Authorization Failure on RG Creation

Question

{

"error": {

"code": "DenyAssignmentAuthorizationFailed",

"message": "The client 'live.com#

Answer 1

Hello Ashokkumar Shanmugasundram,

Thank you for reaching out to the Microsoft Q&A forum.

It looks like you’re facing an authorization failure when trying to create a resource group, indicated by the error message "DenyAssignmentAuthorizationFailed." This likely relates to insufficient permissions due to Role-Based Access Control (RBAC) settings.

Here’s what you can do to troubleshoot this issue:

Check Permissions: Ensure that your account has the necessary permissions at the correct scope. To create a resource group, your account needs to have at least the Owner or Contributor role assigned at the subscription or resource group level. If you only have access at a lower scope, you might see this kind of error.

Assign Required Roles: You may need to ask your administrator to grant you the necessary permissions. Here’s a guideline:

For creating resource groups, you should have the Owner or Contributor role. If you're starting from a lower level like Reader, you will need an upgrade.

Validate Azure Policies: Sometimes, there might be Azure Policies in place that restrict certain actions. Check with your Azure administrator to see if any policies might be blocking your attempts.

Use Azure CLI or PowerShell: If you are still having trouble via the Azure portal, consider trying to create the resource group using Azure CLI or PowerShell, as they might give different error messages that could help narrow down the issue.

Consult Documentation: More detailed troubleshooting steps can be found in the Azure documentation:

Troubleshoot Azure RBAC

Roles and Permissions

Hope this helps you out! Let me know how it goes!

 

Answer 2

The error message indicates that the client has permission to create a resource group, but the action is denied due to a deny assignment. Specifically, the deny assignment states that the subscription is frozen due to inactivity for a year or more. To resolve this issue, you will need to contact Microsoft Support to unfreeze the subscription before you can proceed with creating the resource group.

---

References:

• Troubleshoot Azure RBAC