Creating or updating an assignment using REST API about azure-blueprints HOT 3 OPEN

Would it be possible for you to open a support case to get this resolved? I suspect we will need to do some digging on our side to find out what is happening and support will be able to help you get all the details we need to investigate.

from azure-blueprints.

Seems that problem is still relevant - got the same deploying Blueprint using Azure Cli (updating existing assignment). Solved manually granting owner rights to Azure Blueprints SP:

• get Azure Blueprints SP Id
  az ad sp show --id f71766dc-90d9-4b7d-bd9d-4499c4331c3f --query "id"
• get your subscription id (choose needed from list)
  az account list --query "[].{name:name, id:id}" --output tsv
• grant owner permissions
  az role assignment create --assignee "_Blueprints_SP_Id_" --role "Owner" --subscription "_Subscription_Id_"
  After procedure I made assignment update from Azure Cli work again.

from azure-blueprints.

I had this issue as well, I think the azure deployment error should have a link here.

https://learn.microsoft.com/en-us/azure/governance/blueprints/overview

If using a system-assigned managed identity, the service principal for Azure Blueprints requires the Owner role on the assigned subscription in order to enable deployment. If using the portal, this role is automatically granted and revoked for the deployment. If using the REST API, this role must be manually granted, but is still automatically revoked after the deployment completes. If using a user-assigned managed identity, only the user creating the blueprint assignment needs the Microsoft.Blueprint/blueprintAssignments/write permission, which is included in both the Owner and Blueprint Operator built-in roles.

from azure-blueprints.