CannotDeleteOrUpdateEnabledEntitlement: Permission (scope or role) cannot be deleted or updated unless disabled first

[amirj]

I followed the manual setup to register both client and server apps. Getting the following error while deploying the app.

Could you please elaborate a little more on the process of enabling authentication and assigning roles and groups please?

Please provide us with the following information:

This issue is for a: (mark with an x)

- [x] bug report -> please search issues before submitting
- [ ] feature request
- [ ] documentation issue or request
- [ ] regression (a behavior that used to work and stopped in a new release)

Minimal steps to reproduce

azd up

Any log messages given by the failure

Checking if authentication should be setup...
Loading azd .env file from current environment...
AZURE_USE_AUTHENTICATION is set, proceeding with authentication setup...
Creating Python virtual environment "scripts/.venv"...
Installing dependencies from "requirements.txt" into virtual environment (in quiet mode)...
Setting up authentication...
Checking if application xxxxx exists
Application already exists, not creating new one
Setting up server application permissions...
Traceback (most recent call last):
File "/Users/xxx/codes/azure-search-openai-demo/./scripts/auth_init.py", line 210, in
asyncio.run(main())
File "/Users/xxx/miniconda3/envs/azure-search-openai-demo/lib/python3.11/asyncio/runners.py", line 190, in run
return runner.run(main)
^^^^^^^^^^^^^^^^
File "/Users/xxx/miniconda3/envs/azure-search-openai-demo/lib/python3.11/asyncio/runners.py", line 118, in run
return self._loop.run_until_complete(task)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/Users/xxx/miniconda3/envs/azure-search-openai-demo/lib/python3.11/asyncio/base_events.py", line 654, in run_until_complete
return future.result()
^^^^^^^^^^^^^^^
File "/Users/xxx/codes/azure-search-openai-demo/./scripts/auth_init.py", line 193, in main
await update_application(auth_headers, object_id=server_object_id, app_payload=server_app_permission_payload)
File "/Users/xxx/codes/azure-search-openai-demo/scripts/auth_common.py", line 32, in update_application
raise Exception(response_json)
Exception: {'error': {'code': 'CannotDeleteOrUpdateEnabledEntitlement', 'message': 'Permission (scope or role) cannot be deleted or updated unless disabled first.', 'innerError': {'date': '2024-05-08T12:47:29', 'request-id': 'xxx', 'client-request-id': 'xxx'}}}

Expected/desired behavior

OS and Version?

macOS

azd version?

run azd version and copy paste here.

Versions

Mention any other details that might be useful

---

Thanks! We'll be in touch soon.