Azure App Service Deploy 403 Error

The Azure App Service Deploy has started throwing 403 errors when running. This was working as recently as Saturday, and has not been modified.

additionally, in the task configuration, I cannot change/select any app service.

2017-09-25T17:29:05.2346239Z ============================================================================== 2017-09-25T17:29:05.2346239Z Task : Azure App Service Deploy 2017-09-25T17:29:05.2346239Z Description : Update Azure Web App Services, Web App On Linux , Function Apps, Mobile Apps using Web Deploy / Kudu REST APIs 2017-09-25T17:29:05.2346239Z Version : 3.3.15 2017-09-25T17:29:05.2346239Z Author : Microsoft Corporation 2017-09-25T17:29:05.2346239Z Help : [More Information](https://aka.ms/azurermwebdeployreadme) 2017-09-25T17:29:05.2346239Z ============================================================================== 2017-09-25T17:29:06.1955591Z ##[error]Forbidden 2017-09-25T17:29:06.1955591Z ##[error]Unable to retrieve connection details for Azure App Service:'ossiacodevui'. Status Code: 403 Forbidden 2017-09-25T17:29:06.1995574Z ##[section]Finishing: Azure App Service Deploy: ossiacodevui

[PoppyPham]

Oh man, thank @dsharma01 I follow the instruction of MS to create Azure Resource API with Client Principal ID here https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-create-service-principal-portal In the instruction they set the Role to the “Reader” which caused the Error. And after i set to “Contributor” it works. I wasted 1 day fir this shit.

[dsharma01]

The SPN itself is like a user in Azure AD, by default it has no rights. You have to provide it “contribute” permissions, if you wish to use the SPN to create or update resources in Azure. The powershell script commonly available to create SPN does that for you.