Error when deploying an Azure Landing Zone template!

Sarah Lean -

I was recently testing out some of the Enterprise-Scale Landing Zones templates and trying to deploy them to answer some questions I had been sent by someone. And I hit a snag at the first hurdle!

The client 'live.com#*****@***.com' with object id 'subid-xxxx-xxxx-xxxx-xxxxxxx' does not have authorization to perform action 'Microsoft.Resources/deployments/validate/action' over scope '/providers/Microsoft.Resources/deployments/NoMarketplace-20210322140411' or the scope is invalid. If access was recently granted, please refresh your credentials. (Code: AuthorizationFailed)

Now I'm going to fully admit this error could have been avoided if I had read the documentation fully before hitting the deploy to Azure button.  However, I wanted to document this in case someone else hit the same snag, or even if I hit the same snag again. 😉

What I had to do to fix it was this:

  • Head into the Azure Portal and open Azure Active Directory
  • Under the Manage section select Properties
  • Under Access management for Azure resources, set the toggle to Yes.

As simple as that. 😉

If you are trying to deploy the Enterprise-Scale Landing Zone templates, be sure to check out the full documentation the team have prepared and you'll avoid issues like these. 👍