Azure 事件网格正在创建订阅：“无权执行操作”

Question

我目前正在使用节点js将主题发布到事件网格，并通过事件网格订阅主题。在https://docs.microsoft.com/en-us/rest/api/eventgrid/使用事件网格API时，我收到一个错误，其中我在创建订阅时无权执行操作。我创建了一个主题并具有访问我的Azure帐户的门禁权限，因此我不明白为什么会出现这个Rest错误。

我的代码：

const { ClientSecretCredential } = require("@azure/identity");
const { SystemTopicEventSubscriptions, EventGridManagementClientContext, DomainTopics, EventSubscriptions  } = require("@azure/arm-eventgrid");
const subscriptionId = "idea number";

const resourceGroupName = "eventgrid-dev";
const domainName = "test-domain";
let tenantId = "idea number";
let clientSecret = "idea number";
let clientId = "idea number";
const firstCredential = new ClientSecretCredential(tenantId, clientId, clientSecret);
//const client = new EventGridManagementClient(firstCredential, subscriptionId); 

const clientContext = new EventGridManagementClientContext(firstCredential, subscriptionId);

// Topics
let domainTopics = new DomainTopics(clientContext);

domainTopics.beginCreateOrUpdate(resourceGroupName, domainName, "test-topic")
.then(result => {
    console.log("result");
    console.log(result);
})
.catch(error => {
    console.log("Error");
    console.log(error);
}) 

let subscription = new EventSubscriptions(clientContext);
subscription.beginCreateOrUpdate("/subscriptions/subscriptionId/resourceGroups/eventgrid-dev", "test-subscription",{topic: "test-topic"})
.then(result => {
  console.log("result");
  console.log(result);
})
.catch(error => {
  console.log("Error");
  console.log(error);
}) 

输出：

Error
RestError: The client 'subscriptionID' with object id 'subscriptionID' does not have authorization to perform action 'Microsoft.EventGrid/eventSubscriptions/Microsoft.EventGrid/test-subscription/write' over scope '/subscriptions/subscriptionID/resourceGroups/eventgrid-dev/providers/Microsoft.EventGrid/eventSubscriptions/providers/Microsoft.EventGrid/eventSubscriptions' or the scope is invalid. If access was recently granted, please refresh your credentials.

感谢您的帮助！

Answer 1

如果存在事件网格域，请使用以下代码在请求的主题上创建事件网格订阅。请注意，主题是在其第一次订阅期间自动创建的：

let subscription = new EventSubscriptions(clientContext);
const scope = '/subscriptions/' + subscriptionId + '/resourceGroups/' + resourceGroupName + '/providers/Microsoft.EventGrid/domains/' + domainName + '/topics/test-topic';
const test_webhookEndpointUrl = ' ... ';
subscription.beginCreateOrUpdate(scope, "test-subscription",
    {
        destination: {
            endpointType: "WebHook",
            endpointUrl: test_webhookEndpointUrl
        }      
    }
).then(result => {
        console.log("result");
        console.log(result);
    })
    .catch(error => {
        console.log("Error");
        console.log(error);
    })