Problem: Configure Session Host RBAC Permission for WVD MSIX App Atache

%3CLINGO-SUB%20id%3D%22lingo-sub-2151910%22%20slang%3D%22en-US%22%3EProblem%3A%20Configure%20Session%20Host%20RBAC%20Permission%20for%20WVD%20MSIX%20App%20Atache%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2151910%22%20slang%3D%22en-US%22%3EHi%2C%3CBR%20%2F%3E%3CBR%20%2F%3Ei%E2%80%98m%20trying%20to%20setup%20MSIX%20AppAtache%20in%20My%20Demo%20Environment.%20The%20WVD%20Service%20is%20Setup%20using%20Azure%20AD%20Domain%20Services.%3CBR%20%2F%3E%3CBR%20%2F%3EI%E2%80%98m%20now%20stuck%20at%20the%20point%2C%20where%20i%20need%20do%20grand%20RBAC%20Permission%20(for%20Session%20Hosts)%20to%20the%20Azure%20File%20Share.%3CBR%20%2F%3E-%20i%20created%20the%20group%20AADS_SessionHosts%20in%20the%20Azure%20AD%3CBR%20%2F%3E-%20When%20i%20try%20to%20ad%20the%20SessionHost%20Computer%20Objects%20in%20the%20Azure%20AD%20Domain%20Services%2C%20to%20this%20group%20an%20Error%20occurse.%20Error%20Message%20%3D%20Not%20the%20Right%20Permissions.%20But%20i%E2%80%98m%20loged%20in%20with%20my%20AADDS%20Administrator%20Account.%3CBR%20%2F%3E%3CBR%20%2F%3EIs%20there%20anybody%20who%20can%20give%20an%20advise%20how%20to%20solve%20this%20one%20%3F%3CBR%20%2F%3E%3CBR%20%2F%3EHave%20a%20Great%20Weekend!%3CBR%20%2F%3ECheers.!%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2151910%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAADDS%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAzure%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMSIX%20App%20Atache%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ERBAC%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWVD%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2154926%22%20slang%3D%22en-US%22%3ERe%3A%20Problem%3A%20Configure%20Session%20Host%20RBAC%20Permission%20for%20WVD%20MSIX%20App%20Atache%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2154926%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F406996%22%20target%3D%22_blank%22%3E%40underdog1170%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHave%20you%20tried%20giving%20the%20AAD%20group%20with%20the%20session%20hosts%20in%20it%20the%20correct%20permissions%20on%20the%20storage%20account%3F%20That%20should%20work.%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor
Hi,

i‘m trying to setup MSIX AppAtache in My Demo Environment. The WVD Service is Setup using Azure AD Domain Services.

I‘m now stuck at the point, where i need do grand RBAC Permission (for Session Hosts) to the Azure File Share.
- i created the group AADS_SessionHosts in the Azure AD
- When i try to ad the SessionHost Computer Objects in the Azure AD Domain Services, to this group an Error occurse. Error Message = Not the Right Permissions. But i‘m loged in with my AADDS Administrator Account.

Is there anybody who can give an advise how to solve this one ?

Have a Great Weekend!
Cheers.!
2 Replies

@underdog1170 

Have you tried giving the AAD group with the session hosts in it the correct permissions on the storage account? That should work.

Yes, the AAD Group has permissions on the Storage Account. My Problem is that i can not add the Session Hosts to the AAD Group. Regarding the Message „Not sufficient rights“ when configuring the Computer Objects (add to AAD Group) in AADDS.