I want to realize "Monitor Azure AD B2C with Azure Monitor". So, I followed the documentation and ran the command. [azure-monitor][1] As a result, an error has occurred. I'm looking for a solution. 1.Connect-AzAccount -tenant xxxx.onmicrosoft.com 2.Select-AzSubscription <subscription ID> 3.New-AzDeployment -Name "AzureADB2C" -Location "japanwest"
-TemplateFile "C:\work\rgDelegatedResourceManagement.json" -TemplateParameterFile "C:\work\rgDelegatedResourceManagement.parameters.json"
-Verbose 4.I got an error message. PS C:\WINDOWS\system32> New-AzDeployment -Name "AzureADB2C" >> -Location "japanwest"
>> -TemplateFile "C:\work\rgDelegatedResourceManagement.json" >> -TemplateParameterFile "C:\work\rgDelegatedResourceManagement.parameters.json"
>> -Verbose >> WARNING: Breaking changes in the cmdlet 'New-AzDeployment' : WARNING: - The cmdlet 'New-AzSubscriptionDeployment' is replacing this cmdlet. WARNING: NOTE : Go to https://aka.ms/azps-changewarnings for steps to suppress this breaking change warning, and other information on breaking changes in Azure PowerShell. VERBOSE: 16:00:43 - Template is valid. VERBOSE: 16:00:44 - Create template deployment 'AzureADB2C' VERBOSE: 16:00:44 - Checking deployment status in 5 seconds VERBOSE: 16:00:49 - Checking deployment status in 5 seconds VERBOSE: 16:00:54 - Resource Microsoft.ManagedServices/registrationDefinitions '27108163-xxxx-xxxx-xxxx-xxxxxxxxxxxx' provisioning status is running VERBOSE: 16:00:54 - Checking deployment status in 11 seconds VERBOSE: 16:01:05 - Checking deployment status in 5 seconds VERBOSE: 16:01:10 - Resource Microsoft.Resources/deployments 'rgAssignment' provisioning status is running New-AzDeployment : 16:01:10 - Resource Microsoft.ManagedServices/registrationAssignments '8d0b7ad5-xxxx-xxxx-xxxx-xxxxxxxxxxxx' failed with message '{ "error": { "code": "RegistrationAssignmentInvalidUpdate", "message": "Registration assignment '8d0b7ad5-xxxx-xxxx-xxxx-xxxxxxxxxxxx' not allowed to update registration definition reference." } }' At line:1 char:1 + New-AzDeployment -Name "AzureADB2C" + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [New-AzDeployment], Exception + FullyQualifiedErrorId : Microsoft.Azure.Commands.ResourceManager.Cmdlets.Implementation.NewAzureDeploymentCmdlet New-AzDeployment : 16:01:10 - Template output evaluation skipped: at least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details. At line:1 char:1 + New-AzDeployment -Name "AzureADB2C"
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [New-AzDeployment], Exception + FullyQualifiedErrorId : Microsoft.Azure.Commands.ResourceManager.Cmdlets.Implementation.NewAzureDeploymentCmdlet New-AzDeployment : 16:01:10 - Template output evaluation skipped: at least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details. At line:1 char:1 + New-AzDeployment -Name "AzureADB2C" + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [New-AzDeployment], Exception + FullyQualifiedErrorId : Microsoft.Azure.Commands.ResourceManager.Cmdlets.Implementation.NewAzureDeploymentCmdlet VERBOSE: 16:01:10 - Resource Microsoft.ManagedServices/registrationDefinitions '27108163-xxxx-xxxx-xxxx-xxxxxxxxxxxx' provisioning status is succeeded VERBOSE: 16:01:10 - Checking deployment status in 5 seconds New-AzDeployment : 16:01:16 - Resource Microsoft.Resources/deployments 'rgAssignment' failed with message '{ "status": "Failed", "error": { "code": "ResourceDeploymentFailure", "message": "The resource operation completed with terminal provisioning state 'Failed'.", "details": [ { "code": "DeploymentFailed", "message": "At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details.", "details": [ { "code": "BadRequest", "message": "{\r\n \"error\": {\r\n \"code\": \"RegistrationAssignmentInvalidUpdate\",\r\n \"message\": \"Registration assignment '8d0b7ad5-xxxx-xxxx-xxxx-xxxxxxxxxxxx' not allowed to update registration definition reference.\"\r\n }\r\n}" } ] } ] } }' At line:1 char:1 + New-AzDeployment -Name "AzureADB2C"
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [New-AzDeployment], Exception + FullyQualifiedErrorId : Microsoft.Azure.Commands.ResourceManager.Cmdlets.Implementation.NewAzureDeploymentCmdlet New-AzDeployment : 16:01:16 - At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details. At line:1 char:1 + New-AzDeployment -Name "AzureADB2C" + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [New-AzDeployment], Exception + FullyQualifiedErrorId : Microsoft.Azure.Commands.ResourceManager.Cmdlets.Implementation.NewAzureDeploymentCmdlet New-AzDeployment : 16:01:16 - Template output evaluation skipped: at least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details. At line:1 char:1 + New-AzDeployment -Name "AzureADB2C"
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [New-AzDeployment], Exception + FullyQualifiedErrorId : Microsoft.Azure.Commands.ResourceManager.Cmdlets.Implementation.NewAzureDeploymentCmdlet New-AzDeployment : 16:01:16 - Template output evaluation skipped: at least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details. At line:1 char:1 + New-AzDeployment -Name "AzureADB2C" ` + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [New-AzDeployment], Exception + FullyQualifiedErrorId : Microsoft.Azure.Commands.ResourceManager.Cmdlets.Implementation.NewAzureDeploymentCmdlet DeploymentName : AzureADB2C Location : japanwest ProvisioningState : Failed Timestamp : 2020/05/22 7:01:13 Mode : Incremental TemplateLink : Parameters : Name Type Value ===================== ========================= ========== mspOfferName String Azure AD B2C Managed Services mspOfferDescription String Enables Azure Monitor in Azure AD B2C managedByTenantId String xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx authorizations Array [ { "principalId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx", "roleDefinitionId": "b24988ac-6180-42a0-ab88-20f7382dd24c", "principalIdDisplayName": "Azure AD B2C tenant administrator" } ] rgName String rg-xxx Outputs : DeploymentDebugLogLevel : [8537-rgdelegatedresourcemanagementjson.txt][2] [8538-rgdelegatedresourcemanagementparametersjson.txt][3] [1]: https://learn.microsoft.com/en-us/azure/active-directory-b2c/azure-monitor#deploy-the-azure-resource-manager-templates [2]: /api/attachments/8537-rgdelegatedresourcemanagementjson.txt?platform=QnA [3]: /api/attachments/8538-rgdelegatedresourcemanagementparametersjson.txt?platform=QnA