Add global admin access to my account

To create a service principal for your Azure App Service deployment, you need to have sufficient permissions. Since you mentioned that your account does not have enough permissions to create a service principal despite being the owner of the account, you may need to request global admin access or appropriate permissions from your Azure Active Directory administrator.

Once you have the necessary permissions, you can create a service principal using the Azure CLI with the following command:

az ad sp create-for-rbac --name "myApp" --role "Website Contributor" \
                            --scopes /subscriptions/<subscription-id>/resourceGroups/<group-name>/providers/Microsoft.Web/sites/<app-name> \
                            --json-auth

Replace the placeholders with your actual subscription ID, resource group name, and app name. This will generate the credentials needed for your GitHub Actions workflow to perform the slot swap operation.

If you still encounter issues, consider discussing with your Azure administrator to ensure you have the correct roles assigned.

References:

• Deploy to Azure App Service by using GitHub Actions
• Generate deployment credentials

Hello @Trishul Goel

Being a Subscription Owner does not automatically give you permission to create a service principal. Creating an app registration requires a directory-level role in Microsoft Entra ID.

If your account does not have one of these roles (Application Administrator, Cloud Application Administrator, or Global Administrator), the portal will block the action even though you are an Owner on the subscription.

You will need someone who is already a Global Administrator in the tenant to assign you one of those roles.

They should also check the tenant setting under Entra ID → Users → User settings → App registrations and make sure "Users can register applications" is enabled.

Once you have the required directory permissions, you can create a service principal and then use that for az login in your GitHub Actions workflow to perform the slot swap.

Kindly let us know if the above helps or you need further assistance on this issue.

Please "upvote" if the information helped you. This will help us and others in the community as well.