search

Azure / enterprise-azure-policy-as-code

Enterprise-ready Azure Policy-as-Code (PaC) solution (includes Az DevOps pipeline)
https://azure.github.io/enterprise-azure-policy-as-code/
MIT License
410 stars 216 forks source link

Existing ADO pipeline breaks due to authorization error at the plan stage #621

Closed jennybeate closed 3 months ago

jennybeate commented 4 months ago

I have been using the same service principal for several months without problem. Last time it ran successfully was april 18th. It has the custom EPAC Resource policy resource role and it has not been any changes made to its access at the root, which I have validated. Now, at the plan-stage, I am getting this error:

_The client 'xx' with object id 'yy' does not have authorization to perform action 'Microsoft.Management/register/action' over scope '/_subscriptions/zzz or the scope is invalid. If access was recently granted, please refresh your credentials.__

EPAC Version Latest, v10.2.5

anwather commented 3 months ago

Can you please post which actions you have specified in your custom role - so I can try and replicate?