| **LinkedAuthorizationFailed** | Service principal lacks permission to use a linked resource required for deployment | This error occurs when a service principal doesn't have permission to perform an action on a linked resource that is required for the operation (e.g., cluster creation).<br><br>**Common causes:**<br><ul><li>The service principal has permission on the primary resource but lacks permission on the linked scope</li><li>Missing role assignment for operations like `Microsoft.Network/ddosProtectionPlans/join/action`</li></ul><br>**Resolution:**<br><ul><li>Identify the **service principal**, **resource**, and **operation** from the error message</li><li>Grant the service principal the required permissions on the linked resource</li><li>Use [Assign Azure roles using the Azure portal](https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal) to add the role assignment</li><li>For more details, refer to [LinkedAuthorizationFailed error](https://learn.microsoft.com/en-us/troubleshoot/azure/azure-kubernetes/error-codes/linkedauthorizationfailed-error)</li></ul> |
0 commit comments