Please ensure you have the 'Artifact Signing Identity Verifier' role assigned. It may take a few moments for the role assignment to take effect.

That message usually means the role assignment has not taken effect yet, or the role was not assigned at the correct scope.

1. In the Azure portal, open the Artifact Signing account.
2. Verify that the signed-in user has the Artifact Signing Identity Verifier role on the Artifact Signing resource.
   • This role is required to create or manage identity validation.
   • Identity validation can be done only in the Azure portal, not through Azure CLI.
3. If the New identity button is still dimmed or the step does not progress, wait for RBAC propagation.
   • Role assignment changes can take up to 10 minutes to take effect.
   • Sign out of the Azure portal and sign back in to force a refresh.
4. Also confirm the account has at least Reader role at the subscription scope, because users assigned Artifact Signing Identity Verifier must already have at least Reader at subscription scope.
5. Then go to the Artifact Signing account Overview or Objects > Identity validations and try again.

If the button remains inactive after the role is visible and enough time has passed, create a support ticket in the Azure portal.

• Tutorial: Assign roles in Artifact Signing
• Artifact Signing resources and roles
• Quickstart: Set up Artifact Signing
• Quickstart: Set up Artifact Signing
• Troubleshoot Azure RBAC
• Artifact Signing FAQ