Azure / Azure/azure-rest-api-specs

Error: Microsoft.Sql/locations/managedDatabaseAzureAsyncOperation/read does not match any of the actions supported by the providers

Open
#13,700 3 comments 0 reactions 0 assignees View on GitHub
Service Attention SQL
Dominant language
TypeSpec
Stars
3.1k
Forks
5.9k
Avg merge
2d 22h
Merged PRs (30d)
444

Description

We have a custom RBAC role in Azure, having limited permissions. Call to create a SQL database (https://docs.microsoft.com/en-us/dotnet/api/microsoft.azure.management.sql.fluent.manageddatabasesoperationsextensions.createorupdateasync?view=azure-dotnet) ends with the following error:

`Azure cloud exception occurred (code: AuthorizationFailed, reason phrase: Forbidden, status code: Forbidden, message: The client '****' with object id '****' does not have authorization to perform action 'Microsoft.Sql/locations/managedDatabaseAzureAsyncOperation/read' over scope '/subscriptions/****/resourceGroups/****/providers/Microsoft.Sql/locations/westeurope/managedDatabaseAzureAsyncOperation/****' or the scope is invalid. If access was recently granted, please refresh your credentials.)`

However attempt to add the forementioned permission into our custom RBAC role ends with error too:

`Set-AzRoleDefinition: 'Microsoft.Sql/locations/managedDatabaseAzureAsyncOperation/read' does not match any of the actions supported by the providers.`

May I ask you assistance with this? It seems the permission returned from the API does not exist and we don't know which permission to add into our custom role to allow SQL database creation finish successfully.

Contributor guide

Open the contributing guide

Research direction

Start with the Microsoft Azure SQL createOrUpdateAsync API referenced in the issue and the reported Microsoft.Sql/locations/managedDatabaseAzureAsyncOperation/read action. Compare that requested permission with the provider actions supported by the custom RBAC role workflow. Done means identifying the valid permission or documenting why the reported action is unavailable.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, sql
Domain
authorization, cloud, databases
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.