Azure / Azure/azure-rest-api-specs
Error: Microsoft.Sql/locations/managedDatabaseAzureAsyncOperation/read does not match any of the actions supported by the providers
- Dominant language
- TypeSpec
- Stars
- 3.1k
- Forks
- 5.9k
- Avg merge
- 2d 22h
- Merged PRs (30d)
- 444
Description
We have a custom RBAC role in Azure, having limited permissions. Call to create a SQL database (https://docs.microsoft.com/en-us/dotnet/api/microsoft.azure.management.sql.fluent.manageddatabasesoperationsextensions.createorupdateasync?view=azure-dotnet) ends with the following error:
`Azure cloud exception occurred (code: AuthorizationFailed, reason phrase: Forbidden, status code: Forbidden, message: The client '****' with object id '****' does not have authorization to perform action 'Microsoft.Sql/locations/managedDatabaseAzureAsyncOperation/read' over scope '/subscriptions/****/resourceGroups/****/providers/Microsoft.Sql/locations/westeurope/managedDatabaseAzureAsyncOperation/****' or the scope is invalid. If access was recently granted, please refresh your credentials.)`
However attempt to add the forementioned permission into our custom RBAC role ends with error too:
`Set-AzRoleDefinition: 'Microsoft.Sql/locations/managedDatabaseAzureAsyncOperation/read' does not match any of the actions supported by the providers.`
May I ask you assistance with this? It seems the permission returned from the API does not exist and we don't know which permission to add into our custom role to allow SQL database creation finish successfully.
Contributor guide
Research direction
Start with the Microsoft Azure SQL createOrUpdateAsync API referenced in the issue and the reported Microsoft.Sql/locations/managedDatabaseAzureAsyncOperation/read action. Compare that requested permission with the provider actions supported by the custom RBAC role workflow. Done means identifying the valid permission or documenting why the reported action is unavailable.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure, sql
- Domain
- authorization, cloud, databases
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100