Create Custom Role

Question

I have the following error when creating a custom role:

with object id 26f83ad1-0683-493e-a0f1-fceSfc67332* does not have authorization to perform action Microsoft. Authorization/roleDefinitions/write over scope /providers/Microsoft.Authorization/roleDefinitions/subscription or the scope is invalid. If access was recently

cranted, please retrech vour credentials.

I am the owner of the portal and it does not allow me to create these roles even if they are basic roles like "Microsoft.Storage/*/read", it does not allow me to add them

Answer 1

Check your role access against one of the subscriptions.

https://learn.microsoft.com/en-us/azure/role-based-access-control/check-access

Answer 2

Hi @Juan Pablo Delgadillo Martinez

Thank you for posting this in Microsoft Q&A.

I understand that you are creating Azure custom roles but are encountering an authorization error.

To create Azure custom roles, you need either the Owner or User Access Administrator role.

As you mentioned, you are the owner of the portal. However, please ensure that your account has the necessary permissions to create custom roles.

Make sure you are attempting to create the role at the correct scope. The error message suggests that the scope you are using may be invalid or that you lack permissions for it.

https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles-portal

If you are still encountering issues, please try creating the custom role using Azure PowerShell or Azure CLI instead of the Azure portal.

For your reference:
https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles-powershell
https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles-cli

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.