsoft External Staff Moderator

2026-02-11T06:39:12.5933333+00:00

Hi Narayana Reddy Vennapusa (INFOSYS LIMITED),

Did you get any chance to review the above response. Do let me know if you have any further queries.

Thank you!

Your answer

Luis Arias 9,486 Reputation points Volunteer Moderator

2026-02-03T22:51:30.59+00:00

Hi Narayana,

Welcome to Microsoft Q&A, You already did more of the checking but just to be sure verify you have contributor(AzureML Data Scientist / AzureML Contributor) access on the ML workspace resource group, reader on Key vault and finally if the Trusted microsoft services is checked on the Networking configuration in the storage account (Asuming you don't have an isolated environment with PE and others.)

Let me know after you did this checks.

Luis
Narayana Reddy Vennapusa (INFOSYS LIMITED) 0 Reputation points Microsoft External Staff

2026-02-03T23:12:19.2933333+00:00

Online deployment log.txt

Hi Luis,

Thankyou for responding. I am having Contributor access and access to key valut. The storage account is associated with Network Security Perimeter but for testing I have enabled the public access and it is still failing.
Luis Arias 9,486 Reputation points Volunteer Moderator

2026-02-05T21:29:09.8266667+00:00

Hi again Narayana, Sorry for the delay can you do this quick check:

check storage‑initializer logs … az ml compute-instance logs --container storage-initializer

verify model name/version/path exists

validate datastore credentials and file presence

re-upload or re-register model if folder is empty

Try to find where is the error log , check the storage account and acr logs (This require diagnostics settings configure).

Let me know.
SRILAKSHMI C 14,140 Reputation points Microsoft External Staff Moderator

2026-02-11T06:39:12.5933333+00:00

Hi Narayana Reddy Vennapusa (INFOSYS LIMITED),

Did you get any chance to review the above response. Do let me know if you have any further queries.

Thank you!

Share via

Deployment for Azure ML EndPoint is failing in Provisioning State

Your answer