Azure unable to create a run as account

Question

Azure Run As account creation error An error occurred while creating the Azure Run As account for account 'xxxxxxxxxx'. Error details: You don't have enough permissions to access service principal needed for the Run as account in the AAD tenant. See https://aka.ms/AARunAsPermissions for more details.

dc

Answer 1

I think your error message has clearly stated your problem, and you need to grant the account the subscription RBAC owner role.

Use the subscription administrator account to log in to the Azure portal> Subscriptions > your Subscriptions

In addition, you also need to ensure that you have the permission to create AAD applications. Use the tenant administrator to log in to Azure portal> Azure AD > User settings and set Users can register applications to Yes .