May 13 2020 05:30 AM
Hello Guys,
Starting to look into the new deployment & management portal introduced in end of April 2020:
https://www.microsoft.com/en-us/microsoft-365/blog/2020/04/30/enable-remote-work-faster-new-windows-...
Started to play with and successfully created WVD pools and now facing issue when wanted to assign users to remote desktop the vm in that pool using Application Groups.
In fact, when trying to assign a user to an application group, the following error message is thrown:
{"details":[{"code":"InvalidTemplateDeployment","message":"{\"content\":{\"error\":{\"code\":\"AuthorizationFailed\",\"message\":\"The client '[redacted]' with object id 'f1a4cbe1-3c75-4c9a-93ee-8e098841bcba' does not have authorization to perform action 'Microsoft.Authorization/roleAssignments/write' over scope '/subscriptions/[redacted]/resourceGroups/[redacted]/providers/Microsoft.DesktopVirtualization/applicationgroups/[redacted]/providers/Microsoft.Authorization/roleAssignments/0aa9cdd7-0e9f-48d2-b711-e1d90aacb03c' or the scope is invalid. If access was recently granted, please refresh your credentials.\"}},\"headers\":{\"cache-control\":\"no-cache\",\"content-length\":\"608\",\"content-type\":\"application/json; charset=utf-8\",\"expires\":\"-1\",\"pragma\":\"no-cache\",\"x-ms-correlation-request-id\":\"31cd6312-fb7d-47eb-8e31-b211b3d3cc9a\",\"x-ms-failure-cause\":\"gateway\",\"x-ms-request-id\":\"31cd6312-fb7d-47eb-8e31-b211b3d3cc9a\",\"x-ms-routing-request-id\":\"FRANCECENTRAL:20200513T122722Z:31cd6312-fb7d-47eb-8e31-b211b3d3cc9a\"},\"httpStatusCode\":403}","target":"0aa9cdd7-0e9f-48d2-b711-e1d90aacb03c"}]}
Any idea why this happens?
May 13 2020 10:34 AM
May 13 2020 11:36 PM - edited May 13 2020 11:42 PM
@Soo Kuan Teo
Thank you for your response.
I see my account that i used to provision WVD and I inherit the permission through the Contributor role for the subscription "Pay-As-You-Go".
Does this mean only users with Owner role can use the modern WVD admin console?
Another question, when i try to list pools using powershell, i do not see the pools created using the modern console either under the RDS tenant. Is there a specific way to look into please?
May 14 2020 11:13 AM
SolutionMay 14 2020 11:37 PM
May 14 2020 11:13 AM
Solution