Authorization error while stopping a self-hosted IR - despite having Data Factory Contributor role

Question

I have configured an ADF, and deployed a self-hosted IR in it. The ADF has Data Factory Contributor (and contributor) roles assigned to itself in the IAM configuration.
I have configured a web-activity pipeline and use the REST API to stop the self-hosted IR within it.

However the ADF is getting the "does not have authorization to perform action 'Microsoft.DataFactory/factories/integrationRuntimes/stop/action'" error when trying to execute this pipeline, despite the IAM role assigned to it. What am I doing wrong?

I use the following REST call, with Managed Identity:
POST https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.DataFactory/factories/{factoryName}/integrationRuntimes/{integrationRuntimeName}/stop?api-version=2018-06-01

The getStatus REST call succeeds and so do many of the others.

Thanks for your guidance.

Answer 1

Hello @AzureLearnChstr ,

Thanks for the question and using MS Q&A platform.

I had been testing it at my end - with any of the below method I was not able to stop the self hosted ir :

• powershell commandlet,
• using management REST API
• Azure Portal

The limitation is just not to the rest api. You could confirm the same at your end and pls let me know if my findings are incorrect.

I was able to start and stop only the SSIS IR and not the self hosted IR or the Azure IR.

Upon researching further, the way to stop the self-hosted IR is to stop the VM or Service inside the VM.

Hope this will help. Please let us know if any further queries.

------------------------------

• Please don't forget to click on or upvote button whenever the information provided helps you. Original posters help the community find answers faster by identifying the correct answer. Here is how