Fixing Unauthorized Access to Application Gateway Backend Health in Azure

GitaraniSharma-MSFT 50,207 Reputation points Microsoft Employee Moderator
2024-08-01T09:22:12.9133333+00:00

Why does a user receive an authorization error when attempting to view the backend health of an Azure Application Gateway via PowerShell or the Azure portal, while another user can view it without issues?

PS - Based on common issues that we have seen from customers and other sources; we are posting these questions to help the Azure community.

Azure Application Gateway
Azure Application Gateway

An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.

0 comments No comments

1 answer

Sort by: Most helpful
  1. GitaraniSharma-MSFT 50,207 Reputation points Microsoft Employee Moderator
    2024-08-01T09:23:25.73+00:00

    The authorization error occurs because the user lacks the necessary permissions to view the backend health status. The error message specifies that the client does not have authorization to perform the Microsoft.Network/applicationGateways/backendhealth/action. To fix this, assign the Network Contributor role to the user, which includes the required permissions. Alternatively, you can create a custom role with the specific permission to view the backend health. If permissions were recently modified, the user should refresh their credentials to apply the changes.

    References:

    Please do not forget to "up-vote" wherever the information provided helps you, as this can be beneficial to other community members.

    Was this answer helpful?

    4 people found this answer helpful.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.