I was recently testing out some of the Enterprise-Scale Landing Zones templates and trying to deploy them to answer some questions I had been sent by someone. And I hit a snag at the first hurdle!
The client 'live.com#*****@***.com' with object id 'subid-xxxx-xxxx-xxxx-xxxxxxx' does not have authorization to perform action 'Microsoft.Resources/deployments/validate/action' over scope '/providers/Microsoft.Resources/deployments/NoMarketplace-20210322140411' or the scope is invalid. If access was recently granted, please refresh your credentials. (Code: AuthorizationFailed)
Now I'm going to fully admit this error could have been avoided if I had read the documentation fully before hitting the deploy to Azure button. However, I wanted to document this in case someone else hit the same snag, or even if I hit the same snag again. 😉
What I had to do to fix it was this:
- Head into the Azure Portal and open Azure Active Directory
- Under the Manage section select Properties
- Under Access management for Azure resources, set the toggle to Yes.
As simple as that. 😉
If you are trying to deploy the Enterprise-Scale Landing Zone templates, be sure to check out the full documentation the team have prepared and you'll avoid issues like these. 👍