Azure / azure-blueprints

A library of sample Blueprints that can be easily imported via API or PowerShell
MIT License
258 stars 150 forks source link

Assignment with user-assigned managed identity at management group scope : The request did not have a subscription or a valid tenant level resource provider #69

Closed anotherancientalien closed 2 years ago

anotherancientalien commented 2 years ago

Hi,

I have created a blueprint at management scope. I want to assign blueprint as stated in the document.

But I have this error:

('blueprint_assign_response', u'{"error":{"code":"MissingSubscription","message":"The request did not have a subscription or a valid tenant level resource provider."}}')

managed identity has blueprint operator permission.

Any advice would be appreciated.

alex-frankel commented 2 years ago

Can you share how you are creating the blueprint assignment? You need to provide a specific subscription that you want the blueprint to be applied to. Assigning blueprint at management scope is only for restricting CRUD permissions for the blueprint assignment itself. It still functionally operates like a subscription-scoped blueprint assignment.

anotherancientalien commented 2 years ago

Hi Alex,

You are right. I made some changes based on your comment in my api code and working perfect.

Best Yasemen