Azure / Azure/azure-cli

Role 'Directory readers' doesn't exist.

Open
#21,961 9 comments 3 reactions 1 assignee Assigned to @jiasli View on GitHub
act-identity-squad Auto-Assign customer-reported feature-request RBAC
Dominant language
Python
Stars
4.6k
Forks
3.5k
Avg merge
3d 2h
Merged PRs (30d)
60

Description

## Describe the bug
Unable to create role assignment for Directory Readers via CLI. Was able to create via Portal.

**Command Name**
`az role assignment create`

**Errors:**
```
The specified role definition with ID '88d8e3e38f554a1e953a9b9898b8876b' does not exist.

```

## To Reproduce:
Steps to reproduce the behavior. Note that argument values have been redacted, as they may contain sensitive information.

- `az role assignment create --assignee {} --role 88d8e3e38f554a1e953a9b9898b8876b`

## Expected Behavior

Role assignment is created.

## Environment Summary
```
Linux-5.4.0-1074-azure-x86_64-with-glibc2.28 (Cloud Shell), Common Base Linux Delridge (quinault)
Python 3.8.12
Installer: DEB

azure-cli 2.35.0

Extensions:
ai-examples 0.2.5
ssh 1.0.1

Dependencies:
msal 1.17.0
azure-mgmt-resource 20.0.0
```
## Additional Context

This happens whether I put the ID or the name, e.g. "Directory Readers".

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.