Your deployment failed

[kyhsbox]

During Template Deployment I've received this error during a role assignment:

ERROR TYPE Principals of type Application cannot validly be used in role assignments. (Code: PrincipalTypeNotSupported)

Do you know how to fix this? thx René.

[almenscorner]

It sounds like you provided the Client ID instead of the actual object ID, that can cause this error. You can give the SP permissions to the key vault manually by going to Access control (IAM) on your key vault and under role assignments assign your app registration to the "Key Vault Administrator" role.

[kyhsbox]

Thanks, that could be the issue, although I double checked the id's beforehand its possible that I mixed something up with the wrong id's. I will re-deploy template or update the role assignment in the keyvault manually. Thanks a lot for your quick reply.

[almenscorner]

Let me know if you're able to get through and deploy :)

[kyhsbox]

Now the deployment succeeded. As you mentioned I used the object ID from the app registration blade instead of the enterprise application object id. Thanks again, we can close this issue as solved. Best regards. René van den Wijngaard.