Action Microsoft.Sql/locations/shortTermRetentionPolicyAzureAsyncOperation/read does not exist

[simader]

Hello,

I have the following code, which works with my Admin Account.

However if a try a user with limited permission i get the following error message 403 The client '----' with object id '---' does not have authorization to perform action 'Microsoft.Sql/locations/shortTermRetentionPolicyAzureAsyncOperation/read' over scope '/subscriptions/---/resourceGroups/r---/providers/Microsoft.Sql/locations/westeurope/shortTermRetentionPolicyAzureAsyncOperation/0a84c678-f877-4f13-9241-3d4a8eb91cfb' or the scope is invalid. If access was recently granted, please refresh your credentials.

When i try to find this right to add it to my role it says it does not exist.

I only can find :"Microsoft.Sql/locations/shortTermRetentionPolicyOperationResults/read" However this does not help.

Please Advice.

[azure-sdk]

Label prediction was below confidence level 0.6 for Model:ServiceLabels: 'SQL:0.15643765,AppAuthentication:0.07991676,Service Bus:0.06396555'

[jsquire]

Thank you for reaching out and we regret that you're experiencing difficulties. Would you please provide the name and version of the Azure SDK package that you're using?

[simader]

Azure.ResourceManager.Sql in Version 1.0.0

[jsquire]

Thank you for your feedback. Tagging and routing to the team member best able to assist.

[ghost]

Thank you for your feedback. This has been routed to the support team for assistance.

[navba-MSFT]

@simader Thanks for reaching out to us and reporting this issue. Could you please try adding Microsoft.Sql/locations/*/read permissions to that user and try again after sometime ? Awaiting your reply.

[ghost]

Hi @simader. Thank you for opening this issue and giving us the opportunity to assist. We believe that this has been addressed. If you feel that further discussion is needed, please add a comment with the text “/unresolve” to remove the “issue-addressed” label and continue the conversation.

[simader]

Hi, I didn't had time so far to try this out. but I gave you very detailed instructions, you should be able to test it yourself. And if this workaround is your solution than it should be saided in the error message.

[navba-MSFT]

@simader Thanks for your reply. I have tested the above action plan and it did work fine at my end. Could you please test the same and share an update ?

[simader]

Yes, I can confirm that "Microsoft.Sql/locations/*/read" helps. However the error message still tells that 'Microsoft.Sql/locations/shortTermRetentionPolicyAzureAsyncOperation/read' is missing.

[navba-MSFT]

@simader Thanks for getting back. I did some research on this and found that there is an RBAC action Microsoft.Sql/locations/shortTermRetentionPolicyOperationResults/read, this is deceptively similar to shortTermRetentionPolicyAzureAsyncOperation. So creating a custom role with this action should also help.

[ghost]

Hi @simader, since you haven’t asked that we “/unresolve” the issue, we’ll close this out. If you believe further discussion is needed, please add a comment “/unresolve” to reopen the issue.