error when running Get-AzManagementGroup PowerShell Command

Question

I am a global administrator and when I run the command Get-AzManagementGroup I get the following error:

Get-AzManagementGroup : The client 'live.com#kellygarcia9@yahoo.co.uk' with object id 'bd24ab44-e034-439e-8a02-756d1e3557a3' does not have authorization to perform action 'Microsoft.Management/managementGroups/read' over scope '/providers/Microsoft.Management' or the scope is invalid. If access was recently granted, please refresh your credentials. At line:1 char:1 + Get-AzManagementGroup + ~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : CloseError: (:) [Get-AzManagementGroup], CloudException + FullyQualifiedErrorId : Microsoft.Azure.Commands.Resources.ManagementGroups.GetAzureRmManagementGroup

this error also happens when you do not have any management groups ... after creating a management group and assigning an existing subscription into this new management group then the command will run OK — Scott Stensland, Mar 14 '22 at 17:19

score 1 · Answer 1 · answered Oct 08 '19 at 17:03

1

the error clearly indicates that you dont have permissions to perform the action. you'd need to grant yourself using account which has permissions to do that (or ask somebody to grant you those).

Here's the specific permission you need: Microsoft.Management/managementGroups/read

answered Oct 08 '19 at 17:03

4c74356b41

69,186
6
100
141

how to grant that specific permission to the service account? – Senior Systems Engineer Sep 13 '21 at 06:42
1

create a custom rbac role, only way to do that – 4c74356b41 Sep 13 '21 at 16:00
Thanks you for the suggestion :-) – Senior Systems Engineer Oct 22 '21 at 11:54

score 1 · Accepted Answer · answered Oct 08 '19 at 18:04

1

You will have to get user access administrator role to manage management groups

https://learn.microsoft.com/en-us/azure/governance/management-groups/overview#root-management-group-for-each-directory

answered Oct 08 '19 at 18:04

Hannel

1,656
3
10
17

error when running Get-AzManagementGroup PowerShell Command

2 Answers2

Linked