An error occurred in Delegate resource management

Anonymous
2020-05-22T07:28:47.277+00:00

I want to realize "Monitor Azure AD B2C with Azure Monitor". So, I followed the documentation and ran the command. [azure-monitor][1] As a result, an error has occurred. I'm looking for a solution. 1.Connect-AzAccount -tenant xxxx.onmicrosoft.com 2.Select-AzSubscription <subscription ID> 3.New-AzDeployment -Name "AzureADB2C" -Location "japanwest" -TemplateFile "C:\work\rgDelegatedResourceManagement.json" -TemplateParameterFile "C:\work\rgDelegatedResourceManagement.parameters.json" -Verbose 4.I got an error message. PS C:\WINDOWS\system32> New-AzDeployment -Name "AzureADB2C" >> -Location "japanwest" >> -TemplateFile "C:\work\rgDelegatedResourceManagement.json" >> -TemplateParameterFile "C:\work\rgDelegatedResourceManagement.parameters.json" >> -Verbose >> WARNING: Breaking changes in the cmdlet 'New-AzDeployment' : WARNING: - The cmdlet 'New-AzSubscriptionDeployment' is replacing this cmdlet. WARNING: NOTE : Go to https://aka.ms/azps-changewarnings for steps to suppress this breaking change warning, and other information on breaking changes in Azure PowerShell. VERBOSE: 16:00:43 - Template is valid. VERBOSE: 16:00:44 - Create template deployment 'AzureADB2C' VERBOSE: 16:00:44 - Checking deployment status in 5 seconds VERBOSE: 16:00:49 - Checking deployment status in 5 seconds VERBOSE: 16:00:54 - Resource Microsoft.ManagedServices/registrationDefinitions '27108163-xxxx-xxxx-xxxx-xxxxxxxxxxxx' provisioning status is running VERBOSE: 16:00:54 - Checking deployment status in 11 seconds VERBOSE: 16:01:05 - Checking deployment status in 5 seconds VERBOSE: 16:01:10 - Resource Microsoft.Resources/deployments 'rgAssignment' provisioning status is running New-AzDeployment : 16:01:10 - Resource Microsoft.ManagedServices/registrationAssignments '8d0b7ad5-xxxx-xxxx-xxxx-xxxxxxxxxxxx' failed with message '{ "error": { "code": "RegistrationAssignmentInvalidUpdate", "message": "Registration assignment '8d0b7ad5-xxxx-xxxx-xxxx-xxxxxxxxxxxx' not allowed to update registration definition reference." } }' At line:1 char:1 + New-AzDeployment -Name "AzureADB2C" + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [New-AzDeployment], Exception + FullyQualifiedErrorId : Microsoft.Azure.Commands.ResourceManager.Cmdlets.Implementation.NewAzureDeploymentCmdlet New-AzDeployment : 16:01:10 - Template output evaluation skipped: at least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details. At line:1 char:1 + New-AzDeployment -Name "AzureADB2C" + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [New-AzDeployment], Exception + FullyQualifiedErrorId : Microsoft.Azure.Commands.ResourceManager.Cmdlets.Implementation.NewAzureDeploymentCmdlet New-AzDeployment : 16:01:10 - Template output evaluation skipped: at least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details. At line:1 char:1 + New-AzDeployment -Name "AzureADB2C" + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [New-AzDeployment], Exception + FullyQualifiedErrorId : Microsoft.Azure.Commands.ResourceManager.Cmdlets.Implementation.NewAzureDeploymentCmdlet VERBOSE: 16:01:10 - Resource Microsoft.ManagedServices/registrationDefinitions '27108163-xxxx-xxxx-xxxx-xxxxxxxxxxxx' provisioning status is succeeded VERBOSE: 16:01:10 - Checking deployment status in 5 seconds New-AzDeployment : 16:01:16 - Resource Microsoft.Resources/deployments 'rgAssignment' failed with message '{ "status": "Failed", "error": { "code": "ResourceDeploymentFailure", "message": "The resource operation completed with terminal provisioning state 'Failed'.", "details": [ { "code": "DeploymentFailed", "message": "At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details.", "details": [ { "code": "BadRequest", "message": "{\r\n \"error\": {\r\n \"code\": \"RegistrationAssignmentInvalidUpdate\",\r\n \"message\": \"Registration assignment '8d0b7ad5-xxxx-xxxx-xxxx-xxxxxxxxxxxx' not allowed to update registration definition reference.\"\r\n }\r\n}" } ] } ] } }' At line:1 char:1 + New-AzDeployment -Name "AzureADB2C" + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [New-AzDeployment], Exception + FullyQualifiedErrorId : Microsoft.Azure.Commands.ResourceManager.Cmdlets.Implementation.NewAzureDeploymentCmdlet New-AzDeployment : 16:01:16 - At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details. At line:1 char:1 + New-AzDeployment -Name "AzureADB2C" + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [New-AzDeployment], Exception + FullyQualifiedErrorId : Microsoft.Azure.Commands.ResourceManager.Cmdlets.Implementation.NewAzureDeploymentCmdlet New-AzDeployment : 16:01:16 - Template output evaluation skipped: at least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details. At line:1 char:1 + New-AzDeployment -Name "AzureADB2C" + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [New-AzDeployment], Exception + FullyQualifiedErrorId : Microsoft.Azure.Commands.ResourceManager.Cmdlets.Implementation.NewAzureDeploymentCmdlet New-AzDeployment : 16:01:16 - Template output evaluation skipped: at least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details. At line:1 char:1 + New-AzDeployment -Name "AzureADB2C" ` + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [New-AzDeployment], Exception + FullyQualifiedErrorId : Microsoft.Azure.Commands.ResourceManager.Cmdlets.Implementation.NewAzureDeploymentCmdlet DeploymentName : AzureADB2C Location : japanwest ProvisioningState : Failed Timestamp : 2020/05/22 7:01:13 Mode : Incremental TemplateLink : Parameters : Name Type Value ===================== ========================= ========== mspOfferName String Azure AD B2C Managed Services mspOfferDescription String Enables Azure Monitor in Azure AD B2C managedByTenantId String xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx authorizations Array [ { "principalId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx", "roleDefinitionId": "b24988ac-6180-42a0-ab88-20f7382dd24c", "principalIdDisplayName": "Azure AD B2C tenant administrator" } ] rgName String rg-xxx Outputs : DeploymentDebugLogLevel : [8537-rgdelegatedresourcemanagementjson.txt][2] [8538-rgdelegatedresourcemanagementparametersjson.txt][3] [1]: https://learn.microsoft.com/en-us/azure/active-directory-b2c/azure-monitor#deploy-the-azure-resource-manager-templates [2]: /api/attachments/8537-rgdelegatedresourcemanagementjson.txt?platform=QnA [3]: /api/attachments/8538-rgdelegatedresourcemanagementparametersjson.txt?platform=QnA

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
3,008 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. AmanpreetSingh-MSFT 56,741 Reputation points
    2020-05-22T14:38:34.89+00:00

    Hi anonymous user-7828,

    As per the error: At least one resource deployment operation failed. Please view deployment history and fix the error that you see in operation details as mentioned here: https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/deployment-history?tabs=azure-portal.

    -----------------------------------------------------------------------------------------------------------

    Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.