1
votes

What I'm doing:

My machine learning developer is trying to manually provision a ML Workspace in Azure.

Error:

{"message":"The client '[email protected]' with object id 'xxxxxxx-xxxxxx-xxxxx-xxxxxxetc.' does not have authorization to perform action 'Microsoft.MachineLearningServices/register/action' over scope '/subscriptions/'xxxxxxx-xxxxxx-xxxxx-xxxxxxetc.'' or the scope is invalid. If access was recently granted, please refresh your credentials. (Code: AuthorizationFailed)"}

What I've tried:

I see two existing discussions on this error from azure here and here. In both cases the users are using a service account with an API, and the gist of the solutions offered are to grant the service account the proper role assignments in access control. In my case, however, the user is trying to create the resource manually via the portal, and the user already has 'owner' role over the resource group. What more could I grant them? How does she refresh her credentials? Any pointers? THANKS!

1
Hi Mike, do you have any update for this thread? If you can share the support ticket number I can help you to track it.Yutong Tie - MSFT
Sure @YutongTie-MSFT. The support ticket id is 120081921001725. No updates yet.mike_butak

1 Answers

0
votes

Definitely looks like a permission issue. spitball ideas, maybe you also have to add the account to the subscription??

edit:

definitely seems like a bug! https://github.com/MicrosoftDocs/azure-docs/issues/61114#issuecomment-677703149