Unable to add users to Application Groups using Modern WVD Admin console

[Sutha670]

Hello Guys,

Starting to look into the new deployment & management portal introduced in end of April 2020:

https://www.microsoft.com/en-us/microsoft-365/blog/2020/04/30/enable-remote-work-faster-new-windows-...

Started to play with and successfully created WVD pools and now facing issue when wanted to assign users to remote desktop the vm in that pool using Application Groups.

In fact, when trying to assign a user to an application group, the following error message is thrown:

{"details":[{"code":"InvalidTemplateDeployment","message":"{\"content\":{\"error\":{\"code\":\"AuthorizationFailed\",\"message\":\"The client '[redacted]' with object id 'f1a4cbe1-3c75-4c9a-93ee-8e098841bcba' does not have authorization to perform action 'Microsoft.Authorization/roleAssignments/write' over scope '/subscriptions/[redacted]/resourceGroups/[redacted]/providers/Microsoft.DesktopVirtualization/applicationgroups/[redacted]/providers/Microsoft.Authorization/roleAssignments/0aa9cdd7-0e9f-48d2-b711-e1d90aacb03c' or the scope is invalid. If access was recently granted, please refresh your credentials.\"}},\"headers\":{\"cache-control\":\"no-cache\",\"content-length\":\"608\",\"content-type\":\"application/json; charset=utf-8\",\"expires\":\"-1\",\"pragma\":\"no-cache\",\"x-ms-correlation-request-id\":\"31cd6312-fb7d-47eb-8e31-b211b3d3cc9a\",\"x-ms-failure-cause\":\"gateway\",\"x-ms-request-id\":\"31cd6312-fb7d-47eb-8e31-b211b3d3cc9a\",\"x-ms-routing-request-id\":\"FRANCECENTRAL:20200513T122722Z:31cd6312-fb7d-47eb-8e31-b211b3d3cc9a\"},\"httpStatusCode\":403}","target":"0aa9cdd7-0e9f-48d2-b711-e1d90aacb03c"}]}

Any idea why this happens?

[#2]

Can you please check if you are the owner of your resource group? go to the resource group that contains your WVD deployment, select Access Control, Role Assignment Tab, make sure you see your name and your role is Owner.
if you're not the owner, then you'll need to ask your azure subscription administrator to add you as owner to your resource group.

[#3]

@Soo Kuan Teo 

Thank you for your response.

I see my account that i used to provision WVD and I inherit the permission through the Contributor role for the subscription "Pay-As-You-Go".

Does this mean only users with Owner role can use the modern WVD admin console?

Another question, when i try to list pools using powershell, i do not see the pools created using the modern console either under the RDS tenant. Is there a specific way to look into please?

[#4 · Accepted solution]

yes, you need to have owner role for the resource group to be able to add user assignment.
what powershell command you used to list pools? Make sure you use the latest powershell module for WVD deployment that is created with the modern console:
https://docs.microsoft.com/en-us/azure/virtual-desktop/powershell-module

[#5]

Thanks a lot Soo Kuan Teo.