Skip to content

Storage Account Permissions for Event Hub #2

@blgorman

Description

@blgorman

The build is failing because the storage account does not let the deployment ID have access to complete the operation.

The fix:

  • Get the deployment Managed Identity in the IAC
  • Use the managed identity ID to grant Storage Blob Data Contributor role to the hub identity on the capture storage account

Note: This is not related to the EVENT HUB ID. It is the deployment ID that needs to specfically get Blob Storage Contributor role assigned to it on the specific storage account.

What's interesting if you run this as an owner on the subscription under your own ID, this doesn't happen. However, using the build causes this problem

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions