Authorization failed when trying to create an az vm during a course

Question

When trying to do the exercise in the module: https://learn.microsoft.com/en-us/training/modules/describe-azure-compute-networking-services/3-exercise-create-azure-virtual-machine, I was given the following error:

(AuthorizationFailed) The client '******@kyndryl.com' with object id '1f49acb7-9a67-45d6-bdcd-1dc9fb567d50' does not have authorization to perform action 'Microsoft.Resources/subscriptions/resourcegroups/read' over scope '/subscriptions/9e2deb73-2f73-46d9-96f9-f94827200755/resourcegroups/learn-147e6f29-60f7-45d8-ae90-425c583c6d65' or the scope is invalid. If access was recently granted, please refresh your credentials.

Code: AuthorizationFailed

Message: The client '******@kyndryl.com' with object id '1f49acb7-9a67-45d6-bdcd-1dc9fb567d50' does not have authorization to perform action 'Microsoft.Resources/subscriptions/resourcegroups/read' over scope '/subscriptions/9e2deb73-2f73-46d9-96f9-f94827200755/resourcegroups/learn-147e6f29-60f7-45d8-ae90-425c583c6d65' or the scope is invalid. If access was recently granted, please refresh your credentials.

Could you please help me resolve the issue?

This question is related to the following Learning Module

Answer 1

Hi MYRON ANAGNOSTAKIS,
Thank you for reaching out to us on the Microsoft Q&A forum.

We understand that you're facing issues while trying to create a VM in the sandbox as part of the "Describe Azure compute and networking services" module.

Here are a few troubleshooting steps that might help resolve the issue:

1. Sign Out of the Azure Portal: Please make sure to completely sign out from the Azure portal used in the previous module, "Exercise - Create an Azure resource." This portal has an active Microsoft Learn sandbox directory with a Concierge subscription.
2. Sign Out of Azure Cloud Shell: Fully sign out from the Azure Cloud Shell sandbox or wait for the sandbox activation time to expire.
3. Activate a New Sandbox: Click on "Activate Sandbox" to start a new sandbox session. This will generate a default subscription called "Concierge subscription" along with a default resource group name starting with "learn." To avoid any browser-related issues, we suggest using a different browser or opening an incognito/private window.
4. Check Resource Group Name: Once you've signed back into the Azure portal, verify that the resource group name you're using in the "az vm create" command matches the one shown in the portal for your sandbox environment.
5. Refresh the Sandbox Environment: Since you may not have the permissions required to modify the sandbox environment and the error suggests an authorization issue, the best solution would be to refresh the Microsoft Learn sandbox environment. This will recreate the environment with the necessary permissions.
6. Follow Microsoft Learn Instructions: Be sure to follow the instructions provided in the Microsoft Learn exercise. These steps are specifically designed for the sandbox environment and often use Cloud Shell commands to avoid any permission issues. Ensure you're running the Azure CLI commands in the correct directory (Microsoft Learn Sandbox) and with the correct subscription selected.

Please note that the sandbox environment's permissions are preset and cannot be modified by users. The Concierge Subscription is automatically created for sandbox environments to provide the necessary resources, and due to the nature of this setup, deletion or modification of the subscription is restricted.

If you continue to experience any issues, feel free to share your concerns in the comments. We are here to assist you.

If you find this information helpful, please consider acknowledging it by clicking the "Upvote" and "Accept Answer" buttons.