Repository navigation
unable to create sp from MacOS #18466
Copy link
Copy link
Closed
Labels
Graph(doesn't work with label-triggered comments; use Graph.Microsoft instead) az ad(doesn't work with label-triggered comments; use Graph.Microsoft instead) az adact-identity-squadfeature-request
Milestone
Description
Activity
- ghost addedneeds-triageThis is a new issue that needs to be triaged to the appropriate team.This is a new issue that needs to be triaged to the appropriate team.
on Jun 11, 2021 - ghost addedquestionThe issue doesn't require a change to the product in order to be resolved. Most issues start as thatThe issue doesn't require a change to the product in order to be resolved. Most issues start as that
on Jun 11, 2021 - addedGraph(doesn't work with label-triggered comments; use Graph.Microsoft instead) az ad(doesn't work with label-triggered comments; use Graph.Microsoft instead) az ad
on Jun 12, 2021 - ghost removedneeds-triageThis is a new issue that needs to be triaged to the appropriate team.This is a new issue that needs to be triaged to the appropriate team.
on Jun 12, 2021 - removedquestionThe issue doesn't require a change to the product in order to be resolved. Most issues start as thatThe issue doesn't require a change to the product in order to be resolved. Most issues start as that
on Jun 12, 2021 Jiashuo Li (@jiasli) for awareness
This looks likely to have been addressed by changes in this area since the report. The failure happened after the application/service principal creation step, while az ad sp create-for-rbac was performing its older role-assignment flow. Current Azure CLI no longer creates a role assignment by default when running az ad sp create-for-rbac, so the command should no longer hit this path unless role assignment is explicitly requested.
Please upgrade and retry. If service principal creation still fails on a current Azure CLI, please open a fresh issue with the exact command and --debug output.
Metadata
Metadata
Assignees
Labels
Graph(doesn't work with label-triggered comments; use Graph.Microsoft instead) az ad(doesn't work with label-triggered comments; use Graph.Microsoft instead) az adact-identity-squadfeature-request
This is autogenerated. Please review and update as needed.
Describe the bug
Command Name
az ad sp create-for-rbacErrors:
To Reproduce:
Steps to reproduce the behavior. Note that argument values have been redacted, as they may contain sensitive information.
az ad sp create-for-rbac --name {} --skip-assignmentExpected Behavior
Environment Summary
Additional Context