Forum Discussion

Brass Contributor

Apr 02, 2019

Solved

New-RdsRoleAssignment : User is not authorized to query the management service

Hello I am trying to follow this manual to create service principal name to use it on Azure Portal in the blade of creating new single host pool https://docs.microsoft.com/en-us/azure/virtual-desk...

alexander tikhomirov
Apr 08, 2019
was my bad, I successfully executed this command to grant permission RDS Owner to "Windows Virtual Desktop Svc Principal" I have just used wrong TenantName

//Alexander

Stefan Georgiev

Former Employee

Apr 03, 2019

alexander tikhomirov

Add-RdsAccount -DeploymentUrl "https://rdbroker.wvd.microsoft.com"
New-RdsRoleAssignment -RoleDefinitionName "RDS Owner" -ApplicationId $svcPrincipal.AppId -TenantGroupName $myTenantGroupName -TenantName $myTenantName

So this fails for the service principal? What account did you use for the Add-RdsAccount prompt...

alexander tikhomirov

Brass Contributor

Apr 04, 2019

Stefan Georgiev

I used my Global Admin credential. And the same account when I am checking has RDS Owner role and also this account was used to create new wvd tenant.

//Alexander

alexander tikhomirov
Brass Contributor
Apr 08, 2019
was my bad, I successfully executed this command to grant permission RDS Owner to "Windows Virtual Desktop Svc Principal" I have just used wrong TenantName

//Alexander
- mntsupport
  Copper Contributor
  Aug 18, 2020
  alexander tikhomirov Where did you find your tenant name? I've been looking for WAY too long and the Get-RdsTenant and Get-RdsContext commands won't work for me.
- John-Marcum
  MVP
  Jul 16, 2019
  alexander tikhomirov You are obviously trying to follow the same guide I am trying to follow. Did you use you Azure AD tenant name here: $myTenantName = "blahblahblah.onmicrosoft.com" or did you use what was defined in this command New-RdsTenant -Name blahblahblahblahblah????