Cannot assign User assigned managed identity to MySQL Database for Entra Auth

Question

Cannot assign User assigned managed identity to MySQL Database for Entra Auth

Jan 45

Hello,

We have a "Azure Database for MySQL flexible server" instance in North Europe. I'm trying to switch from user/pass auth to also allow Entra authentication.

When I do the switch and want to select a User assigned managed identity, assigning it fails with:

Failed to add user assigned managed identities to server: Provisioning in requested region is not supported. Your subscription might not have access to create a server in the selected region.

The Managed Identity has Directory Readers role assigned.

On this page: https://learn.microsoft.com/en-us/azure/mysql/flexible-server/resolve-capacity-errors?tabs=portal#regional-constraints it says that there may be some region limitation and we should create a support ticket.

Could you please verify that it's the region limitation? And if so, can you give us the permission to deploy in North Europe? Alternatively, could you tell us which region should be used instead - we can migrate the DB.

Thank you in advance.

Jan 45 Reputation points

2026-06-25T20:06:18.8033333+00:00

Hi @Manoj Kumar Boyini thank you for providing direct link to create a support ticket. I was not able to find it in the Azure Portal support center.
Jan 45 Reputation points

2026-07-01T09:00:02.1533333+00:00

To wrap this up - I contacted the Azure Support using the link below, asked them to increase the capacity for our DB and in two days time (during the weekend!) they resolved it.

I still don't have a response to how we could mitigate case like this from happening - eg. which Zone to prefer, what is the current capacity availability in different zones, etc.

But the issue was resolved.

Answer accepted by question author

0 additional answers

Your answer

Jan 45 Reputation points

2026-06-25T20:06:18.8033333+00:00

Hi @Manoj Kumar Boyini thank you for providing direct link to create a support ticket. I was not able to find it in the Azure Portal support center.
Jan 45 Reputation points

2026-07-01T09:00:02.1533333+00:00

To wrap this up - I contacted the Azure Support using the link below, asked them to increase the capacity for our DB and in two days time (during the weekend!) they resolved it.

I still don't have a response to how we could mitigate case like this from happening - eg. which Zone to prefer, what is the current capacity availability in different zones, etc.

But the issue was resolved.

Answer 1

Welcome to Microsoft Q&A.

Hello @Jan , I hope you are doing well.

This likely appears to be a regional capacity or subscription access restriction rather than an issue with the User Assigned Managed Identity itself. What is happening is that when Azure Database for MySQL Flexible Server attempts to associate the managed identity for Microsoft Entra authentication, the platform performs a regional validation check and is unable to provision the required backend resources in the selected region.

The fact that the Managed Identity already has the Directory Readers role assigned suggests that the identity configuration is likely correct.

To resolve this issue, please check the following:

Verify that the MySQL Flexible Server is deployed in North Europe and that the issue occurs consistently when assigning the User Assigned Managed Identity.
Create a support request under Service and subscription limits (quotas) and select Azure Database for MySQL Flexible Server.
Choose Region access and request access for the North Europe region.
Include the server name, subscription ID, region, and timestamp of the failed operation in the support request.

If Microsoft confirms a regional constraint, they will either:

Enable the required regional access for your subscription, or
Recommend an alternative supported region for this scenario.

For additional information, please review:

Azure Database for MySQL regional constraints: https://learn.microsoft.com/azure/mysql/flexible-server/resolve-capacity-errors#regional-constraints
Microsoft Entra authentication for Azure Database for MySQL: https://learn.microsoft.com/azure/mysql/flexible-server/how-to-azure-adT

I hope this information helps.

If my answer helped you resolve your issue, please consider marking it as the correct answer. This helps others in the community find solutions more easily. Thanks!

Jan 45 Reputation points

2026-06-25T20:09:21.42+00:00

Hi @Jose Benjamin Solis Nolasco thank you for your input. It seems you are correct. We are also unable to upgrade the database to newer version, so it may be a region limit.

I have created the support ticket and will wait for the response.

Answer 2

Manoj Kumar Boyini 19,590 Microsoft External Staff Moderator

Hi @Jan

Request region access

Go to Create a Support Request

Choose: Service and subscription limits (quotas)

Select: Azure Database for MySQL Flexible Server

Under Additional details:

Choose Region access
Select required region and cores

Submit the request.

Please let us know if you have any questions or concerns

0 comments