Share via

Error message: Identity(object id: 35826ebb-89ac-429d-8fb3-6fef75437808) does not have permissions for Microsoft.MachineLearningServices/workspaces/agents/action actions.

Boniface Michael @ RMCS 5 Reputation points
2026-01-14T21:56:46.43+00:00

I am receiving this message when I try to creat an agent. I have set uswest region, gpt-4 model and using foundry to create an agent. I am the owner, administrator and have added a Azure Project Manager and Global role.

Thank you.

Identity(object id: 35826ebb-89ac-429d-8fb3-6fef75437808) does not have permissions for Microsoft.MachineLearningServices/workspaces/agents/action actions.

Azure Language in Foundry Tools
Azure Language in Foundry Tools
An Azure service that provides natural language capabilities including sentiment analysis, entity extraction, and automated question answering.
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Boniface Michael @ RMCS 5 Reputation points
    2026-01-28T20:55:49.9233333+00:00

    Greatly appreciate reply.

    Agent creation was successful but for unknown reasons.

    I made following changes: US East 2, GPT 4.o, pay as you go and owner roles at subscription, project and agent levels.

    Hope this is useful for anyone else receiving the same error.

    0 comments No comments

  2. Q&A Assist
    2026-01-14T21:57:21.4+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    The error message you are encountering indicates that the identity you are using does not have the necessary permissions to perform the action related to creating an agent in Azure Machine Learning Services. Even if you are set as an owner and administrator, there may be specific role-based access control (RBAC) permissions that are required for the action you are trying to execute.

    To resolve this issue, you should verify the following:

    1. Ensure that your identity has the necessary permissions for the action Microsoft.MachineLearningServices/workspaces/agents/action. This can typically be done by checking your role assignments in the Azure portal.
    2. If you are using a managed identity, make sure that it has been granted the required roles that include permissions for agent actions.
    3. You may need to add specific roles such as Machine Learning Contributor or other relevant roles that provide the necessary access to create agents.
    4. If the permissions seem correct, consider reaching out to your Azure subscription administrator to confirm that there are no additional restrictions in place.

    By ensuring that your identity has the appropriate permissions, you should be able to create the agent successfully.

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.