Error powershell

[zic04]

Hello,

I want to use New-FinopsCostExport and I get the following error The client does not have authorization to perform action. (RBACAccessDenied)

i'm owner and blob contributor

Can you tell me what's missing.

New-FinopsCostExport -Name 'Daily--MTD' `
    -Scope "/subscriptions/$subclient/resourceGroups/$rgclient" `
    -StorageAccountId "/subscriptions/$storagesubid/resourceGroups/SharedStorage/providers/Microsoft.Storage/storageAccounts/$storagename" `
    -DataSet ActualCost `
    -StorageContainer $storageblob  `
    -Backfill 2 `
    -Execute
    

[helderpinto]

@zic04, do the Storage Account networking settings configure a firewall? If it's the case, you need to be Owner on the Storage Account (see documentation), but the Owner role must not have any conditions. If you see anything other than "None" (see example below), then this might be the reason for the error.

[zic04]

Rbac storage

[zic04]

New-FinopsCostExport -Name 'Daily--MTD' `
    -Scope "/subscriptions/$subclient" `
    -StorageAccountId "/subscriptions/$storagesubid/resourceGroups/$storageresourcegroup/providers/Microsoft.Storage/storageAccounts/$storagename" `
    -DataSet ActualCost `
    -StorageContainer $storageblob  `
    -Backfill 2 `
    -Execute

I have firewall and storage and I also tested without firewall and the same problem.

with New-AzCostManagementExport i I also have the problem I'll look for

[zic04]

I have a problem on the network side.

Thank you.