<p>I have a hyperledger fabric blockchain network (v2.2.0) deployed using blockchain-automation-framework (BAF) in AKS. I am trying to execute a DR Scenario to recover a complete network using Velero. I have taken a backup of a namespace using velero (installed with restic) by annotating the volumes of all the pods in the namespace. Then I created an another cluster (AKS) and done the restore. The restoration didn't say any error, but all the pods in the restored namespace got stalled in &quot;Init&quot; status. I can see the following &quot;Events&quot; when did the pod describe,</p>
<p><strong>Warning  FailedAttachVolume  2m (x11 over 8m12s)    attachdetach-controller  AttachVolume.Attach failed for volume &quot;pvc-693766c2-24d1-46df-8f3b-6e61e47714c2&quot; : Retriable: false, RetryAfter: 0s, HTTPStatusCode: 403, RawError: Retriable: false, RetryAfter: 0s, HTTPStatusCode: 403, RawError: {&quot;error&quot;:{&quot;code&quot;:&quot;AuthorizationFailed&quot;,&quot;message&quot;:&quot;The client '5cb44ec6-fe67-4783-a7ec-827ce5787ea7' with object id '5cb44ec6-fe67-4783-a7ec-827ce5787ea7' does not have authorization to perform action 'Microsoft.Compute/disks/read' over scope '/subscriptions/subs_id/resourceGroups/rg/providers/Microsoft.Compute/disks/kubernetes-dynamic-pvc-693766c2-24d1-46df-8f3b-6e61e47714c2' or the scope is invalid. If access was recently granted, please refresh your credentials.&quot;}}</strong></p>
<p>Can anyone explain me the reason? Thanks in Advance!</p>

Soundarya
<p>I'm not familiar with the specific service that you are using, but <code>5cb44ec6-fe67-4783-a7ec-827ce5787ea7</code> looks like a service principal ID.</p>
<p>The error says that it's a permission matter over the <code>/subscriptions/subs_id/resourceGroups/rg/providers/Microsoft.Compute/disks/kubernetes-dynamic-pvc-693766c2-24d1-46df-8f3b-6e61e47714c2</code> resource. Therefore, I would look into the permissions associated to that service principal (e.g., you may give more permissions to the service principal over the entire resource group)</p>
