question

MichaelGriswold-1424 avatar image
0 Votes"
MichaelGriswold-1424 asked MikeWatson-3755 commented

Arc for Sql Server upload response status: Forbidden.

Hello all,
I have an issue with adding our SQL Server to Azure Arc
The Azure Connected Agent (azcmagent) installed fine - and the extension installed aswell.

However, checking the logs i get following error...

 [AzureUpload] Arc for Sql Server upload requestId: 718ca3d0-ffd7-4c40-ad1f-ccd8bc43ef41, uri: https://san-af-westeurope-prod.azurewebsites.net/api/subscriptions/<<subscription_ID_dedacted>>/resourcegroups/management/providers/Microsoft.AzureArcData/sqlServerInstances/<<SERVERNAME>>?api-version=2021-08-01
 [AzureUpload] Arc for Sql Server upload response status: Forbidden.
 [AzureUpload] Arc post request failed with error: Forbidden message: {"ErrorDescription":{"ErrorCode":6,"Message":"The user has no access to the provided Azure resource."},"ResponseUrl":null}

I searched the internet but only found this.
https://docs.microsoft.com/en-us/sql/sql-server/azure-arc/connect-at-scale?view=sql-server-ver15&tabs=windows#server-managed-identity-has-insufficient-permissions

things i already did:

  • i registered the Microsoft.AzureArcData and Microsoft.HybridCompute resource providers with the resource group

  • i added the computer to the Azure Connected SQL Server Onboarding Role

  • checked firewall settings and connection to internet

  • -just reinstalled the arc agent and sql extension

No Proxy

any help would be appreciated
thanks











azure-arc
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

2 Answers

MichaelGriswold-1424 avatar image
0 Votes"
MichaelGriswold-1424 answered MikeWatson-3755 commented

It seems that the issue solved itself.
Perhaps applying Roles took longer than expected.

· 2
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SadiqhAhmed-MSFT avatar image SadiqhAhmed-MSFT ·

Thanks for the update. Glad to know the issue is resolved.

0 Votes 0 ·
MikeWatson-3755 avatar image MikeWatson-3755 SadiqhAhmed-MSFT ·

I'm also having the same problem. Can you assist in determining what the issue is? I have followed all requirements noted in Microsoft's documentation but I am getting the same upload error. Thanks!

0 Votes 0 ·
MaximeRastello avatar image
0 Votes"
MaximeRastello answered

I'm having the same issue, the role Azure Connected SQL Server Onboarding Role is assigned to managed identities for more than 2 days now... Still showing Forbidden in the Event Logs (Azure Upload Service).

Did you do something special to resolve this issue? Thanks

5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.