Azure DevOps agent configuration successfully connects to the server, but then fails with "Error VS30063: You are not authorized to access..."

Question

I have installed Azure DevOps agent on my laptop and am trying to configure it. It does connect to the Azure server, and I see it on the server appearing in the list of agents, but then config.cmd fails with error VS30063:

PS C:\agent> ./config.cmd

>> Connect:

Enter server URL > https://myazuredevops.com
Enter authentication type (press enter for PAT) >
Enter personal access token > ****************************************************
Connecting to server ...

>> Register Agent:

Enter agent pool (press enter for default) >
Enter agent name (press enter for WINDOWS-NKCBPLC) >
Scanning for tool capabilities.
Connecting to the server.
Enter replace? (Y/N) (press enter for N) > y
Successfully replaced the agent
Testing agent connection.
VS30063: You are not authorized to access  https://myazuredevops.com.

The log file contains the following lines:

......
[2020-08-26 10:56:13Z INFO ConfigurationManager] Agent server url resolve by  server: 'https://myazuredevops.com/'.
[2020-08-26 10:56:13Z INFO ConfigurationStore] Saving OAuth credential @ C:\agent\.credentials
[2020-08-26 10:56:13Z INFO ConfigurationStore] Credentials Saved.
[2020-08-26 10:56:14Z INFO Terminal] WRITE LINE: Testing agent connection.
[2020-08-26 10:56:14Z INFO ConfigurationStore] HasCredentials()
[2020-08-26 10:56:14Z INFO ConfigurationStore] stored True
[2020-08-26 10:56:14Z INFO CredentialManager] GetCredentialProvider
[2020-08-26 10:56:14Z INFO CredentialManager] Creating type OAuth
[2020-08-26 10:56:14Z INFO CredentialManager] Creating credential type: OAuth
[2020-08-26 10:56:14Z INFO RSAEncryptedFileKeyManager] Loading RSA key parameters from file C:\agent\.credentials_rsaparams
[2020-08-26 10:56:14Z INFO VisualStudioServices] Starting operation Location.GetConnectionData
[2020-08-26 10:56:14Z WARN VisualStudioServices] Authentication failed with status code 401.
.....

---

Sep 21, 2020

Tried to install and configure an agent on an Ubuntu server located on the Azure cloud. Got the same error.

Answer 1

In case others are experimenting with this, a similar error message happened to me when initiating the agent disconnect/removal, although the registration worked fine:

GET request to https://ado-server.com/_apis/connectionData is not authorized. Details: VS30063: You are not authorized to access https://ado-server.com.
...
WRITE LINE: Failed: Removing agent from the server
WRITE ERROR: VS30063: You are not authorized to access https://ado-server.com.

The issue was the PAT's attached Organization, since apparently in this case an "All accessible organizations" access is required.

Answer 2

1.Make sure your Azure Devops account has the permission to manage the agents in current Org.

2.Then create a new PAT with Read & manage permission.

3.Run the config.cmd again, and enter a new Name at this step:

4.If the issue persists, you can create a new agent pool and register the agent there to check if it helps: