Skip to content
This repository was archived by the owner on Sep 9, 2026. It is now read-only.
This repository was archived by the owner on Sep 9, 2026. It is now read-only.

Version 4 Deployment Failing for Contributor Role #579

Open

Description

I was upgrading to version 4 and now I can't deploy:

ERROR: error executing step command 'provision': deployment failed: error deploying infrastructure: validating deployment to subscription:

Authorization failed for template resource '_guid_' of type 'Microsoft.Authorization/roleAssignments'

Is there any way to deploy without having the assign roles permission? Can the template be changed to support that? I am a contributor in Azure and want to just deploy.

Activity

  1. fboucher commented on Jun 22, 2025

    @fboucher
    Contributor

    Henry LaFleur (@lafleurh), you can remove the roleAssignments part of the bicep files. Then change manually the permission on the Azure storage. Doing so you are lowering the security however.

  2. tdannecy commented on Nov 24, 2025

    @tdannecy

    I am in the same situation with Contributor on the Subscription.

    Before deployment, I removed all lines with "roleAssignments" in these files:

    • src/infra/url-data/url-data.module.bicep
    • src/infra/funcstoragea17ca/funcstoragea17ca.module.bicep

    Then I ran azd up and it deployed some things. It failed at "Deploying service admin".

    In the portal, I added "azr pull" permissions to the Managed Identity on the Container Registry.

    Then I ran azd up and it deployed the rest successfully.

    Thanks for the tip Frank Boucher (@fboucher) !

  3. fboucher commented on Jul 15, 2026

    @fboucher
    Contributor

    Chad Voelker (@ch-rob) please close this one

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions