Unable to provision Teams Bot via Teams Toolkit extension.

[Satyajit208]

Hi Team, I am trying to provision Teams Bot via VS code Teams toolkit extension and getting the following error. I have checked via Azure Portal, and I have contributor access on my RG and can create Bot Service.

Please see the below error message I am getting, can you help me explain what is the underlying problem:-

Output Logs:-

[2024-07-03T08:23:58.115Z] [Info] - Current VS Code locale is: en-us
[2024-07-03T08:23:59.256Z] [Info] - Teams Toolkit extension is now active!
[2024-07-03T08:24:25.857Z] [Info] - Executing provision

Lifecycle stage: provision(7 step(s) in total). The following actions will be executed:
(1/7) Action teamsApp/create: create a Teams app.
(2/7) Action aadApp/create: Create a Microsoft Entra app to authenticate users
(3/7) Action arm/deploy: Deploy the given ARM templates to Azure.
(4/7) Action teamsApp/validateManifest: validate a Teams app.
(5/7) Action teamsApp/zipAppPackage: build a Teams app package.
(6/7) Action teamsApp/validateAppPackage: validate a Teams app.
(7/7) Action teamsApp/update: update a Teams app.

[2024-07-03T08:24:25.859Z] [Info] - Executing lifecycle provision
[2024-07-03T08:24:26.298Z] [Info] - Executing action aadApp/create
[2024-07-03T08:24:26.299Z] [Info] - Environment variable BOT_ID does not exist, creating a new Microsoft Entra app...
[2024-07-03T08:24:27.168Z] [Error] - Unable to execute action aadApp/create. Error message: {"error":{"code":"Authorization_RequestDenied","message":"Insufficient privileges to complete the operation.","innerError":{"date":"2024-07-03T08:24:27","request-id":"e78e8792-783c-4b39-964f-8d182dd89f60","client-request-id":"e78e8792-783c-4b39-964f-8d182dd89f60"}}}
[2024-07-03T08:24:27.174Z] [Error] - Failed to Execute lifecycle provision due to failed action: aadApp/create. HttpClientError:A http client error happened while performing the aadApp/create task. The error response is: {"error":{"code":"Authorization_RequestDenied","message":"Insufficient privileges to complete the operation.","innerError":{"date":"2024-07-03T08:24:27","request-id":"e78e8792-783c-4b39-964f-8d182dd89f60","client-request-id":"e78e8792-783c-4b39-964f-8d182dd89f60"}}}. Env output: {"TEAMS_APP_ID":"ba0215c4-0353-49c9-8241-a44358e56561","TEAMS_APP_TENANT_ID":"bdef8a20-aaac-4f80-b3a0-d9a32f99fd33"}
[2024-07-03T08:24:27.180Z] [Info] - Execution summary:

Summary:
(×) Error: Lifecycle stage provision failed.
(√) Done: teamsApp/create was executed successfully.
(√) Done: Teams app with id ba0215c4-0353-49c9-8241-a44358e56561 already exists, skipped creating a new Teams app.
(×) Error: aadApp/create failed.
(×) Error: A http client error happened while performing the aadApp/create task. The error response is: {"error":{"code":"Authorization_RequestDenied","message":"Insufficient privileges to complete the operation.","innerError":{"date":"2024-07-03T08:24:27","request-id":"e78e8792-783c-4b39-964f-8d182dd89f60","client-request-id":"e78e8792-783c-4b39-964f-8d182dd89f60"}}}
(!) Warning: arm/deploy was not executed.
(!) Warning: teamsApp/validateManifest was not executed.
(!) Warning: teamsApp/zipAppPackage was not executed.
(!) Warning: teamsApp/validateAppPackage was not executed.
(!) Warning: teamsApp/update was not executed.

[2024-07-03T08:24:27.261Z] [Error] - code:aadAppCreate.HttpClientError, message: A http client error happened while performing the aadApp/create task. The error response is: {"error":{"code":"Authorization_RequestDenied","message":"Insufficient privileges to complete the operation.","innerError":{"date":"2024-07-03T08:24:27","request-id":"e78e8792-783c-4b39-964f-8d182dd89f60","client-request-id":"e78e8792-783c-4b39-964f-8d182dd89f60"}}}
Help link: https://aka.ms/teamsfx-actions/aadapp-create

[microsoft-github-policy-service]

Thank you for contacting us! Any issue or feedback from you is quite important to us. We will do our best to fully respond to your issue as soon as possible. Sometimes additional investigations may be needed, we will usually get back to you within 2 days by adding comments to this issue. Please stay tuned.

[blackchoey]

The error message tells the reason Insufficient privileges to complete the operation. Please use an account that has Entra ID create privilege and try again.

[microsoft-github-policy-service]

This issue has been automatically marked as stale because it has been marked as requiring author feedback but has not had any activity for 7 days. It will be closed if no further activity occurs within 3 days of this comment. If it is closed, feel free to comment when you are able to provide the additional information and we will re-investigate.