<p>I log in successfully, but cannot pull:</p>

<pre><code>PS C:\Users\Me&gt; docker login tlk8s.azurecr.io
Username (myUsername): Password:
Login Succeeded
PS C:\Users\Me&gt; docker pull tlk8s.azurecr.io/devicecloudwebapi:v1
Error response from daemon: pull access denied for tlk8s.azurecr.io/devicecloudwebapi, repository does not exist or may require 'docker login'
</code></pre>

<p>But it seems like I'm naming it correctly (see screenshot):</p>

<p><a href="https://i.stack.imgur.com/aDUFj.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/aDUFj.png" alt="enter image description here"></a></p>

<p>What could I be doing wrong? How do I check to see if my service principal has the correct permissions? </p>

<p>Here's the result of calling Get-AzureRmRoleAssignment:</p>

<p><a href="https://i.stack.imgur.com/QGqYH.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/QGqYH.png" alt="enter image description here"></a></p>

<p>Per documentation below, the Service Principal account must have at least <strong>Reader</strong> role to be able to pull images from the Azure Container Registry.</p>

<p><a href="https://learn.microsoft.com/en-us/azure/container-registry/container-registry-authentication" rel="nofollow noreferrer">https://learn.microsoft.com/en-us/azure/container-registry/container-registry-authentication</a></p>

<p>You can run the following PS script to <strong>list the existing role assignments</strong> for your Service Principal account.</p>

<p><a href="https://github.com/evandropaula/Azure/blob/master/ServicePrincipal/PS/List-ServicePrincipalRoleAssignments.ps1" rel="nofollow noreferrer">https://github.com/evandropaula/Azure/blob/master/ServicePrincipal/PS/List-ServicePrincipalRoleAssignments.ps1</a></p>

<p>You can run the following PS script to <strong>assign a role</strong> (e.g. Reader) to your Service Principal account.</p>

<p><a href="https://github.com/evandropaula/Azure/blob/master/ServicePrincipal/PS/Assign-ServicePrincipalRole.ps1" rel="nofollow noreferrer">https://github.com/evandropaula/Azure/blob/master/ServicePrincipal/PS/Assign-ServicePrincipalRole.ps1</a></p>
