permissions for New-AzAKSCluster

Stefan Kiessig 40

Hello, I have 2 Azure environments (different Tennant / Subscription). In the first Tennant the script is running

New-AzKeyVault ...
New-AzAKSCluster ...

without any problems...

In the 2nd environment,

New-AzKeyvault ...

runs perfect and creates the keyvault.

But with

New-AzAKSCluster ...

I get the error.

“code": ”Authorization_RequestDenied” “message": ”Insufficient privileges to complete the operation.”

In both environments I am the owner of the subscription.

How can I solve the problem?

Thank you for your support.

Markapuram Sudheer Reddy 825 Reputation points Microsoft Vendor

2025-02-18T19:40:11.0533333+00:00

Hi Stefan Kiessig,

Thank You for reaching out to Microsoft Q&A forum.

In the Azure portal, try to select your subscription and go to Access Control (IAM) and check role assignments in your subscription and ensure your Service Principal has at least Contributor role.

Please check your Subscription1 permissions role assignments and try to replicate in subscription2.

Ans also please check Microsoft.ContainerService resource provider is registered in your subscription. Go to your subscription, select settings and click on resource provider and register Microsoft.ContainerService if not registered.

If the information is helpful, please click on "Upvote".

If you have any queries, please do let us know, we will help you.
Stefan Kiessig 40 Reputation points

2025-02-18T22:43:29.9933333+00:00

Thank you. I will test it tomorrow.

In both environments I can create an AKS cluster with the portal. The error, I describe, comes only when I try to create AKS cluster via script.
Markapuram Sudheer Reddy 825 Reputation points Microsoft Vendor

2025-02-20T15:37:12.09+00:00

Hi Stefan Kiessig,

I wanted to follow up regarding my previous response to your query. If you found the information is helpful, please click on "Upvote".

If you have any questions, please do let us know, we will help you.

Your answer