Azure Local

Please make sure all resource providers are enabled on the subscription:

Register-AzResourceProvider -ProviderNamespace "Microsoft.HybridCompute" Register-AzResourceProvider -ProviderNamespace "Microsoft.GuestConfiguration" Register-AzResourceProvider -ProviderNamespace "Microsoft.HybridConnectivity" Register-AzResourceProvider -ProviderNamespace "Microsoft.AzureStackHCI" Register-AzResourceProvider -ProviderNamespace "Microsoft.Kubernetes" Register-AzResourceProvider -ProviderNamespace "Microsoft.KubernetesConfiguration" Register-AzResourceProvider -ProviderNamespace "Microsoft.ExtendedLocation" Register-AzResourceProvider -ProviderNamespace "Microsoft.ResourceConnector" Register-AzResourceProvider -ProviderNamespace "Microsoft.HybridContainerService" Register-AzResourceProvider -ProviderNamespace "Microsoft.Attestation" Register-AzResourceProvider -ProviderNamespace "Microsoft.Storage" Register-AzResourceProvider -ProviderNamespace "Microsoft.Insights"

On subscription:

Assign the following role permissions to the user who deploys the instance:

• Reader
• Azure Stack HCI Administrator

On resource group:

As you register machines as Arc resources, make sure that you're either the resource group owner or have the following permissions on the resource group where the machines are provisioned:

• Azure Connected Machine Onboarding.
• Azure Connected Machine Resource Administrator.
• Key Vault Data Access Administrator: This permission is required to manage data plane permissions to the key vault used for deployment.
• Key Vault Secrets Officer: This permission is required to read and write secrets in the key vault used for deployment.
• Key Vault Contributor: This permission is required to create the key vault used for deployment.
• Storage Account Contributor: This permission is required to create the storage account used for deployment.

Your user should also have "Cloud Application Administrator" role in Entra ID