Citrix DAAS: After creating machine Catalog, VDAs gets deleted after Turning them ON in Azure

Citrix DAAS: After creating machine Catalog, VDAs gets deleted after Turning them ON in Azure

book

Article ID: CTX691486

calendar_today

Updated On:

Description

After creating Machine Catalog and Delivery Group, VDAs would get deleted after turning them ON in Azure.

These happens to Windows 11 Single and Multi session VDAs

 

Error:

FailureMessage: Error starting machine. At least one resource deployment operation failed.

 

{"status":"Failed","error":{"code":"DeploymentFailed","target":"/subscriptions/...................","message":"At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/arm-deployment-operations for usage details.","details":[{"code":"LinkedAuthorizationFailed","message":"XXXXX'...................... with object id 'xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxx' has permission to perform action 'Microsoft.Insights/diagnosticSettings/write' on scope '/subscriptions/..................../resourcegroups/.............../Microsoft.Compute/virtualMachines/................./providers/Microsoft.Insights/diagnosticSettings/setbypolicy'; however, it does not have permission to perform action(s) 'Microsoft.OperationalInsights/workspaces/sharedKeys/action' on the linked scope(s) '/subscriptions/..................../resourcegroups/.................' (respectively) or the linked scope(s) are invalid."}]}}

Resolution

Grant the service principal permissions to use the resource that's mentioned in the error message. 

 

Engage Azure Admin to assign the permission missing for SPN

 

 


Problem Cause

Insufficient permissions

Additional Information

https://learn.microsoft.com/en-us/troubleshoot/azure/azure-kubernetes/create-upgrade-delete/error-code-linkedauthorizationfailed