Being a Global Administrator in Azure portal I am unable to configure Continuous Delivery Preview

%3CLINGO-SUB%20id%3D%22lingo-sub-121608%22%20slang%3D%22en-US%22%3EBeing%20a%20Global%20Administrator%20in%20Azure%20portal%20I%20am%20unable%20to%20configure%20Continuous%20Delivery%20Preview%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-121608%22%20slang%3D%22en-US%22%3E%3CP%3ELogged%20into%20Azure%20portal--%26gt%3B%20App%20Services--%26gt%3BSelected%20the%20Project--%26gt%3BContinuous%20Delivery%20Preview%3C%2FP%3E%3CP%3EI%20see%20error%20message%20%22%3CSPAN%3EYou%20do%26nbsp%3Bnot%26nbsp%3Bhave%20enough%20permissions%20on%20this%20App%20Service%20to%20setup%20Continuous%20Delivery.%20Learn%20More%3A%20%3CA%20href%3D%22https%3A%2F%2Fgo.microsoft.com%2Ffwlink%2F%3Flinkid%3D843472%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgo.microsoft.com%2Ffwlink%2F%3Flinkid%3D843472%3C%2FA%3E%3C%2FSPAN%3E%22%20and%20Configure%20button%20is%20disabled.%20I%20am%20the%20Global%20Administrator%20and%20why%20I%20don't%20had%20the%20permissions%20to%20configure%2C%20where%20I%20can%20assign%20those%20access.%3C%2FP%3E%3CP%3EError%20message%3C%2FP%3E%3CP%3EFailed%20to%20set%20Azure%20permission%20'RoleAssignmentId%3A%209****a'%20for%20the%20service%20principal%20'2****3'%20on%20subscription%20id%20'****'%3A%20error%20code%3A%20Forbidden%2C%20innner%20error%20code%3A%20AuthorizationFailed%2C%20inner%20error%20message%20The%20client%20'my%20mail%20Id'%20with%20object%20id%20'*****%20does%20not%20have%20authorization%20to%20perform%20action%20'Microsoft.Authorization%2FroleAssignments%2Fwrite'%20over%20scope%20'%2Fsubscriptions%2F*****'.%20For%20troubleshooting%20refer%20to%20link%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-121608%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EApp%20Services%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAzure%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDevOps%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1688107%22%20slang%3D%22en-US%22%3ERe%3A%20Being%20a%20Global%20Administrator%20in%20Azure%20portal%20I%20am%20unable%20to%20configure%20Continuous%20Delivery%20Previe%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1688107%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F90590%22%20target%3D%22_blank%22%3E%40Sandeep%20Tammisetty%3C%2FA%3E!%3CBR%20%2F%3E%3CBR%20%2F%3EHad%20this%20issue%20as%20well%2C%3CBR%20%2F%3Eplease%20try%20the%20following%3A%3CBR%20%2F%3E%3CBR%20%2F%3E1.%20%3CSTRONG%3ETurn%20off%3C%2FSTRONG%3E%20all%20checkboxes%20in%20Azure%20DevOps%20project%20settings%20(Azure%20DevOps%20-%26gt%3B%20Project%20Settings%20-%26gt%3B%20Settings)%2C%20like%20this%20%22%3CSPAN%3ELimit%20job%20authorization%20scope%20to%20the%20current%20project%20for%20non-release%20pipelines%22%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22dkutetsky_0-1600554156380.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F219875i480A185E6A81E401%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22dkutetsky_0-1600554156380.png%22%20alt%3D%22dkutetsky_0-1600554156380.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B2.%20Try%20to%20assign%20Owner%20permission%20to%20your%20user%20(you%20can%20Elevate%20your%20permissions%20using%20this%20guide%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Frole-based-access-control%2Felevate-access-global-admin%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Frole-based-access-control%2Felevate-access-global-admin%3C%2FA%3E).%3CBR%20%2F%3E%3CBR%20%2F%3EHope%20that%20it%20will%20help%20you.%3CBR%20%2F%3ERegards%2C%26nbsp%3B%3CBR%20%2F%3EDmitry%20Kutetsky.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Visitor

Logged into Azure portal--> App Services-->Selected the Project-->Continuous Delivery Preview

I see error message "You do not have enough permissions on this App Service to setup Continuous Delivery. Learn More: https://go.microsoft.com/fwlink/?linkid=843472" and Configure button is disabled. I am the Global Administrator and why I don't had the permissions to configure, where I can assign those access.

Error message

Failed to set Azure permission 'RoleAssignmentId: 9****a' for the service principal '2****3' on subscription id '****': error code: Forbidden, innner error code: AuthorizationFailed, inner error message The client 'my mail Id' with object id '***** does not have authorization to perform action 'Microsoft.Authorization/roleAssignments/write' over scope '/subscriptions/*****'. For troubleshooting refer to link

1 Reply

Hi, @Sandeep Tammisetty!

Had this issue as well,
please try the following:

1. Turn off all checkboxes in Azure DevOps project settings (Azure DevOps -> Project Settings -> Settings), like this "Limit job authorization scope to the current project for non-release pipelines"

 

dkutetsky_0-1600554156380.png

 

 2. Try to assign Owner permission to your user (you can Elevate your permissions using this guide: https://docs.microsoft.com/en-us/azure/role-based-access-control/elevate-access-global-admin).

Hope that it will help you.
Regards, 
Dmitry Kutetsky.