Custom Vision Publish Error: AuthorizationFailed on Storage Encryption Scopes
Hi everyone,
I'm having a very frustrating issue trying to publish a Custom Vision model, and I keep getting the same AuthorizationFailed error every time.
Here is the exact error message:
"error":{"code":"AuthorizationFailed","message":"The client '*****' with object id '' does not have authorization to perform action 'Microsoft.Storage/storageAccounts/encryptionScopes/read' over scope '/subscription//resourceGroups/iris-UKSouth-prod-data/providers/Microsoft.Storage/storageAccounts/irisprodukspredictions/encryptionScopes/****' or the scope is invalid."
What I'm doing:
- I built a Custom Vision Object Detection Model.
- When I click Publish and choose my prediction resource (
PlatformationLogoDetection-Prediction), the publish operation fails instantly with the error above.
What’s confusing:
- I cannot see the storage account mentioned in the error (
irisprodukspredictions) anywhere in my subscription. - I have Developer Support and Contributor access on my subscription.
- My Storage Accounts page shows zero storage accounts.
- It looks like Custom Vision is pointing to a storage account in a completely different subscription (iris-UKSouth-prod-data), which I don’t have permission to view.
- Because of this, the service cannot read encryption scopes and the publish fails.
What I’ve tried:
- Checked region alignment (all UK South).
- Checked IAM access on my resources.
- Recreated the Custom Vision resources.
- Tried multiple publish attempts.
- Tried creating a support request in Azure Portal, but I keep getting sent into troubleshooters and cannot reach the real support ticket wizard.
My question:
Why is Custom Vision trying to read encryption scopes from a storage account I cannot access, and how can I give myself (or the Custom Vision service) the correct RBAC permissions?
Any help would be really appreciated - this is blocking me from deploying my model.
Best regards,
Noah
Note: All PII information redacted from support side.