Devops Access in Azure AD

Ankita Aparajita 1 Reputation point
2021-06-02T17:48:58.163+00:00

One of the developers reached out sending me the first error.I assigned him "App Developer" role but it generates a new error now,any advice will be helpful.
101755-image.png

101813-image.png

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
666 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,458 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Adrian Martinez 1 Reputation point
    2021-06-02T18:05:42.413+00:00

    Hello, I think the answer maybe that you do not have enough permissions to do something that Microsoft could flag as "Harmfull"
    You could try to d it with less permissions however.

  2. Michael Taylor 47,966 Reputation points
    2021-06-02T18:14:53.873+00:00

    The user account under which the pipeline is trying to create your Azure App Service does not have sufficient privileges to do so. You need to work with your Azure infrastructure team to ensure that your "App Developer" AD role has permissions to the resource group(s) you're trying to manage and has permissions to create app services within the given resource groups. They can do this using inheritance. Note this has nothing to do with your Azure DevOps setup as Azure App Services (and other Azure services) use their own fine grained security polices that your Azure infrastructure team needs to properly set up.

    0 comments