ArcGIS Enterprise Cloud Builder deployment fails with AuthorizationFailure (403) during ARM deployment

Description

When deploying ArcGIS Enterprise using ArcGIS Enterprise Cloud Builder for Microsoft Azure, the deployment may fail during the Azure Resource Manager (ARM) deployment stage with an error similar to the following:

ARM Deployment failed.

Status: 403
ErrorCode: AuthorizationFailure

This request is not authorized to perform this operation.

Although the error is reported by ArcGIS Enterprise Cloud Builder, the deployment request is rejected by Azure before ArcGIS Enterprise resources are deployed.

Cause

The AuthorizationFailure (403) response is returned by Azure when the authenticated account is not authorized to perform one or more Azure Resource Manager (ARM) deployment operations.

Common causes include:

• Insufficient Azure RBAC permissions
• Azure Storage Account security configuration
• Azure Policy restrictions
• Other Azure authorization or security settings

Solution or Workaround

Review the Azure environment to determine why the ARM deployment request is denied.

Verify with the Azure administrator that:

• The account running ArcGIS Enterprise Cloud Builder has the required Azure permissions.
• The Azure Storage Account security settings allow the deployment.
• Azure policies or organizational security settings are not preventing resource creation.

After correcting the Azure authorization or security configuration, rerun the deployment.

Because the AuthorizationFailure (403) response is returned by Azure during the ARM deployment, Azure-specific authorization or permission issues should be reviewed with your Azure administrator or by referencing the appropriate Microsoft Azure documentation.