Add something to FAQ to address scoping service principal access rights.
11:19 AM: Man I had a tough one, user has multiple subs and they only have owner in one of them, so the SP creation was failing trying to create rbac in all subscriptions. Took a while to figure out the problem, but just had to use the "--scope /subscriptions/{SubID}" to create the SP and it worked.
Me (to Organizers and Panelists Only):
11:21 AM: nice, we can add that to the faq
Barry Tulchinsky (to Organizers and Panelists Only):
11:21 AM: Isn't it scoped to the subscription by default? Unless the owner needed to create it for all the subscriptions?
Matthew Blessing (to Organizers and Panelists Only):
11:23 AM: The SP is in AAD but when you don't specify the scope option, it gives rbac in all subscriptions managed by AAD. Single sub environments, easy, and most have owner of all subs if they are the admins.
Add something to FAQ to address scoping service principal access rights.
11:19 AM: Man I had a tough one, user has multiple subs and they only have owner in one of them, so the SP creation was failing trying to create rbac in all subscriptions. Took a while to figure out the problem, but just had to use the "--scope /subscriptions/{SubID}" to create the SP and it worked.
Me (to Organizers and Panelists Only):
11:21 AM: nice, we can add that to the faq
Barry Tulchinsky (to Organizers and Panelists Only):
11:21 AM: Isn't it scoped to the subscription by default? Unless the owner needed to create it for all the subscriptions?
Matthew Blessing (to Organizers and Panelists Only):
11:23 AM: The SP is in AAD but when you don't specify the scope option, it gives rbac in all subscriptions managed by AAD. Single sub environments, easy, and most have owner of all subs if they are the admins.