# Not able to add Elasticsearch Cloud in Azure due to required "Subscription owner" permission not allowed

**URL:** <https://discuss.elastic.co/t/not-able-to-add-elasticsearch-cloud-in-azure-due-to-required-subscription-owner-permission-not-allowed/306197>\
**Category:** Elasticsearch\
**Created:** [June 2, 2022, 7:28am UTC](https://discuss.elastic.co/t/not-able-to-add-elasticsearch-cloud-in-azure-due-to-required-subscription-owner-permission-not-allowed/306197 "2022-06-02T07:28:42Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![arunvelu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/arunvelu/32/106871_2.png) [@arunvelu](https://discuss.elastic.co/u/arunvelu)\
**Post date:** [June 2, 2022, 7:28am UTC](https://discuss.elastic.co/t/not-able-to-add-elasticsearch-cloud-in-azure-due-to-required-subscription-owner-permission-not-allowed/306197/1 "2022-06-02T07:28:42Z")

</div>

Hello,

We are looking to try Elasticsearch in Azure for analyzing the application's log data. To do this, I planned on creating an instance in Azure, but I get an error message at creation – “_Validation failed. Only subscription owners may create this instance_”.

Unfortunately, owners in azure subscription are not allowed in my company for security reasons.  
What is the need to allow only subscription owners, can the Contributor role be used instead? Would the Owner role be required later for maintaining this setup?

Any response to this is very much appreciated.

Thanks,  
Arun

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 2, 2022, 11:24pm UTC](https://discuss.elastic.co/t/not-able-to-add-elasticsearch-cloud-in-azure-due-to-required-subscription-owner-permission-not-allowed/306197/2 "2022-06-02T23:24:52Z")

</div>

Welcome to our community! 😃

Are you referring to our Elasticsearch Service on Azure?

---

<div class="post-metadata">

**Author:** ![arunvelu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/arunvelu/32/106871_2.png) [@arunvelu](https://discuss.elastic.co/u/arunvelu)\
**Post date:** [June 3, 2022, 11:52am UTC](https://discuss.elastic.co/t/not-able-to-add-elasticsearch-cloud-in-azure-due-to-required-subscription-owner-permission-not-allowed/306197/3 "2022-06-03T11:52:30Z")

</div>

Yes, correct.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 7, 2022, 8:41pm UTC](https://discuss.elastic.co/t/not-able-to-add-elasticsearch-cloud-in-azure-due-to-required-subscription-owner-permission-not-allowed/306197/4 "2022-06-07T20:41:08Z")

</div>

This is a requirement from Azure themselves, please see [Native Azure integration | Elasticsearch Service Documentation | Elastic](https://www.elastic.co/guide/en/cloud/current/ec-azure-marketplace-native.html#azure-integration-get-started)

---

<div class="post-metadata">

**Author:** ![arunvelu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/arunvelu/32/106871_2.png) [@arunvelu](https://discuss.elastic.co/u/arunvelu)\
**Post date:** [June 8, 2022, 12:10pm UTC](https://discuss.elastic.co/t/not-able-to-add-elasticsearch-cloud-in-azure-due-to-required-subscription-owner-permission-not-allowed/306197/5 "2022-06-08T12:10:36Z")

</div>

Thank you so much for the link, Mark.  
I think this gives a lot of clarity on the need for "Owner" permission.

I don't want to integrate and monitor any of our Azure resources, but just want to send my application's logs and monitor those. So, in this case, is Elastic Cloud from Azure not the right solution? Is there any cloud solution for this?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2022, 12:11pm UTC](https://discuss.elastic.co/t/not-able-to-add-elasticsearch-cloud-in-azure-due-to-required-subscription-owner-permission-not-allowed/306197/6 "2022-07-06T12:11:18Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
