azure open ai chat deployment webapp error

ΓΕΩΡΓΙΟΣ ΣΩΤΗΡΟΠΟΥΛΟΣ 10 Reputation points
2024-09-03T14:46:42.3433333+00:00

'

InvalidTemplateDeployment: The template deployment failed with error: 'Authorization failed for template resource '90d9ab16-e2ac-5f13-859d-2f84036fef37' of type 'Microsoft.Authorization/roleAssignments'. The client 'g.sotiropoulos@korinthos.gr' with object id '82888956-81ea-401e-a02c-af742b1d0616' does not have permission to perform action 'Microsoft.Authorization/roleAssignments/write' at scope '/subscriptions/116d9711-be20-4552-adcf-5870289e3295/resourceGroups/MU002-RG02/providers/Microsoft.CognitiveServices/accounts/mu002-rg02-azopenai/providers/Microsoft.Authorization/roleAssignments/90d9ab16-e2ac-5f13-859d-2f84036fef37'.'.

Trace ID : e5aa5c91-0cb5-48d3-8ca8-0a335462b829Service request ID : 46b55a74-e4a1-40cd-b95b-07fc0925b78b

'

Azure OpenAI Service
Azure OpenAI Service
An Azure service that provides access to OpenAI’s GPT-3 models with enterprise capabilities.
3,192 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Sina Salam 11,991 Reputation points
    2024-09-03T16:03:00.7666667+00:00

    Hello ΓΕΩΡΓΙΟΣ ΣΩΤΗΡΟΠΟΥΛΟΣ,

    Welcome to the Microsoft Q&A and thank you for posting your questions here.

    Regarding the error code and log you posted. It shows that you do not have the necessary permissions to create or modify role assignments in Azure at the specified scope and the deployment fails due to insufficient permission.

    You need to have a role that includes Microsoft.Authorization/roleAssignments/write permissions. Roles like Owner, User Access Administrator, or a custom role with the necessary permissions to perform the deployment or your action on the resource group MU002-RG02.

    NOTE: if you’re an Owner or User Access Administrator, and this is happening. Assign the required role to the user by navigate to the Azure portal, go to the relevant resource group or resource, and assign the required role to g.sotiropoulos@korinthos.gr. such as write, modify.

    Also, if the template (ARM template) includes role assignments, consider running the template with a user who has higher privileges or adjust the template to avoid requiring such permission or otherwise.

    I hope this is helpful! Do not hesitate to let me know if you have any other questions.

    ** Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful ** so that others in the community facing similar issues can easily find the solution.

    Best Regards,

    Sina Salam

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.