当尝试在 Azure 云中创建 SQL 数据库时,我总是收到验证错误。结果既没有创建数据库也没有创建数据库服务器。我不知道这是什么原因。感谢您的帮助。根据系统管理员的说法,我应该有创建 SQL 数据库的权限。
错误信息如下:
"authorization": {
"action": "Microsoft.Resources/deployments/validate/action",
"scope": "/subscriptions/f0beb7c8-f815-46ea-a8f8-9787820cf3f4/resourceGroups/rg-bkw-augias-test-we/providers/Microsoft.Resources/deployments/Microsoft.SQLDatabase.newDatabaseNewServer_fc9cf351b54145b09f323"
},
"caller": "[email protected]",
"channels": "Operation",
"claims": {
"aud": "https://management.core.windows.net/",
"iss": "https://sts.windows.net/376e33ca-d656-4e46-8bcb-7d5ba898ae66/",
"iat": "1614947673",
"nbf": "1614947673",
"exp": "1614951573",
"http://schemas.microsoft.com/claims/authnclassreference": "1",
"aio": "AWQAm/8TAAAAJ4qo51VmekVyCL69cIY9fbgFMpkRUoSVnJhxuyFMAr3py/+9Q0sXs2wm/cWL/snDWpdG+/uR/p8lVeDhEUuZHeVqy3Gpi6jcc1QcUhCH2L9+6UEluTCjIx6jiXw6YeTQ",
"altsecid": "5::10037FFEA84DABF2",
"http://schemas.microsoft.com/claims/authnmethodsreferences": "pwd",
"appid": "c44b4083-3bb0-49c1-b47d-974e53cbdf3c",
"appidacr": "2",
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress": "[email protected]",
"groups": "df261278-ed9f-4dd8-85f7-eee24ad82b3e",
"http://schemas.microsoft.com/identity/claims/identityprovider": "https://sts.windows.net/75a34008-d7d1-4924-8e78-31fea86f6e68/",
"ipaddr": "147.88.56.32",
"name": "vor der Brück Tim HSLU I",
"http://schemas.microsoft.com/identity/claims/objectidentifier": "df846aac-6729-4c7b-a58e-fdcc1491fe13",
"puid": "100320008DB29C91",
"rh": "0.AQkAyjNuN1bWRk6Ly31bqJiuZoNAS8SwO8FJtH2XTlPL3zwJALg.",
"http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "mG17QuV3wZF3j5YDMttkBLJKJ4rGfO0SZcDCb1FofBw",
"http://schemas.microsoft.com/identity/claims/tenantid": "376e33ca-d656-4e46-8bcb-7d5ba898ae66",
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "[email protected]",
"uti": "wOvpZBKoUE6vS0QnHIEUAA",
"ver": "1.0",
"xms_tcdt": "1365059082"
},
"correlationId": "b93a2cbd-ac46-467b-a930-cb43c1c7ba56",
"description": "",
"eventDataId": "1dbbe425-68f2-4063-8fc4-8fdf93d3e4c7",
"eventName": {
"value": "EndRequest",
"localizedValue": "End request"
},
"category": {
"value": "Policy",
"localizedValue": "Policy"
},
"eventTimestamp": "2021-03-05T12:54:54.2637467Z",
"id": "/subscriptions/f0beb7c8-f815-46ea-a8f8-9787820cf3f4/resourceGroups/rg-bkw-augias-test-we/providers/Microsoft.Sql/servers/dbservernonprod/databases/testdb/events/1dbbe425-68f2-4063-8fc4-8fdf93d3e4c7/ticks/637505456942637467",
"level": "Error",
"operationId": "b93a2cbd-ac46-467b-a930-cb43c1c7ba56",
"operationName": {
"value": "Microsoft.Authorization/policies/deny/action",
"localizedValue": "'deny' Policy action."
},
"resourceGroupName": "rg-bkw-augias-test-we",
"resourceProviderName": {
"value": "Microsoft.Sql",
"localizedValue": "Microsoft SQL"
},
"resourceType": {
"value": "Microsoft.Resources/deployments",
"localizedValue": "Microsoft.Resources/deployments"
},
"resourceId": "/subscriptions/f0beb7c8-f815-46ea-a8f8-9787820cf3f4/resourceGroups/rg-bkw-augias-test-we/providers/Microsoft.Sql/servers/dbservernonprod/databases/testdb",
"status": {
"value": "Failed",
"localizedValue": "Failed"
},
"subStatus": {
"value": "",
"localizedValue": ""
},
"submissionTimestamp": "2021-03-05T12:56:10.1971835Z",
"subscriptionId": "f0beb7c8-f815-46ea-a8f8-9787820cf3f4",
"tenantId": "376e33ca-d656-4e46-8bcb-7d5ba898ae66",
"properties": {
"isComplianceCheck": "False",
"resourceLocation": "switzerlandnorth",
"ancestors": "mg-bkw-nonprod-we,mg-bkw-we,mg-bkwgroup,376e33ca-d656-4e46-8bcb-7d5ba898ae66",
"policies": "[{\"policyDefinitionId\":\"/providers/Microsoft.Management/managementGroups/mg-bkw-we/providers/Microsoft.Authorization/policyDefinitions/denyLocationsWE/\",\"policyDefinitionName\":\"denyLocationsWE\",\"policyDefinitionEffect\":\"Deny\",\"policyAssignmentId\":\"/providers/Microsoft.Management/managementGroups/mg-bkw-we/providers/Microsoft.Authorization/policyAssignments/denyLocationsWE/\",\"policyAssignmentName\":\"denyLocationsWE\",\"policyAssignmentScope\":\"/providers/Microsoft.Management/managementGroups/mg-bkw-we\",\"policyAssignmentParameters\":{\"allowedLocations\":{\"value\":[\"westeurope\",\"northeurope\"]}},\"policyExemptionIds\":[]}]",
"eventCategory": "Policy",
"entity": "/subscriptions/f0beb7c8-f815-46ea-a8f8-9787820cf3f4/resourceGroups/rg-bkw-augias-test-we/providers/Microsoft.Sql/servers/dbservernonprod/databases/testdb",
"message": "Microsoft.Authorization/policies/deny/action",
"hierarchy": ""
},```
答案1
您的订阅中有一个 Azure 策略,拒绝创建 Azure SQL 数据库。您需要与管理您订阅的人员沟通,让他们删除或免除您的此策略。
"operationName": {
"value": "Microsoft.Authorization/policies/deny/action",
"localizedValue": "'deny' Policy action."
},