Unable to create project in Hub

satish velayudhan 0 Reputation points
2026-04-18T04:44:40.5033333+00:00

Unable to create project in Hub with an error message restricted permission

Azure Language in Foundry Tools
Azure Language in Foundry Tools

An Azure service that provides natural language capabilities including sentiment analysis, entity extraction, and automated question answering.

0 comments

2 answers

Sort by: Oldest
Most helpful Newest Oldest

  1. AI answer

    2026-04-18T04:45:04.3066667+00:00

    To create a project in a Microsoft Foundry (classic) hub, the account must have sufficient permissions on the underlying Azure resources. A “restricted permission” or similar error when creating a project typically indicates missing Contributor/Owner rights or insufficient access to the hub’s resource group or subscription.

    Troubleshoot and resolve as follows:

    1. Verify Azure role assignments
      • Ensure the user has Contributor or Owner role on at least the resource group where the hub and project will be created, or on the subscription.
      • If part of a team, ask the Azure administrator to grant these permissions or to create the hub/project on behalf of the user.
    2. Confirm access to the hub
      • If a hub already exists, confirm that the user has access to that hub’s resource group with at least Contributor permissions. Without this, project creation in that hub will fail with a permission-related error.
    3. Try creating the project from the Foundry portal
      • Sign in to Microsoft Foundry with the correct account.
      • Make sure New Foundry is toggled off (using Foundry (classic)).
      • If not in any project, select Create new (top right). If already in a project, select the project breadcrumb → Create new resource.
      • Select AI hub resource → Next.
      • Enter a project name.
      • Choose an existing hub from the dropdown, or select Create a new hub.
      • If creating a new hub, ensure the user has Owner or Contributor permissions on the selected resource group; otherwise, the creation will fail due to restricted permissions.
      • Select Create.
    4. If creating a new hub as part of the project
      • In the Create a project form, expand the hub customization panel.
      • Select a Resource group where the user has Contributor or Owner.
      • Select a Location.
      • Select Create a project.
      • If the error persists, have an administrator create the hub separately with the required configuration and then create the project in that hub.
    5. Validate using CLI or SDK (optional)
      • Use Azure CLI to confirm authentication and visibility of existing hubs: 
             az login
     az ml workspace list --resource-group <your-resource-group-name>
      • If listing workspaces (hubs) fails with a permission error, the user lacks required rights on that resource group or subscription.

    If, after these checks, the error still appears, the next step is for an Azure administrator to review the user’s role assignments on the subscription and resource group and ensure at least Contributor access is granted before attempting project creation again.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

  2. SRILAKSHMI C 19,735 Reputation points Microsoft External Staff Moderator
    2026-04-20T11:43:14.93+00:00

    Hello @satish velayudhan,

    Thank you for reaching out regarding the issue with creating a project in the Hub.

    Based on the error message “restricted permission”, this behavior is typically observed when the required permissions or configurations are not fully in place at the Azure subscription or resource level.

    Since creating a project within a Hub (Azure AI Foundry) involves provisioning and accessing multiple dependent resources, access is required across several scopes.

    Recommended checks

    1. Verify Azure RBAC permissions Please ensure that your account has Contributor or Owner role assigned at the Resource Group or Subscription level.

    Additionally, the following permissions are required (directly or via role):

    • Microsoft.MachineLearningServices/workspaces/write
    • Microsoft.MachineLearningServices/workspaces/hubs/write
    • Microsoft.MachineLearningServices/workspaces/hubs/join/action
    • Microsoft.Storage/storageAccounts/write
    • Microsoft.KeyVault/vaults/write
    • Microsoft.CognitiveServices/accounts/write
    • Microsoft.Resources/deployments/validate/action

    2. Confirm resource provider registration Kindly verify that the following resource providers are registered in your subscription:

    1. Microsoft.MachineLearningServices
    2. Microsoft.Storage
    3. Microsoft.KeyVault
    4. Microsoft.CognitiveServices

    This can be checked from: Azure Portal → Subscription → Resource providers

    3. Review Azure Policy restrictions If there are Azure Policies applied at the subscription or resource group level, they may restrict resource creation.

    Please check:

    • Resource Group → Policies
    • Look for any deny assignments related to resource types, regions, or configurations

    In such cases, creating the Hub/project directly via the Azure Portal can help identify and comply with required policy constraints.

    4. Validate quota and region availability Please ensure that the required quota is available for dependent services (e.g., Cognitive Services, Storage). If needed, try deploying in an alternate region or subscription.

    5. Hub access permissions If you are trying to create a project in an existing Hub, please ensure you have permission to join the Hub:

    • Microsoft.MachineLearningServices/workspaces/hubs/join/action

    6. Review Activity Log for detailed error For more specific failure details:

    • Navigate to Azure Portal → Resource Group → Activity Log
    • Check for failed operations and review error codes such as:
    1. AuthorizationFailed
    2. RequestDisallowedByPolicy

    If a Hub is not already created, you may try allowing Azure AI Foundry to automatically create a default Hub (requires Contributor/Owner access). Once the Hub is created, project creation should proceed successfully.

    Please refer this

    How to create & manage a hub + project: https://learn.microsoft.com/azure/ai-studio/how-to/create-azure-ai-resource

    Required RBAC perms for hubs & projects: https://learn.microsoft.com/azure/ai-studio/concepts/ai-resources#roles

    Register resource providers: https://learn.microsoft.com/azure/ai-studio/concepts/architecture#azure-resource-providers

    I Hope this helps. Do let me know if you have any further queries.

    Thank you!

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.