Skip to content

Commit 90e5da0

Browse files
Merge pull request #272208 from DesLee-msft/DesLee-msft-patch-1
Update troubleshooting.md
2 parents b685669 + be698c2 commit 90e5da0

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

articles/chaos-studio/troubleshooting.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -137,3 +137,11 @@ To resolve this problem, go to the VM or virtual machine scale set in the Azure
137137
### When I try to add a system-assigned/user-assigned managed identity to my existing experiment, it fails to save.
138138
139139
If you are trying to add a user-assigned or system-assigned managed identity to an experiment that **already** has a managed identity assigned to it, the experiment fails to deploy. You need to delete the existing user-assigned or system-assigned managed identity on the desired experiment **first** before adding your desired managed identity.
140+
141+
### When I run an experiment configured to automatically create and assign a custom role, I get the error "The target resource(s) could not be resolved. ErrorCode: AccessDenied. Target Resource(s):"
142+
143+
When the "Custom role permissions" checkbox is selected for an experiment, Chaos Studio creates and assigns a custom role with the necessary permissions to the experiment's identity. However, this is subject to the following role assignment and role definition limits:
144+
* Each Azure subscription has a limit of 4000 role assignments.
145+
* Each Microsoft Entra tenant has a limit of 5000 role definitions (or 2000 role definitions for Azure in China).
146+
147+
When one of these limits has been reached, this error will occur. To work around this, grant permissions to the experiment identity manually instead.

0 commit comments

Comments
 (0)