RBAC for Media Services? RRS feed

  • Question

  • I'm trying to write a python app to read/write to a Media Services account, but unless I make my client app a subscription owner it fails with this error:

    The client 'xxx' with object id 'yyy' does not have authorization to perform action 
    'Microsoft.Media/mediaServices/assets/read' over scope '/subscriptions/{subId]/resourceGroups/{resGroupName}/providers/Microsoft.Media/mediaServices/{mediaSvcAccountName}/assets/{assetName}'.

    What builtin role(s) can I use to allow media asset creation without  becoming an owner?

    Sunday, July 8, 2018 8:17 PM

All replies

  • Should be able to support that with Contributor role.  
    Are you creating a new AAD service principal for access with Contributor or Owner Role?
    Monday, July 9, 2018 8:43 PM
  • Hi DeannaD123 - any update on this? Were you able to get this issue resolved? If so, would you kindly share the solution with us here so that others visiting this post can learn from it?
    Tuesday, July 17, 2018 4:38 AM