Unable to provision Teams Bot via Teams Toolkit extension.

[Satyajit208]

Hi Team, I am trying to provision Teams Bot via VS code Teams toolkit extension and getting the following error. I have checked via Azure Portal, and I have contributor access on my RG and can create Bot Service.

Please see the below error message I am getting, can you help me explain what is the underlying problem:-

Output Logs:-

[2024-07-03T08:23:58.115Z] [Info] - Current VS Code locale is: en-us
[2024-07-03T08:23:59.256Z] [Info] - Teams Toolkit extension is now active!
[2024-07-03T08:24:25.857Z] [Info] - Executing provision

Lifecycle stage: provision(7 step(s) in total). The following actions will be executed:
(1/7) Action teamsApp/create: create a Teams app.
(2/7) Action aadApp/create: Create a Microsoft Entra app to authenticate users
(3/7) Action arm/deploy: Deploy the given ARM templates to Azure.
(4/7) Action teamsApp/validateManifest: validate a Teams app.
(5/7) Action teamsApp/zipAppPackage: build a Teams app package.
(6/7) Action teamsApp/validateAppPackage: validate a Teams app.
(7/7) Action teamsApp/update: update a Teams app.

[2024-07-03T08:24:25.859Z] [Info] - Executing lifecycle provision
[2024-07-03T08:24:26.298Z] [Info] - Executing action aadApp/create
[2024-07-03T08:24:26.299Z] [Info] - Environment variable BOT_ID does not exist, creating a new Microsoft Entra app...
[2024-07-03T08:24:27.168Z] [Error] - Unable to execute action aadApp/create. Error message: {"error":{"code":"Authorization_RequestDenied","message":"Insufficient privileges to complete the operation.","innerError":{"date":"2024-07-03T08:24:27","request-id":"e78e8792-783c-4b39-964f-8d182dd89f60","client-request-id":"e78e8792-783c-4b39-964f-8d182dd89f60"}}}
[2024-07-03T08:24:27.174Z] [Error] - Failed to Execute lifecycle provision due to failed action: aadApp/create. HttpClientError:A http client error happened while performing the aadApp/create task. The error response is: {"error":{"code":"Authorization_RequestDenied","message":"Insufficient privileges to complete the operation.","innerError":{"date":"2024-07-03T08:24:27","request-id":"e78e8792-783c-4b39-964f-8d182dd89f60","client-request-id":"e78e8792-783c-4b39-964f-8d182dd89f60"}}}. Env output: {"TEAMS_APP_ID":"ba0215c4-0353-49c9-8241-a44358e56561","TEAMS_APP_TENANT_ID":"bdef8a20-aaac-4f80-b3a0-d9a32f99fd33"}
[2024-07-03T08:24:27.180Z] [Info] - Execution summary:

Summary:
(×) Error: Lifecycle stage provision failed.
(√) Done: teamsApp/create was executed successfully.
(√) Done: Teams app with id ba0215c4-0353-49c9-8241-a44358e56561 already exists, skipped creating a new Teams app.
(×) Error: aadApp/create failed.
(×) Error: A http client error happened while performing the aadApp/create task. The error response is: {"error":{"code":"Authorization_RequestDenied","message":"Insufficient privileges to complete the operation.","innerError":{"date":"2024-07-03T08:24:27","request-id":"e78e8792-783c-4b39-964f-8d182dd89f60","client-request-id":"e78e8792-783c-4b39-964f-8d182dd89f60"}}}
(!) Warning: arm/deploy was not executed.
(!) Warning: teamsApp/validateManifest was not executed.
(!) Warning: teamsApp/zipAppPackage was not executed.
(!) Warning: teamsApp/validateAppPackage was not executed.
(!) Warning: teamsApp/update was not executed.

[2024-07-03T08:24:27.261Z] [Error] - code:aadAppCreate.HttpClientError, message: A http client error happened while performing the aadApp/create task. The error response is: {"error":{"code":"Authorization_RequestDenied","message":"Insufficient privileges to complete the operation.","innerError":{"date":"2024-07-03T08:24:27","request-id":"e78e8792-783c-4b39-964f-8d182dd89f60","client-request-id":"e78e8792-783c-4b39-964f-8d182dd89f60"}}}
Help link: https://aka.ms/teamsfx-actions/aadapp-create

[blackchoey]

The error message tells the reason Insufficient privileges to complete the operation. Please use an account that has Entra ID create privilege and try again.

[Naman-Malik]

same issue