Closed aohanhongzhi closed 1 month ago
@chlowell do we have an e2e example for this?
Judging by the error message, it appears what's missing here is assigning a role to the service principal allowing it to add resources to the resource group, such as the built-in "Contributor" role. We have this document describing RBAC (Role Based Access Control) for SDK users. It's based on the Microsoft Learn's RBAC overview and role assignment guide.
@aohanhongzhi can you please try adding a role assignment for your service principal? "Contributor" scoped to the resource group should suffice.
Hi @aohanhongzhi. Thank you for opening this issue and giving us the opportunity to assist. To help our team better understand your issue and the details of your scenario please provide a response to the question asked above or the information requested above. This will help us more accurately address your issue.
Judging by the error message, it appears what's missing here is assigning a role to the service principal allowing it to add resources to the resource group, such as the built-in "Contributor" role. We have this document describing RBAC (Role Based Access Control) for SDK users. It's based on the Microsoft Learn's RBAC overview and role assignment guide.
@aohanhongzhi can you please try adding a role assignment for your service principal? "Contributor" scoped to the resource group should suffice.
thanks for your reply , I want to update networkSecurityGroups
, But I didn't find any role which have the 'Microsoft.Network/networkSecurityGroups/write'
permission. so could you tell me which role have the permission.
all role(only 35) here:
Is there any permission that hasn't been granted to me?
The "Contributor" role I mentioned above is a "privileged administrator role" listed separately:
The less privileged Network Contributor role should do as well, it has Microsoft.Network/* permissions.
If you can't find appropriate built-in roles, you can define a custom role.
Hi @aohanhongzhi. Thank you for opening this issue and giving us the opportunity to assist. We believe that this has been addressed. If you feel that further discussion is needed, please add a comment with the text "/unresolve" to remove the "issue-addressed" label and continue the conversation.
Hi @aohanhongzhi, since you haven’t asked that we /unresolve
the issue, we’ll close this out. If you believe further discussion is needed, please add a comment /unresolve
to reopen the issue.
Service Package Request
https://github.com/Azure-Samples/azure-sdk-for-go-samples.git
https://github.com/Azure-Samples/azure-sdk-for-go-samples/tree/main/sdk/resourcemanager/network/securitygroups
I have create a App registrations but I don't know how connect it to my vm resource