title: Not able to create AKS with role assignment write for subnet and ACR registry in Azure Cloud
body: <p>I am trying to create Azure Kubernetes Service (AKS) with earlier created virtual network (VN) and container registry (ACR).
  I am facing below errors.
  <a href="https://i.stack.imgur.com/2lVA6.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/2lVA6.png" alt="AKS creation issue" /></a></p>
  <p>My user id does not have sufficient permissions to perform this action. Only with basic network settings and no ACR binding, I can create AKS cluster.
  Which role, at Active Directory (AD) level and at subscription level, should my user id be having to create this AKS service?</p>