<p>I am using <code>Azure CLI 2.0</code> and I am trying to create <code>Azure Container Service type Kurbenetes</code>, with this command (I already created resource group)</p>

<pre><code>az acs create --orchestrator-type=kubernetes --resource-group=mi-shared-docker-test --dns-prefix=kube --name=mishareddocker
</code></pre>

<p>I am getting this error </p>

<blockquote>
  <p>waiting for AAD role to propagate..........Could not create a service
  principal with the right permissions. Are you an Owner on this
  project?</p>
</blockquote>

<p>I can create any vms, webapps etc, but why am I receiving this issue ?</p>

<p>Well, the error states it pretty clearly, you don't have the right permissions, you should read on the ACS\Kubernetes guide.</p>

<p>I understand you are using AZ, not azure, but the idea is the same, you should have <a href="https://learn.microsoft.com/en-us/azure/container-service/container-service-deployment#kubernetes-specific-entires-required-in-the-portal" rel="nofollow noreferrer">enough permissions and a service principal</a> to deploy Kubernetes on Azure.</p>

<p>You need to look specifically at <a href="https://learn.microsoft.com/en-us/azure/container-service/container-service-kubernetes-service-principal" rel="nofollow noreferrer">this link</a>.</p>
