Azure CLI v2: "--allow-no-subscriptions"

I have created a connection to Azure using a Service Principal which is not assigned to any subscription. The SP has permission to make changes only to the Azure AD tenant (I need to run commands like az ad app update only).

When using that connection with the AzureCLI v2 task, the task always fails with the error:

ERROR: No subscriptions were found for '***'. If this is expected, use '--allow-no-subscriptions' to have tenant level accesses

It doesn’t look like there’s a way to pass the --allow-no-subscriptions flag.

The workaround for me was to create a new bogus resource group with no resources inside and grant the SP access to that RG so at least it has a subscription. However, there should be a way to have --allow-no-subscriptions.

[ItalyPaleAle]

I understand. My purpose in creating this issue was two-fold:

1. Bring it up so the devs are aware of it.
2. Write my workaround here in hope it can help others. The workaround is quite simple (albeit not very clean 😃 ) anyways.

[a-vishar]

Any resolution to this? This is currently causing our build pipelines to fail transiently…