How can I gain Microsoft.Authorization/roleAssignments/write permission to storage account that I created

Question

I'm trying to enable auditing on an SQL server but I don't have the Microsoft.Authorization/roleAssignments/write permission on the storage account to do it. I created the storage account myself, but I only have the Contributor role for it. Is there some way that I could get this permission?

Answer 1

@Sorin Silaghi Adding more information to the above response! Let me firstly explain, How RBAC works and permission are assigned, Please refer to this thread
What is Azure role-based access control (Azure RBAC)?

Steps to assign an Azure role: https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments-steps

Please let us know if you have any further queries**. I’m happy to assist you further.**

----------

Please do not forget to and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

Answer 2

If you have just contributor rights, you can't assign permissions.
Try asking your admin/organisation for owner permissions either on the storage account or on a higher level

Answer 3

Check that you're currently signed in with a user that is assigned a role that has the Microsoft.Authorization/roleAssignments/write permission such as Role Based Access Control Administrator at the scope you're trying to assign the role Or Assign Owner role, However, this is not a best practice as security principals