Forum Discussion
Access Denied Due to Deny Assignment
I am encountering an issue with a deny assignment that is blocking my access to perform actions on my Azure resources. Despite having the Owner role for my subscription, I receive the error "DenyAssignmentAuthorizationFailed" when trying to manage resources. The error message indicates that a deny assignment with the name '[UnusualActivity] Full Deny assignment on dbd6664d-4eb9-46eb-99d8-5c43ba153c61 for user 00000000-0000-0000-0000-000000000000 at root added' is preventing access. I have tried removing the deny assignment using Azure CLI and PowerShell, but I receive a "Forbidden" status code. Additionally, I have verified that I do not have any managed applications. Any assistance in resolving this issue would be greatly appreciated.
2 Replies
Take this:
- Identify the Deny Assignment: Check the resource group or the specific resource to identify the deny assignment. You can do this through the Azure portal or by using Azure CLI/PowerShell.
- Remove the Deny Assignment:
- Azure Portal: Navigate to the resource group, go to the Access control (IAM) section, and look for any deny assignments. If you find one, you may need the necessary permissions to remove it.
- Azure CLI: Use the following command to remove the deny assignment:
Remove-AzRoleAssignment -ObjectId <ObjectId> -Scope <Scope> -RoleDefinitionName <RoleName>-
- PowerShell: Use the following command to remove the deny assignment:
Remove-AzRoleAssignment -ObjectId <ObjectId> -Scope <Scope> -RoleDefinitionName <RoleName>Check for Managed Applications: If the deny assignment was created by a managed application, you might need to delete the managed application first.
I tried this before, but the problem is that I have a student license under my subscription, which is an Azure for Students subscription. I also tried your solution earlier, but it showed me a "Forbidden" status code.
Thank you for your solution.I really appreciate your help.
