I added a constraint on owner role under "Role assignment condition" I am trying to delete that constraint .Using the following steps But Im getting the following error . Can anyone please guide me with a solution . Appreciate it. Best, Eda Amos

Hi @Eda Amos , I have reproduced same scenario in my environment. I am successfully deleting the constraint that I had added earlier. Here are the steps below. 1.Log in with the guest account. 2.Select the owner role of the subscription level. 2.Configure constraint role as Key vault administrator. 4.Delete the Key vault administrator role. Could you confirm whether my previous steps are in line with your intentions? If the alignment is correct, please send us an email on azcommunity [at] microsoft [dot] com referencing this issue with a subject line "ATTN: Navya" along with you Azure subscription id and we will help you with alternative support options on this. If the above is not your scenario, please correct me and provide us with detailed step. Thanks, Navya.

Unable to remove constraint for owner role

Eda Amos 0

I added a constraint on owner role under "Role assignment condition"

I am trying to delete that constraint .Using the following steps

User's image

But Im getting the following error .

User's image

Can anyone please guide me with a solution . Appreciate it.

Best,

Eda Amos

Tushar Kumar 3,231 Reputation points MVP

2023-11-21T03:42:24.51+00:00

Hi Eda,

Thanks for your question in Microsoft QnA!

This is an Authorisation error for the account you are using. Can you try making the changes with account used to assign these configuration? Or any other account with Owner/ User access administrator role.
Navya 6,115 Reputation points Microsoft Vendor

2023-11-21T11:11:04.4433333+00:00

Hi @Eda Amos ,

Thank you for posting this in Microsoft Q&A.

I understand you are unable to remove constraint for owner role.

1.Check that you are currently signed in with a user that is assigned a role that has the Microsoft.Authorization/roleAssignments/write and Microsoft.Authorization/roleAssignments/delete permission such as Owner or User Access Administrator at the scope you are trying to delete the constraint.

2.View the roles assigned to you. Check if there is a condition that constrains the role assignments you can delete.

For more information Delegate Azure access management to others.

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.
Eda Amos 0 Reputation points

2023-11-21T15:02:47.1166667+00:00
Hello Navya ,

The account that I am using is the admin account . This account is the onwer and has the read and write permissions .

Im tried to delete constraint as you have mentioned . But I get the following error as I do that .

And I get the following error

Any suggestions?
Best,
Eda Amos
Eda Amos 0 Reputation points

2023-11-21T15:06:44.56+00:00

Hello Tushar,
This is the admin account . Earlier I put a constraint on this account (The admin account) as key vault administrator

However , I realised my mistake and tried to remove it later on . Just to get the following error

TL;DR : I put the constraint on the admin account using the admin account . Which in retorspect was a huge mistake . But im unable to revert my changes.

Any suggestions?
Best,

Eda Amos

Any suggestions?
JamesTran-MSFT 36,531 Reputation points Microsoft Employee

2023-11-28T21:33:44.5433333+00:00

@Eda Amos

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.
Navya 6,115 Reputation points Microsoft Vendor

2023-12-01T13:29:15.9666667+00:00

Hi @Eda Amos

Following up to check if you've had a chance to consider the following solution or if you were able to resolve this issue?

1 answer

Navya 6,115 Reputation points Microsoft Vendor

2023-11-28T08:16:43.5066667+00:00

Hi @Eda Amos ,

I have reproduced same scenario in my environment. I am successfully deleting the constraint that I had added earlier. Here are the steps below.

1.Log in with the guest account.
2.Select the owner role of the subscription level.
2.Configure constraint role as Key vault administrator.

4.Delete the Key vault administrator role.

Could you confirm whether my previous steps are in line with your intentions? If the alignment is correct, please send us an email on azcommunity [at] microsoft [dot] com referencing this issue with a subject line "ATTN: Navya" along with you Azure subscription id and we will help you with alternative support options on this.

If the above is not your scenario, please correct me and provide us with detailed step.

Thanks,

Navya.
Please sign in to rate this answer.
Zawar Khan 0 Reputation points

2024-06-24T23:04:32.0266667+00:00

What if you have selected multiple constraints? Do we need to create multiple emails for this ?
Sign in to comment

Share via

Unable to remove constraint for owner role

1 answer