An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
This error indicates the signed-in account does not have permission to create a resource group in that subscription.
Use this check and fix path:
- In Azure portal, go to Subscriptions.
- Select the affected subscription.
- Open Access control (IAM).
- Check whether the account has a role that allows writing resources at the subscription scope.
- A common requirement is Contributor or Owner on the subscription.
- If the role is missing, ask a subscription administrator to assign the required role.
- After the role assignment is updated, wait a few minutes for permission changes to propagate, then try creating the resource group again.
To create a resource group after permissions are fixed:
- Sign in to the Azure portal.
- Select Resource groups.
- Select Create.
- Choose the Subscription, enter a Resource group name, and select a Region.
- Select Review + Create, then Create.
If the account is a guest user, the guest account must also be assigned a role at the correct scope. If the subscription was recently moved between tenants or directories, role assignments may need to be checked and reassigned.
References:
- Troubleshoot Azure RBAC
- Use the Azure portal and Azure Resource Manager to manage resource groups
- You do not have permissions to create resource groups under subscription Pay-As-You-Go. - Microsoft Q&A
- Unable to create resources - Microsoft Q&A
- i am trying add user permission in subscription,there i am getting error . - Microsoft Q&A