Not able to create Resources using ARM template

Question

Not able to create Resources using ARM template

Diptesh Kumar 391

I am using following ARM template, to create RG , ACR and Key vault but failing .

and when I execute below command coming up with following error

PS I:\ARMTemplates\DevOps> az deployment group create --resource-group testrg --template-file I:\ARMTemplates\DevOps\RG-ACR-KV.json --parameters acrName=DACR keyVaultName=DKV

Failed to parse 'I:\ARMTemplates\DevOps\RG-ACR-KV.json', please check whether it is a valid JSON format

User's image

{
    "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
      "resourceGroupName": {
        "type": "string"
      },
      "acrName": {
        "type": "string"
      },
      "keyVaultName": {
        "type": "string"
      }
    },
    "resources": [
      {
        "type": "Microsoft.ContainerRegistry/registries",
        "apiVersion": "2019-05-01",
        "name": "[parameters('acrName')]",
        "location": "[resourceGroup().location]",
        "sku": {
          "name": "Basic"
        }
      },
      {
        "type": "Microsoft.KeyVault/vaults",
        "apiVersion": "2019-09-01",
        "name": "[parameters('keyVaultName')]",
        "location": "[resourceGroup().location]",
        "properties": {
          "sku": {
            "family": "A",
            "name": "standard"
          },
          "tenantId": "[subscription().tenantId]",
          "accessPolicies": []
        }
      }
      // Add VNet and other resources similarly
    ]
  }

Accepted answer

1 additional answer

Your answer

Answer 1

Hello Varma,

I have reproduced the issue with your script in our environment, and finally we were able to create a RG, Key vault and ACR.

Used script for your reference:

{
    "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
      "resourceGroupName": {
        "type": "string"
      },
      "acrName": {
        "type": "string"
      },
      "keyVaultName": {
        "type": "string"
      }
    },
    "resources": [
      {
        "type": "Microsoft.ContainerRegistry/registries",
        "apiVersion": "2019-05-01",
        "name": "[parameters('acrName')]",
        "location": "[resourceGroup().location]",
        "sku": {
          "name": "Basic"
        }
      },
      {
        "type": "Microsoft.KeyVault/vaults",
        "apiVersion": "2019-09-01",
        "name": "[parameters('keyVaultName')]",
        "location": "[resourceGroup().location]",
        "properties": {
          "sku": {
            "family": "A",
            "name": "standard"
          },
          "tenantId": "[subscription().tenantId]",
          "accessPolicies": []
        }
      }
      // Add VNet and other resources similarly
    ]
  }

Please validated the below points before deploying.

The subscription has to be registered with the Resource provider
ACR name should be globally unique with minimum 5 letters.
Key vault should be globally unique.

Eventual results for your reference.

User's image

If you find the answer helps your query, please click upvote it.

Thanks

Answer 2

Stanislav Zhelyazkov 27,556 MVP Moderator

Hi,

I would check if you are using recent version of az CLI. I believe some older versions did not support comments in JSON. Also properties is required for type Microsoft.ContainerRegistry/registries so it should be added. As my last advise I would suggest using Azure Bicep rather ARM templates. Azure Bicep has a lot of advantages in developing compared to ARM templates.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Diptesh Kumar 391 Reputation points

2025-04-04T05:49:49.8066667+00:00

Hi Stanislav,

Can you please give me code snippet for Bicep to create Resource group, ACR and key vault at one place?
Stanislav Zhelyazkov 27,556 Reputation points MVP Moderator

2025-04-04T05:56:16.47+00:00

That is different question but if you are not into coding I would suggest at looking at Azure verified modules. These are Microsoft built Bicep templates that you can reference to deploy different services. There are such for container registry and key vault. By using command such as 'az deployment group create' the assumption is that the resource group is already created. In such case create the resource group via CLI before deployment. Otherwise you will have to use the command to create deployment at subscription scope and it you will create the resource group and deploy the resource to the resource group scope. I am intetionally not providing exact example as I think it is better to understand and learn what you are doing. That will help you in the future.
Vinod Pittala 1,750 Reputation points Microsoft External Staff Moderator

2025-04-07T05:41:49.0833333+00:00

Hello Diptesh Kumar,

We haven't heard back from you regarding the advice Stanislav Zhelyazkov has provided. Could you please let us know if it was helpful? If you have any questions or encounter any issues, please don't hesitate to reach out. We are committed to resolving your concerns as a priority.

Thanks
Varma 1,495 Reputation points

2025-04-07T06:17:33.2066667+00:00

Hi Vinod,

I understood suggestion but I am facing issues when executing it,

is it possible to support with the help of service request from MS engineer?

That would be great,

Thank you.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Diptesh Kumar 391 Reputation points

2025-04-08T05:48:37.85+00:00

Hi Vinod,

Please share parameter file also.
Diptesh Kumar 391 Reputation points

2025-04-08T06:45:13.56+00:00

It worked, thank you

Vinod Pittala 1,750 Microsoft External Staff Moderator

Hello Diptesh Kumar,

below are the parameters which we used.

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
    "resourceGroupName": {
      "value": "testrg"
    },
    "acrName": {
      "value": "dacr02"
    }
    "keyVaultName": {
      "value": "dkv02"
    }
  }
}

If the comment helpful, please click Upvote it.

Thanks

Vinod Pittala 1,750 Reputation points Microsoft External Staff Moderator

2025-04-08T07:19:30.05+00:00

Hello Diptesh Kumar,

I glad that you have confirmed that the provide solution has worked for you.

Additionally, I have converted the comment into an answer. If you could kindly accept answer and upvote it for the benefit of the community, it would be greatly appreciated and helpful to others.

Thanks
Diptesh Kumar 391 Reputation points

2025-04-08T07:25:04.29+00:00

Hi Vinod,

Please assist below one also:

https://learn.microsoft.com/en-us/answers/questions/2244989/failing-to-create-resource-using-subscription-leve
Vinod Pittala 1,750 Reputation points Microsoft External Staff Moderator

2025-04-10T02:56:30.4766667+00:00

Hello Diptesh Kumar,

I have already responded to the thread. Please note that it can be closed if there are no further queries.

Thanks

Share via

Not able to create Resources using ARM template

1 additional answer

Your answer