Failed to register the assignments scopes to Microsoft.PolicyInsights provider with the following failure: The client 'VNAGARAJAN@ame.gbl' with object id '512febd4-7fa6-4c8b-be98-df79ea2ccc58' does not have authorization to perform action 'Microsoft.Polic

Question

Failed to register the assignments scopes to Microsoft.PolicyInsights provider with the following failure: The client 'VNAGARAJAN@ame.gbl' with object id '512febd4-7fa6-4c8b-be98-df79ea2ccc58' does not have authorization to perform action 'Microsoft.PolicyInsights/register/action' over scope '/providers/Microsoft.Management/managementGroups/33e01921-4d64-4f8c-a055-5bdaffd5e33d/providers/Microsoft.PolicyInsights' or the scope is invalid. If access was recently granted, please refresh your credentials.

I tried to register manually and it failed

Register-AzResourceProvider : The client 'VNAGARAJAN@ame.gbl' with object id '512febd4-7fa6-4c8b-be98-df79ea2ccc58' does not have authorization to perform action 'Microsoft.PolicyInsights/register/action' over scope '/subscriptions/cb2fc491-3b24-42a4-bd86-d43deebebe20' or the scope is invalid. If access was recently granted, please refresh your credentials. StatusCode: 403 ReasonPhrase: Forbidden OperationID : 46a95ba4-c86b-4015-98a7-01ac4ad4c3d9 At line:1 char:1 How do I get permission to perform action 'Microsoft.PolicyInsights/register/action' over scope '/subscriptions/cb2fc491-3b24-42a4-bd86-d43deebebe20' ?

Answer 1

Hello!

First, have you verified that you have the correct role for that subscription, that your trying to register an provider in?

Easy way to do this is browse the subscription in the portal, select "Access control (IAM)" in the left pane, select "Check access" and click on "View my access"

You will then se a list of all roles applicable to current account on this specific subscription :)

Verify that you have ATLEAST Contributor role on this subscription (owner works also).

Next you can select resource provider in the left pane of the same subscription to se if its already registered. If not you can also try selecting it here and click "Register".

Hope this is helpful Best Regards, Timmy Malmgren

---If the Answer is helpful, please click "Accept Answer" and upvote it as it helps others to find what they are looking for faster!