Role Assignment Update Not Permitted

[andre-az]

🐛 Problem

When deploying from scratch, I get the error on storage step:
"code": "RoleAssignmentUpdateNotPermitted",
"message": "Tenant ID, application ID, principal ID, and scope are not allowed to be updated."

I have UAC role and Contributor at subscription level.

I was able to deploy 0.9 before. I didn't upgrade to 0.10. Was trying to upgrade to 0.11 from 0.9 but got this error. I've deleted everything and tried again by deploying 0.11 from scratch but this error keeps happening.

👣 Repro steps

Roles: UAC and Contributor.
Deploy in an empty resource group.
No name in Fabric.
Filled in the name in ADX.

🤔 Expected

Deployment successful.

📷 Screenshots

ℹ️ Additional context

All policies were removed by our Governance team. No policy error shown for now. Just stuck at this step.

[gajendrakyndryl]

Check your access and see if there is any condition on it. I was having this error even though I was owner of the resource group, just because of conditions.
To check, you may navigate to resource group and check access for your user.

[andre-az]

Check your access and see if there is any condition on it. I was having this error even though I was owner of the resource group, just because of conditions. To check, you may navigate to resource group and check access for your user.

I tried again through a full admin, who has Owner rights with no conditions at management group level and he also gets the same error.

Timestamp: 18/06/2025, 10:33:03 (BST)
Status Message:

{
    "status": "Failed",
    "error": {
        "code": "RoleAssignmentUpdateNotPermitted",
        "message": "Tenant ID, application ID, principal ID, and scope are not allowed to be updated."
    }
}

[flanakin]

@andre-az See Common errors for the fix

#needs-info