Reputation: 39
Whenever a new user added to the directory tries to deploy custom azure templates, they get the following validation error - User don't have authorization to perform action 'Microsoft.Resources/deployments/validate/action
Following roles are already granted -
1. Global Administrator access in Azure AD
2. Owner role assignment at the subscription level
3. Contributor access at management Group level
Upvotes: 1
Views: 7211
Reputation: 7728
Even as a Global Admin, you may not have access to all subscriptions and management groups for deploying the template.
Please try elevating your access and making sure you have the Owner role applied.
Upvotes: 2