Arc for Sql Server upload response status: Forbidden.

Michael Griswold 1 Reputation point
2022-04-05T11:25:31.94+00:00

Hello all,
I have an issue with adding our SQL Server to Azure Arc
The Azure Connected Agent (azcmagent) installed fine - and the extension installed aswell.

However, checking the logs i get following error...

[AzureUpload] Arc for Sql Server upload requestId: 718ca3d0-ffd7-4c40-ad1f-ccd8bc43ef41, uri: https://san-af-westeurope-prod.azurewebsites.net/api/subscriptions/<<subscription_ID_dedacted>>/resourcegroups/management/providers/Microsoft.AzureArcData/sqlServerInstances/<<SERVERNAME>>?api-version=2021-08-01  
[AzureUpload] Arc for Sql Server upload response status: Forbidden.  
[AzureUpload] Arc post request failed with error: Forbidden message: {"ErrorDescription":{"ErrorCode":6,"Message":"The user has no access to the provided Azure resource."},"ResponseUrl":null}  

I searched the internet but only found this.
https://video2.skills-academy.com/en-us/sql/sql-server/azure-arc/connect-at-scale?view=sql-server-ver15&tabs=windows#server-managed-identity-has-insufficient-permissions

things i already did:

  • i registered the Microsoft.AzureArcData and Microsoft.HybridCompute resource providers with the resource group
  • i added the computer to the Azure Connected SQL Server Onboarding Role
  • checked firewall settings and connection to internet
  • -just reinstalled the arc agent and sql extension

No Proxy

any help would be appreciated
thanks

Azure Arc
Azure Arc
A Microsoft cloud service that enables deployment of Azure services across hybrid and multicloud environments.
399 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Michael Griswold 1 Reputation point
    2022-04-06T09:48:10.42+00:00

    It seems that the issue solved itself.
    Perhaps applying Roles took longer than expected.


  2. Maxime Rastello 1 Reputation point
    2022-07-14T13:03:03.463+00:00

    I'm having the same issue, the role Azure Connected SQL Server Onboarding Role is assigned to managed identities for more than 2 days now... Still showing Forbidden in the Event Logs (Azure Upload Service).

    Did you do something special to resolve this issue? Thanks

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.