Azure / Azure/AnalyticsinaBox

Error deploying Synapse Pattern 5 from DevOps

Open
#17 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Bicep
Stars
103
Forks
65
PR merge metrics
No merged PRs in 30d

Description

Received the following error when deploying Synapse Pattern 5 from Azure Devops

On step: Azure PowerShell script: Deploy SQL Metadata and WWI views

Fetching the key vault secrets for metadata and wwi databases
##[error]Operation returned an invalid status code 'Forbidden'
Code: Forbidden
Message: The user, group or application 'appid=***;oid={service Principal objectID};iss=https://sts.windows.net/{tenantID}/' does not have secrets get permission on key vault '{key vault name};location=westus'. For help resolving this issue, please see https://go.microsoft.com/fwlink/?linkid=2125287
##[error]PowerShell exited with code '1'.

Need to add keyvault policy for Secret Get/Set/List permissions during the deployment of key vault for the service principals objectID parameter.

This issue was able to be worked around by having the permissions manually set; however, it was very difficult because it must be applied at just the right time corresponding after the key vault is deployed but before we hit the Step above.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.