Control Plane deployment crash with no access to Key Vault about sap-automation

[iwalker2000]

Yes, I tried to do troubleshooting as it is recommended in documentation - https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/automation-tutorial - "If you run into authentication issues, run az logout to log out and clear the token-cache, then run az login to reauthenticate."

What account have I to use for that az login? It is not clear in documentation what credentials have to be used.

[KimForss]

Hi, sorry to hear this.

Are you running this from Cloud shell?

Have you tried to run az logout and then az login so that you are logged on as you and not the cloudshell managed ID?

[mkdeegan]

Has this been resolved?
On initial Control Plane Deployment from the Cloud Shell the credentials that are used are your own credentials, and you must have "Contributor with Authorization or Owner" RBAC for the subscription.

[jkirkmannz]

Added my userID to the keyvault access policy for the generated keyvault and it moved past this error, which I was getting in all accounts/subscriptions.

This is covered in https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/automation-faq
You might get the error Error: checking for existing Secret….User, group, or application…does not have secrets get permission on key vault. Make sure that the deployment credentials have sufficient permissions to read the secrets from the deployment key vault. Also make sure that the SPN AppID and SPN Secret in the user's key vault are correct.

[sapien47]

@jkirkmannz : Thanks for the tip, worked for me

[PmeshramPM]

@iwalker2000 - I see this issue is resolved, I am closing this issue.