Error deploying Synapse Pattern 5 from DevOps
- Dominant language
- Bicep
- Stars
- 103
- Forks
- 65
- PR merge metrics
- No merged PRs in 30d
Description
Received the following error when deploying Synapse Pattern 5 from Azure Devops
On step: Azure PowerShell script: Deploy SQL Metadata and WWI views
Fetching the key vault secrets for metadata and wwi databases
##[error]Operation returned an invalid status code 'Forbidden'
Code: Forbidden
Message: The user, group or application 'appid=***;oid={service Principal objectID};iss=https://sts.windows.net/{tenantID}/' does not have secrets get permission on key vault '{key vault name};location=westus'. For help resolving this issue, please see https://go.microsoft.com/fwlink/?linkid=2125287
##[error]PowerShell exited with code '1'.
Need to add keyvault policy for Secret Get/Set/List permissions during the deployment of key vault for the service principals objectID parameter.
This issue was able to be worked around by having the permissions manually set; however, it was very difficult because it must be applied at just the right time corresponding after the key vault is deployed but before we hit the Step above.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.