User permissions error Azure Autoscale

Juan Pablo Delgadillo Martinez 66

Hello everyone

I'm creating an AVD environment, everything is fine at the time of creation, however when assigning the hostpool to the autoscale, this indicates a permissions error

ActivityId: id error Error: ≤{"error":{"code":"BadRequest","message":"unable to access host pool with name 'Hostpool', please make sure that you have given the Azure Virtual Desktop service permissions to access your resource (https://docs.microsoft.com/en-us/azure/virtual-desktop/autoscale-scaling-plan#create-a-custom-rbac-role))","target":"/api/scalingPlans/subscriptions/

I have owner permissions, user access administrator, add me some additional permissions to turn on and off machines

And I still can't assign it

Sai Krishna Katakam 785 Reputation points Microsoft Vendor

2024-11-05T16:21:46.9033333+00:00

Hi Juan Pablo Delgadillo Martinez,

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

It looks like the permissions error is due to missing specific permissions for managing Azure Virtual Desktop (AVD) scaling plans, which aren't fully covered by the Owner or User Access Administrator roles. To resolve this, ensure you have these permissions:

Microsoft.DesktopVirtualization/hostPools/read

Microsoft.DesktopVirtualization/scalingPlans/read, write, delete

Microsoft.Insights/autoscaleSettings/read, write, delete

You may need to create a custom RBAC role with these permissions.

For details, refer to the documentation: Creating a Custom RBAC Role for Scaling Plans.

If you have any further queries, do let us know. If the comment is helpful, please click "Upvote".
Juan Pablo Delgadillo Martinez 66 Reputation points

2024-11-05T19:09:57.32+00:00

Thank you very much, I am just trying to create the role, but it tells me an error, since I cannot create the role due to lack of permissions in the subscription even though I am the owner.
Sai Krishna Katakam 785 Reputation points Microsoft Vendor

2024-11-06T12:34:38.44+00:00

Hi Juan Pablo Delgadillo Martinez,

As an Owner, you should typically be able to create custom roles. However, if you’re seeing a permissions issue, it’s possible that the Role Management permissions are restricted at a higher level (such as the Azure AD tenant level) or by policies on your subscription.

Please try the following steps:

Check if your Azure AD administrator has enabled the ability for Owners to create custom roles. This setting may need to be adjusted in Azure Active Directory.

If you’re still unable to create the role, you may need assistance from a subscription administrator or someone with elevated directory-level permissions to create this custom role on your behalf.

For additional details, refer to Azure role-based access control (RBAC) documentation

If you have any further queries, do let us know. If the comment is helpful, please click "Upvote".
Sai Krishna Katakam 785 Reputation points Microsoft Vendor

2024-11-07T10:16:40.5233333+00:00

Hi Juan Pablo Delgadillo Martinez,

Just checking in to see if you had a chance to review my comment on your question. Please let us know if it was helpful and feel free to reach out if you have any further queries.

If you found the information useful, please click "Upvote" on the post to let us know.

Thank You.
Sai Krishna Katakam 785 Reputation points Microsoft Vendor

2024-11-08T10:51:11.5233333+00:00

Hi Juan Pablo Delgadillo Martinez,

I wanted to check if you had the opportunity to review the information which was provided in my previous posted comment.

If it was helpful, please click "Upvote" on his post to let us know.

Thank You.
Juan Pablo Delgadillo Martinez 66 Reputation points

2024-11-08T14:38:39.1466667+00:00

Hello, I have not been able to solve it yet. I added the Owner, Collaborator, User Access Administrator, PowerOnOff Virtual Machines permissions and from the permissions, I was able to add them except for:

Microsoft.DesktopVirtualization/escaladoPlanes/read, write, delete

Microsoft.Insights/autoscaleSettings/read, write, delete

I tried to add them via Powershell and it cannot find them immediately it tells me error not found, and if I try with /autoscalesetgtings/* it tells me the same thing.

I still cannot create custom roles through the subscription only via PowerShell, my account is the only one that has elevated permissions.

Checking other subscriptions I do not have that problem
Sai Krishna Katakam 785 Reputation points Microsoft Vendor

2024-11-11T16:21:12.31+00:00
Hi Juan Pablo Delgadillo Martinez,

It looks like the issue is due to an incorrect permission name. Specifically, Microsoft.DesktopVirtualization/escaladoPlanes is incorrect due to a language mismatch. The correct permissions you need to add are:

Microsoft.DesktopVirtualization/scalingPlans/read

Microsoft.DesktopVirtualization/scalingPlans/write

Microsoft.DesktopVirtualization/scalingPlans/delete

Microsoft.Insights/autoscaleSettings/read

Microsoft.Insights/autoscaleSettings/write

Microsoft.Insights/autoscaleSettings/delete

Please ensure these exact permissions are used when creating the custom role. If you continue to encounter issues with PowerShell, you can also try creating the custom role via Azure CLI using the following command:

az role definition create --role-definition '{ "Name": "AVD Scaling Plan Custom Role", "IsCustom": true, "Description": "Role for managing AVD scaling plans", "Actions": [ "Microsoft.DesktopVirtualization/scalingPlans/read", "Microsoft.DesktopVirtualization/scalingPlans/write", "Microsoft.DesktopVirtualization/scalingPlans/delete", "Microsoft.Insights/autoscaleSettings/read", "Microsoft.Insights/autoscaleSettings/write", "Microsoft.Insights/autoscaleSettings/delete" ], "AssignableScopes": ["/subscriptions/YOUR_SUBSCRIPTION_ID"] }'

Additionally, if you continue to face issues, ensure that your subscription allows for custom role creation and check for any potential Azure policy restrictions.

For more details, refer to these Microsoft documents:
Create and assign an autoscale scaling plan for Azure Virtual Desktop
Create or update Azure custom roles using the Azure portal

If you found the information useful, please click "Upvote" on the post to let us know.
Sai Krishna Katakam 785 Reputation points Microsoft Vendor

2024-11-12T08:30:08.9766667+00:00

Hi Juan Pablo Delgadillo Martinez,

Just checking in to see if you had a chance to review my comment on your question. Please let us know if it was helpful and feel free to reach out if you have any further queries.

If you found the information useful, please click "Upvote" on the post to let us know.

Thank You.

Share via

User permissions error Azure Autoscale

Your answer