Insufficient privileges to complete the operation

Question

Insufficient privileges to complete the operation

Keith Guo 26

az ad sp create-for-rbac --name "azure-devops-spn-for-practitioner" --sdk-auth --role contributor --scopes /subscriptions/6ea073f1-8e88-49fc-b63d-a1e7d1919141
This command or command group has been migrated to Microsoft Graph API. Please carefully review all breaking changes introduced during this migration: https://learn.microsoft.com/cli/azure/microsoft-graph-migration
Option '--sdk-auth' has been deprecated and will be removed in a future release.
Insufficient privileges to complete the operation.

Carlos Solís Salazar 18,196 Reputation points MVP Volunteer Moderator

2022-06-22T18:40:06.583+00:00

Hi @Keith Guo

Are you a Global administrator? What is your user role?

What documentation are you following to perform these actions?

Carlos Solís Salazar

----------

NOTE: To answer you as quickly as possible, please mention me in your reply.
Keith Guo 26 Reputation points

2022-06-23T01:38:37.64+00:00

due to my avanade account was granted as a external guest user activated by outlook subcription, so just put it to the same opertions with my outlook account, and it worked. I just created the service principal faced this privilage issue, thanks so much.

Accepted answer

0 additional answers

Your answer

Carlos Solís Salazar 18,196 Reputation points MVP Volunteer Moderator

2022-06-22T18:40:06.583+00:00

Hi @Keith Guo

Are you a Global administrator? What is your user role?

What documentation are you following to perform these actions?

Carlos Solís Salazar

----------

NOTE: To answer you as quickly as possible, please mention me in your reply.
Keith Guo 26 Reputation points

2022-06-23T01:38:37.64+00:00

due to my avanade account was granted as a external guest user activated by outlook subcription, so just put it to the same opertions with my outlook account, and it worked. I just created the service principal faced this privilage issue, thanks so much.

Answer 1

Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,526 Moderator

Hello @Keith Guo , the error is caused by your account not being assigned Azure AD built-in roles such as Global Administrator, Application Administrator or Cloud Application Administrator or not being assigned Azure RBAC roles, such as User Access Administrator or Owner to the scoped subscription.

Please take a look to Assign a role to a user and Assign Azure roles using the Azure portal to assign the required roles.

Let us know if this answer was helpful to you or if you need additional assistance. If it was helpful, please remember to accept it so that others in the community with similar questions can more easily find a solution.

Keith Guo 26 Reputation points

2022-06-23T01:36:55.15+00:00

yes, you are right, due to my avanade account was granted as a external guest user activated by outlook subcription, so just put it to the same opertions with my outlook account, and it worked, thanks so much.
Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,526 Reputation points Moderator

2022-06-23T04:06:50.423+00:00

Thanks for accepting my answer @Keith Guo . If it's not asking too much, please complete the quality survey so that others in the community with similar questions can more easily find a rated solution.*
Eliot Cole 71 Reputation points

2023-01-20T09:36:43.93+00:00

I can't state this to be true, Alfredo, as using the Graph Explorer (fully sanctioned) or Power Automate HTTP calls, I am unable to perform this even though I am the Global Administrator (and have even added the 'Privileged Role Administrator' role) with it still producing an error of:

Insufficient privileges to complete the operation.

Share via

Insufficient privileges to complete the operation

0 additional answers

Your answer