search

MicrosoftDocs / azure-docs

Open source documentation of Microsoft Azure
https://docs.microsoft.com/azure
Creative Commons Attribution 4.0 International
10.28k stars 21.47k forks source link

Unable to Save Draft - ISO 27001: Shared Services #27312

Closed gitkalz closed 5 years ago

gitkalz commented 5 years ago

Great work, and just what most organizations needed to kick start their Azure journey IMHO.

However, I cannot get this working, receiving the following message when attempting to save Blueprint Draft

One or more artifacts in blueprint 'XXXX' were not saved. Review and update the blueprint and try again.
Failed to validate this policy assignment artifact against the policy or policy set definition '/providers/Microsoft.Authorization/policyDefinitions/a7ff3161-0087-490a-9ad9-ad6217f4f43a'. Please ensure that the policy or policy set definition exists, is accessible to you, and that the Azure Blueprints Resource Provider is registered with either the Azure Active Directory tenant or at least one subscription within the tenant.

I have no trouble deploying other sample blueprints making me assume this is not an issue with Resource Provider Registration.

Kindly Advise

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

DCtheGeek commented 5 years ago

@kalzi Thanks for the feedback and sorry you've run into an issue. I'm tagging the PM (@alex-frankel) so he and the team can investigate.

@MicrosoftDocs/azure-cxp-triage Please assign to me, label 'product-issue', and #in-progress.

alex-frankel commented 5 years ago

Hi Kalzi,

Can you send me an email at alfran@microsoft.com?

I'd like to collect some more debugging information so we can track down what might be happening.

Thanks.

DCtheGeek commented 5 years ago

@kalzi Since the engineering and PM team (above) has stepped in directly to help you troubleshoot this issue, I'm going to have this closed as it isn't an issue with docs. This won't impact your working directly with the team to resolve the issue. If docs end up needing to be updated as a result or their findings, they'll let me know directly. If you run into other issues or have docs specific feedback, please don't hesitate to open a new issue. Thanks!

@MicrosoftDocs/azure-cxp-triage #please-close

dlgoodr commented 4 years ago

But what's the solution? This is the only hit on the Internet for the error "Failed to validate this policy assignment artifact against the policy or policy set definition"

alex-frankel commented 4 years ago

My guess is this is because a custom policy or initiative (policy set) does not exist such that the blueprint definition can access it. Any custom policy needs to exist at or above the scope where the blueprint definition is being saved. (e.g. at the root MG)

dlgoodr commented 4 years ago

The custom policy lives at the MG, same as the blueprint definition. The current work-around looks for a problem and makes the exact same REST call, which inevitably succeeds. There's some sort of race condition in the back end of Azure, somewhere.

dlgoodr commented 4 years ago

Any thoughts here?

alex-frankel commented 4 years ago

FWIW, we think this is resolved. If you are still able to repro, can you let us know and give us the correlation ID which should be in the error message.