我正在通过 python 对 azure 进行身份验证以列出我所有的虚拟机，但我收到了这个错误

Question

当我尝试通过 python 列出我在 Azure 上的所有虚拟机时遇到此错误

Code: AuthorizationFailed
Message: The client "XXXX" with object id "XXXX" does not have authorization to perform action 'Microsoft.Compute/virtualMachines/read' over scope '/subscriptions/XXXXX or the scope is invalid. If access was recently granted, please refresh your credentials.

我的代码如下：

from azure.mgmt.compute import ComputeManagementClient
from azure.identity import ClientSecretCredential


Subscription_Id = "XXXX"
Tenant_Id = "XXXXX"
Client_Id = "XXXXX"
Secret = "XXXXX"

credential = ClientSecretCredential(
    client_id=Client_Id,
    client_secret=Secret,
    tenant_id=Tenant_Id
)

compute_client = ComputeManagementClient(credential, Subscription_Id)
vm_list = compute_client.virtual_machines.list_all()
pageobject1 = vm_list.by_page(continuation_token=None)
for page in pageobject1:
    for j in page:
        print(j)

Answer 1

当您尝试将virtualmachinecontributor 等特定角色分配给您的服务主体时，您需要传递service principal/appregistration name 而不是传递您的应用注册applicationId/objectId ，如下所示。

• 提供对service principal/appregistration 的所需访问权限后，您将能够提取订阅中的虚拟机列表。我们已经在本地环境中检查了上面的 python，它也可以正常工作。

这里是示例输出截图供参考：

---

更新了使用资源管理客户端提取 VM 列表的答案：

from azure.mgmt.resource import ResourceManagementClient
from azure.identity import ClientSecretCredential


Subscription_Id = "<subId>"
Tenant_Id = "<tenantid>"
Client_Id = "<appId>"
Secret = "<clientSecret>"

credential = ClientSecretCredential(
    client_id=Client_Id,
    client_secret=Secret,
    tenant_id=Tenant_Id
)

resource_client=ResourceManagementClient(credential=credential,subscription_id=Subscription_Id)
resource_list=resource_client.resources.list()
for item in resource_list:
    if(item.type == 'Microsoft.Compute/virtualMachines'):
        print(item)