Added troubleshooting for unauthorized lab access

Author: ntrogh

articles/lab-services/includes/lab-services-troubleshoot-not-authorized.md

@@ -0,0 +1,16 @@
+---
+ms.service: lab-services
+ms.topic: include
+author: ntrogh
+ms.author: nicktrog
+ms.date: 11/29/2022
+---
+
+### Lab creation fails with `You are not authorized to access this resource`
+
+When you create a new lab plan, it might take a few minutes for the permissions to propagate to the lab level. You can assign the Lab Creator role at the resource group level to prevent this behavior:
+
+1. In the [Azure portal](https://portal.azure.com), go to the resource group that contains the lab plan.
+1. Select **Access control (IAM)** from the left navigation.
+1. Select **Add** > **Add role assignment**.
+1. Assign the **Lab Creator** role to the user account.

articles/lab-services/quick-create-lab-plan-portal.md

@@ -57,6 +57,10 @@ When no longer needed, you can delete the resource group, lab plan, and all rela
 1. At the top of the page for the resource group, select **Delete resource group**.
 1. A page will open warning you that you're about to delete resources. Type the name of the resource group and select **Delete** to finish deleting the resources and the resource group.
 
+## Troubleshooting
+
+[!INCLUDE [Troubleshoot not authorized error](./includes/lab-services-troubleshoot-not-authorized.md)]
+
 ## Next steps
 
 In this quickstart, you created a resource group and a lab plan.  

articles/lab-services/quick-create-lab-portal.md

@@ -66,6 +66,10 @@ On the tile for the lab, select three dots (...) in the corner, and then select
 
 On the **Delete lab** dialog box, select **Delete** to continue with the deletion.
 
+## Troubleshooting
+
+[!INCLUDE [Troubleshoot not authorized error](./includes/lab-services-troubleshoot-not-authorized.md)]
+
 ## Next steps
 
 In this quickstart, you created a lab with Azure Lab Services.  To learn more about advanced options for labs, see [Tutorial: Create and publish a lab](tutorial-setup-lab.md).

articles/lab-services/tutorial-create-lab-with-advanced-networking.md

@@ -308,6 +308,10 @@ If you're not going to continue to use this application, delete the virtual netw
 1. Select **Delete resource group**.
 1. To confirm the deletion, type the name of the resource group
 
+## Troubleshooting
+
+[!INCLUDE [Troubleshoot not authorized error](./includes/lab-services-troubleshoot-not-authorized.md)]
+
 ## Next steps
 
 >[!div class="nextstepaction"]

articles/lab-services/tutorial-setup-lab-plan.md

@@ -51,6 +51,10 @@ The following steps illustrate how to use the Azure portal to create a lab plan
 
 [!INCLUDE [Add Lab Creator role](./includes/lab-services-add-lab-creator.md)]
 
+## Troubleshooting
+
+[!INCLUDE [Troubleshoot not authorized error](./includes/lab-services-troubleshoot-not-authorized.md)]
+
 ## Next steps
 
 In this tutorial, you created a lab plan and gave lab creation permissions to an educator. To learn about how to create a lab as an educator, advance to the next tutorial:

articles/lab-services/tutorial-setup-lab.md

@@ -172,6 +172,10 @@ By default, the **Restrict access** option, found on the **Users** page, is turn
 
 For more information about managing usage of student VMs, see [How to configure student usage](how-to-configure-student-usage.md).
 
+## Troubleshooting
+
+[!INCLUDE [Troubleshoot not authorized error](./includes/lab-services-troubleshoot-not-authorized.md)]
+
 ## Next steps
 
 In this tutorial, you created a lab for your class in Azure. To learn how a student can access a VM in the lab using the registration link, advance to the next tutorial.