Azure Powershell Job throws Error : Operation returned an invalid status code 'Forbidden'

Question

I have a command in my script called

Set-AzSqlServerActiveDirectoryAdministrator -ResourceGroupName $ResourceGroupName -ServerName $SqlServerName -DisplayName $SqlServerAdmin

I have used proper values for these parameters. Thing is this command runs perfectly when I run it from Powershell ISE, but when I do the same in Azure Powershell Task in Azure DevOps, it returns an error saying:

2020-09-18T11:02:54.0670872Z ##[error]Operation returned an invalid status code 'Forbidden'

I cant figure out what I am missing.

permission issue on the service principal running the pipeline? what are the existing permissions/roles ? — Thomas
– Thomas, Commented Sep 18, 2020 at 11:45
When I go into the Roles and Adminstrators section of the service principal, 2 are listed there : Application administrator ; Cloud application administrator — Leo2304
– Leo2304, Commented Sep 18, 2020 at 11:55
you need to grant permission to your app to manange your SQL DB. in the IAM blade of the SQL SErver resource — Thomas
– Thomas, Commented Sep 18, 2020 at 11:57
I gave Owner access to the service principal for the subscription. Still I am getting the same error — Leo2304
– Leo2304, Commented Sep 18, 2020 at 12:08

Leo2304 · Accepted Answer · 2020-09-18 12:49:45Z

I was able to find a solution for the same. We need to add the service principal to Directory readers using this command:

Add-AzureADDirectoryRoleMember -ObjectId (Get-AzureADDirectoryRole | where-object {$_.DisplayName -eq "Directory Readers"}).Objectid -RefObjectId <object-id>

Collectives™ on Stack Overflow

Azure Powershell Job throws Error : Operation returned an invalid status code 'Forbidden'

1 Answer 1

Comments

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Related