Retour
-
Titre
VM creation on Azure are failing because it fails to to create the service principal -
Description
When running a Clean OS restore to Azure, the virtual machine creation on Azure is failing because it cannot create the service principal
INFORMATION: PowerShellWithConsoleEvents.InformationHandler(): Service principal is not configured for the infrastructure.
ERROR: PowerShellWithConsoleEvents.RunPowershellScript(): Failed to run workflow script AzurePrepareInfrastructure.ps1 with error System.Management.Automation.RemoteException: Service principal is not configured for the infrastructure.: -
Cause
Lack of permissions -
Résolution
RMAD documentation specified that Azure® built-in role of Owner or User Access Administrator on the subscription is required for this feature.
Some customer may not like to grant Owner or User Access administrator permissions to the account.
In that scenario, the following permissions need to be granted instead of Owner or User Access administrator.In case the target resource group does not exist: Permission | Scope | |microsoft.directory/servicePrincipals/create | Directory | |*/read |Subscription| |Microsoft.Resources/subscriptions/resourceGroups/write |Subscription| |Microsoft.Authorization/roleAssignments/write |Subscription|
In case the target resource group exists: Permission | Scope | |microsoft.directory/servicePrincipals/create |Directory | |*/read |Subscription | |Microsoft.Authorization/roleAssignments/write |Resource group|
The RMAD service principal is automatically granted "Owner" role for the target resource group.