MalformedRoleAssignmentRequest - PASRP RoleAssignment request is malforme

[lanpar]

Attempting to perform a role assignment on a service principle

#1. var assignmentGuid = msrestazure.generateUuid();

#2. body payload has both principleId and roleDefinitionId (json format)

#3. roleDefinitionId is /subscriptions/{{subscription_id}}/providers/Microsoft.Authorization/roleDefinitions/8e3af657-a8ff-443c-a75c-2fe8c4bcb635

#4. Execute the PUT
https://management.azure.com/subscriptions/{{subscription_id}}/providers/Microsoft.Authorization/roleAssignments/{{assignmentGuid}}?api-version=2015-07-01

response:

{
"error": {
"code": "MalformedRoleAssignmentRequest",
"message": "PASRP RoleAssignment request is malformed"
}
}

any help on what i need to do to fix , thanks

[tjprescott]

Are you using a CLI command to try this? It looks like you are calling the REST API directly.

[lanpar]

i first attempted to use the sample provided:

https://github.com/Azure/azure-sdk-for-node/tree/master/Documentation/ServicePrincipal

and got the MalformedRoleAssignmentRequest

then i attempted to manually executecalling REST API directly

same error unfortunately

[adewaleo]

@lanpar, this is the repo for the Azure CLI. Have you considered raising an issue on the repo you found the issue on, or reaching out to someone on the repo?

[CharmanderJieniJieni]

Hitting same error through Python SDK

from azure.mgmt.authorization import AuthorizationManagementClient
from azure.mgmt.authorization.models import RoleAssignmentProperties, RoleAssignment

role_definition_id = 'acdd72a7-3385-48ef-bd42-f606fba81ae7'
group_id = '621c514c-51b6-44ca-b739-d55f0837724e'
subscription_scope = '/subscriptions/1b9acf1c-d449-4cf6-b2e7-2392b637b661'
assignment_name = 'c53bf415-70c1-486a-ae44-434492d66b20'

role_assignment_properties = RoleAssignmentProperties(role_definition_id=role_definition_id, principal_id=group_id)
result = authorization_client.role_assignments.create(self.subscription_scope, assignment_name, role_assignment_properties)

[yugangw-msft]

Please open the issue at a right place: https://github.com/azure/azure-sdk-for-python/issues. At the same time, please run az role assignment create --debug and capture the payload on the wire to see what is the right payload you can use to construct using Python SDK. CLI's code is here for you to cross check: