MicrosoftSteve Motton "Getting a permissions error when attempting to make user assignments any idea as to the issue, also how are image updates to an existing pool handled, in the fall release there was a arm template that produced various results. The account used for user assignments is a subscription contributor and Global Admin."
I just tested this in my environment with the same permissions and it returns the message below; this is because the Contributor role does not have the 'write action' ... user account must have Microsoft.Authorization/roleAssignments/write permission
{"details":[{"code":"InvalidTemplateDeployment","message":"{\"content\":{\"error\":{\"code\":\"AuthorizationFailed\",\"message\":\"The client 'xxxxxxxxxx.onmicrosoft.com' with object id 'xxxxxxxxxx' does not have authorization to perform action 'Microsoft.Authorization/roleAssignments/write' over scope '/subscriptions/xxxxxxxxxxxxxxxxxxx/resourceGroups/wvd02-rg/providers/Microsoft.DesktopVirtualization/applicationgroups/pool1-DAG/providers/Microsoft.Authorization/roleAssignments/c5a75bcb-7bfb-439a-89e3-ed07dab7000d' or the scope is invalid. If access was recently granted, please refresh your credentials.\"}},\"headers\":{\"cache-control\":\"no-cache\",\"content-length\":\"585\",\"content-type\":\"application/json; charset=utf-8\",\"expires\":\"-1\",\"pragma\":\"no-cache\",\"x-ms-correlation-request-id\":\"0264e216-7f77-4a01-a8a6-7189f360e562\",\"x-ms-failure-cause\":\"gateway\",\"x-ms-request-id\":\"0264e216-7f77-4a01-a8a6-7189f360e562\",\"x-ms-routing-request-id\":\"NORTHEUROPE:20200519T180005Z:0264e216-7f77-4a01-a8a6-7189f360e562\"},\"httpStatusCode\":403}","target":"c5a75bcb-7bfb-439a-89e3-ed07dab7000d"}]}
