question

Anky-6582 avatar image
0 Votes"
Anky-6582 asked azure-cxp-api edited

Devops Access in Azure AD

One of the developers reached out sending me the first error.I assigned him "App Developer" role but it generates a new error now,any advice will be helpful.
101755-image.png


101813-image.png


azure-active-directoryazure-rbac
image.png (155.7 KiB)
image.png (70.9 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AdrianMartinez-0787 avatar image
0 Votes"
AdrianMartinez-0787 answered Anky-6582 commented

Hello, I think the answer maybe that you do not have enough permissions to do something that Microsoft could flag as "Harmfull"
You could try to d it with less permissions however.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks Adrian,are you aware what permissions will be helpful?

0 Votes 0 ·
cooldadtx avatar image
0 Votes"
cooldadtx answered

The user account under which the pipeline is trying to create your Azure App Service does not have sufficient privileges to do so. You need to work with your Azure infrastructure team to ensure that your "App Developer" AD role has permissions to the resource group(s) you're trying to manage and has permissions to create app services within the given resource groups. They can do this using inheritance. Note this has nothing to do with your Azure DevOps setup as Azure App Services (and other Azure services) use their own fine grained security polices that your Azure infrastructure team needs to properly set up.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.