Skip to content
This repository was archived by the owner on Aug 14, 2024. It is now read-only.

Update deploy-pf-online-endpoint-pipeline.yml - #8

Open
Jake Wang (jakeatmsft) wants to merge 1 commit into
Azure:mainfrom
jakeatmsft:jakeatmsft-permission-fix
Open

Update deploy-pf-online-endpoint-pipeline.yml#8
Jake Wang (jakeatmsft) wants to merge 1 commit into
Azure:mainfrom
jakeatmsft:jakeatmsft-permission-fix

Conversation

@jakeatmsft

Copy link
Copy Markdown

Updated Deploy Action to fix #7 .

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.

@simon-v-swyftx

Copy link
Copy Markdown

I get an error on the new Grant endpoint permission to workspace:

ERROR: (AuthorizationFailed) The client '98900f8d-2b01-4ff0-b565-9ed3950xxxxx' with object id '98900f8d-2b01-4ff0-b565-9ed3950xxxxx' does not have authorization to perform action 'Microsoft.Authorization/roleAssignments/write' over scope '/subscriptions/***/resourceGroups/***/providers/Microsoft.MachineLearningServices/workspaces/***/providers/Microsoft.Authorization/roleAssignments/e636c2a6-40b1-40d9-805b-b1ef945xxxxx' or the scope is invalid. If access was recently granted, please refresh your credentials.

Am I missing something?
image

@simon-v-swyftx

Copy link
Copy Markdown

Alright so I did end up getting it working in the end. I found the service principal's name by using the ID in the error az ad sp show --id <ID> and then giving it User Access Administrator permissions so that it was able to write roles

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Missing permissions for endpoint to the ml workspace during Deploy Action

4 participants