# How to use new Azure modules

**URL:** <https://forum.ansible.com/t/how-to-use-new-azure-modules/21598>\
**Category:** Ansible Project\
**Tags:** azure\
**Created:** [May 29, 2016, 3:01pm UTC](https://forum.ansible.com/t/how-to-use-new-azure-modules/21598 "2016-05-29T15:01:53Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Takeshi\_Kuramochi](https://avatars.discourse-cdn.com/v4/letter/t/e8c25b/32.png) [@Takeshi\_Kuramochi](https://forum.ansible.com/u/Takeshi_Kuramochi)\
**Post date:** [May 29, 2016, 3:01pm UTC](https://forum.ansible.com/t/how-to-use-new-azure-modules/21598/1 "2016-05-29T15:01:53Z")

</div>

Hi All,

I would like to know details to use Azure modules ( azure\_rm\_xxxxxx )  
. because it failed tasks for azure.

I already have own azure account.  
I think that I must get some objects ( ad\_user / password ) on my  
azure portal before I write a playbook.  
I read below.  
[https://azure.microsoft.com/en-us/documentation/articles/automation-credentials/](https://azure.microsoft.com/en-us/documentation/articles/automation-credentials/)

I set ~/.azure/credentials then I run playbook.

---

<div class="post-metadata">

**Author:** ![Tuomas-Matti\_Soikkel](https://avatars.discourse-cdn.com/v4/letter/t/ed655f/32.png) [@Tuomas-Matti\_Soikkel](https://forum.ansible.com/u/Tuomas-Matti_Soikkel)\
**Post date:** [June 30, 2016, 1:55pm UTC](https://forum.ansible.com/t/how-to-use-new-azure-modules/21598/2 "2016-06-30T13:55:39Z")

</div>

I have the same problem.

I have azure\_rm\_virtualmachine task with defaults and credentials configured in ~/.azure/credentials. I can access the resource manager with azure cli and via [portal.azure.com](http://portal.azure.com)

-vvvv output:

TASK [Create VM with defaults] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*  
task path: /Users/tsoikkel/dev/mtg-rate-estimate-ui/ansible/rate-estimate-ui.yml:4  
Using module file /Users/tsoikkel/.bin/ansible/lib/ansible/modules/core/cloud/azure/azure\_rm\_virtualmachine.py  
\<127.0.0.1\> ESTABLISH LOCAL CONNECTION FOR USER: tsoikkel  
\<127.0.0.1\> EXEC /bin/sh -c ‘( umask 77 && mkdir -p “`echo $HOME/.ansible/tmp/ansible-tmp-1467294814.59-271701080215113`” && echo ansible-tmp-1467294814.59-271701080215113=“`echo $HOME/.ansible/tmp/ansible-tmp-1467294814.59-271701080215113`” ) && sleep 0’  
\<127.0.0.1\> PUT /var/folders/rl/bjksdpqn5w5\_qk0fgv7p4z352df6b5/T/tmpD3jnAy TO /Users/tsoikkel/.ansible/tmp/ansible-tmp-1467294814.59-271701080215113/azure\_rm\_virtualmachine.py  
\<127.0.0.1\> EXEC /bin/sh -c ‘chmod -R u+x /Users/tsoikkel/.ansible/tmp/ansible-tmp-1467294814.59-271701080215113/ && sleep 0’  
\<127.0.0.1\> EXEC /bin/sh -c ‘/usr/local/opt/python/bin/python2.7 /Users/tsoikkel/.ansible/tmp/ansible-tmp-1467294814.59-271701080215113/azure\_rm\_virtualmachine.py; rm -rf “/Users/tsoikkel/.ansible/tmp/ansible-tmp-1467294814.59-271701080215113/” \> /dev/null 2\>&1 && sleep 0’  
An exception occurred during task execution. The full traceback is:  
Traceback (most recent call last):  
File “/var/folders/rl/bjksdpqn5w5\_qk0fgv7p4z352df6b5/T/ansible\_5hoWa8/ansible\_module\_azure\_rm\_virtualmachine.py”, line 1281, in   
main()  
File “/var/folders/rl/bjksdpqn5w5\_qk0fgv7p4z352df6b5/T/ansible\_5hoWa8/ansible\_module\_azure\_rm\_virtualmachine.py”, line 1278, in main  
AzureRMVirtualMachine()  
File “/var/folders/rl/bjksdpqn5w5\_qk0fgv7p4z352df6b5/T/ansible\_5hoWa8/ansible\_module\_azure\_rm\_virtualmachine.py”, line 527, in **init**  
supports\_check\_mode=True)  
File “/var/folders/rl/bjksdpqn5w5\_qk0fgv7p4z352df6b5/T/ansible\_5hoWa8/ansible\_modlib.zip/ansible/module\_utils/azure\_rm\_common.py”, line 164, in **init**  
File “/usr/local/Cellar/python/2.7.10\_2/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/msrestazure/azure\_active\_directory.py”, line 336, in **init**  
self.set\_token()  
File “/usr/local/Cellar/python/2.7.10\_2/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/msrestazure/azure\_active\_directory.py”, line 371, in set\_token  
raise\_with\_traceback(AuthenticationError, “”, err)  
File “/usr/local/Cellar/python/2.7.10\_2/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/msrest/exceptions.py”, line 50, in raise\_with\_traceback  
raise error  
msrest.exceptions.AuthenticationError: , InvalidGrantError: (invalid\_grant) AADSTS70002: Error validating credentials. AADSTS50126: Invalid username or password  
Trace ID: e88d80a1-dbcb-4587-a61b-408e0803ea2b  
Correlation ID: 6bab2577-18f9-4b2c-90d2-e6e09e3d00f7  
Timestamp: 2016-06-30 13:53:35Z

fatal: [localhost]: FAILED! =\> {“changed”: false, “failed”: true, “invocation”: {“module\_name”: “azure\_rm\_virtualmachine”}, “module\_stderr”: “Traceback (most recent call last):\n File "/var/folders/rl/bjksdpqn5w5\_qk0fgv7p4z352df6b5/T/ansible\_5hoWa8/ansible\_module\_azure\_rm\_virtualmachine.py", line 1281, in \n main()\n File "/var/folders/rl/bjksdpqn5w5\_qk0fgv7p4z352df6b5/T/ansible\_5hoWa8/ansible\_module\_azure\_rm\_virtualmachine.py", line 1278, in main\n AzureRMVirtualMachine()\n File "/var/folders/rl/bjksdpqn5w5\_qk0fgv7p4z352df6b5/T/ansible\_5hoWa8/ansible\_module\_azure\_rm\_virtualmachine.py", line 527, in **init** \n supports\_check\_mode=True)\n File "/var/folders/rl/bjksdpqn5w5\_qk0fgv7p4z352df6b5/T/ansible\_5hoWa8/ansible\_modlib.zip/ansible/module\_utils/azure\_rm\_common.py", line 164, in **init** \n File "/usr/local/Cellar/python/2.7.10\_2/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/msrestazure/azure\_active\_directory.py", line 336, in **init** \n self.set\_token()\n File "/usr/local/Cellar/python/2.7.10\_2/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/msrestazure/azure\_active\_directory.py", line 371, in set\_token\n raise\_with\_traceback(AuthenticationError, "", err)\n File "/usr/local/Cellar/python/2.7.10\_2/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/msrest/exceptions.py", line 50, in raise\_with\_traceback\n raise error\nmsrest.exceptions.AuthenticationError: , InvalidGrantError: (invalid\_grant) AADSTS70002: Error validating credentials. AADSTS50126: Invalid username or password\r\nTrace ID: xxxxxxxxxxxx \r\nCorrelation ID: xxxxxxxxxxxxx \r\nTimestamp: 2016-06-30 13:53:35Z\n”, “module\_stdout”: “”, “msg”: “MODULE FAILURE”, “parsed”: false}

---

<div class="post-metadata">

**Author:** ![Matt\_Davis](https://avatars.discourse-cdn.com/v4/letter/m/ce7236/32.png) [@Matt\_Davis](https://forum.ansible.com/u/Matt_Davis)\
**Post date:** [June 30, 2016, 5:03pm UTC](https://forum.ansible.com/t/how-to-use-new-azure-modules/21598/3 "2016-06-30T17:03:00Z")

</div>

Have you read and followed [http://docs.ansible.com/ansible/guide\_azure.html](http://docs.ansible.com/ansible/guide_azure.html) about creating the service principals in AD?

---

<div class="post-metadata">

**Author:** ![Tuomas-Matti\_Soikkel](https://avatars.discourse-cdn.com/v4/letter/t/ed655f/32.png) [@Tuomas-Matti\_Soikkel](https://forum.ansible.com/u/Tuomas-Matti_Soikkel)\
**Post date:** [June 30, 2016, 8:05pm UTC](https://forum.ansible.com/t/how-to-use-new-azure-modules/21598/4 "2016-06-30T20:05:41Z")

</div>

> Have you read and followed [http://docs.ansible.com/ansible/guide\_azure.html](http://docs.ansible.com/ansible/guide_azure.html) about creating the service principals in AD?

Yes and no.

I do not have access to classic portal, it is denied by our enterprise policy. Authenticating with service principals require access to classic portal. So I need to get the AD authentication to work.

I currently have “contributor” privileges in azure, might that be the case that I don’t have required permissions?

Service principal credentials shouldn’t be required according to the documentation from [https://docs.ansible.com/ansible/azure\_rm\_virtualmachine\_module.html:](https://docs.ansible.com/ansible/azure_rm_virtualmachine_module.html:)

> Note  
> Alternatively, credentials can be stored in ~/.azure/credentials. This is an ini file containing a [default] section and the following keys: subscription\_id, client\_id, secret and tenant or subscription\_id, ad\_user and password. It is also possible to add additional profiles. Specify the profile by passing profile or setting AZURE\_PROFILE in the environment.

I’ve done some test to verify that previously mentioned has some issues.

1. Passing credentials as parameters doesn’t work:

`  
$ cat test.yml

- hosts: localhost  
tasks:
- name: Create VM with defaults  
azure\_rm\_virtualmachine:  
resource\_group: Testing  
name: testvm10  
ad\_user: ‘test@user.com’  
password: ‘password’  
subscription\_id: ‘test-sub’  
admin\_username: root  
admin\_password: pass  
image:  
offer: CentOS  
publisher: OpenLogic  
sku: ‘7.1’  
version: latest

$ ansible-playbook test.yml

[WARNING]: provided hosts list is empty, only localhost is available

PLAY [localhost] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*

TASK [setup] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*  
ok: [localhost]

TASK [Create VM with defaults] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*  
fatal: [localhost]: FAILED! =\> {“changed”: false, “failed”: true, “msg”: “Failed to get credentials. Either pass as parameters, set environment variables, or define a profile in ~/.azure/credentials.”}

NO MORE HOSTS LEFT \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*  
to retry, use: --limit @test.retry

PLAY RECAP \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*  
localhost : ok=1 changed=0 unreachable=0 failed=1

`

1. Providing env variables doesn’t work:

`  
$ cat test.env

AZURE\_AD\_USER=‘test@test.com’  
AZURE\_PASSWORD=‘password’  
AZURE\_SUBSCRIPTION\_ID=‘test-sub’

source test.env && ansible-playbook test.yml:

$ ansible-playbook test.yml  
[WARNING]: provided hosts list is empty, only localhost is available

PLAY [localhost] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*

TASK [setup] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*  
ok: [localhost]

TASK [Create VM with defaults] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*  
fatal: [localhost]: FAILED! =\> {“changed”: false, “failed”: true, “msg”: “Failed to get credentials. Either pass as parameters, set environment variables, or define a profile in ~/.azure/credentials.”}

NO MORE HOSTS LEFT \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*  
to retry, use: --limit @test.retry

PLAY RECAP \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*  
localhost : ok=1 changed=0 unreachable=0 failed=1  
`

1. credentials profile is working, but doesn’t really. It seems that the module incorrectly excepts tenant id and fails when I have not provided it.

`  
cat ~/.azure/credentials

[default]  
ad\_user=‘test@test.com’  
password=‘password’  
subscription\_id=‘sub-test’

ansible-playbook test.yml

t-m@ubuntubox:~/dev/mtg-rate-estimate-ui$ ansible-playbook test.yml  
[WARNING]: provided hosts list is empty, only localhost is available

PLAY [localhost] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*

TASK [setup] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*  
ok: [localhost]

TASK [Create VM with defaults] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*  
An exception occurred during task execution. To see the full traceback, use -vvv. The error was: Timestamp: 2016-06-30 19:43:52Z  
fatal: [localhost]: FAILED! =\> {“changed”: false, “failed”: true, “module\_stderr”: “Traceback (most recent call last):\n File "/tmp/ansible\_AhQ2Oz/ansible\_module\_azure\_rm\_virtualmachine.py", line 1281, in \n main()\n File "/tmp/ansible\_AhQ2Oz/ansible\_module\_azure\_rm\_virtualmachine.py", line 1278, in main\n AzureRMVirtualMachine()\n File "/tmp/ansible\_AhQ2Oz/ansible\_module\_azure\_rm\_virtualmachine.py", line 527, in **init** \n supports\_check\_mode=True)\n File "/tmp/ansible\_AhQ2Oz/ansible\_modlib.zip/ansible/module\_utils/azure\_rm\_common.py", line 164, in **init** \n File "/home/t-m/.local/lib/python2.7/site-packages/msrestazure/azure\_active\_directory.py", line 261, in **init** \n self.set\_token()\n File "/home/t-m/.local/lib/python2.7/site-packages/msrestazure/azure\_active\_directory.py", line 296, in set\_token\n raise\_with\_traceback(AuthenticationError, "", err)\n File "/home/t-m/.local/lib/python2.7/site-packages/msrest/exceptions.py", line 50, in raise\_with\_traceback\n raise error\nmsrest.exceptions.AuthenticationError: , InvalidClientIdError: (invalid\_request) AADSTS90002: Requested tenant identifier ‘\*\*\*\*\*\*\*\*.com’’ is not valid.\r\nTrace ID: 3698ff8f-0117-4a0b-b4db-795d9d397d9e\r\nCorrelation ID: 46b00886-e1ed-43bd-9dfe-b1af1a59da45\r\nTimestamp: 2016-06-30 19:43:52Z\n”, “module\_stdout”: “”, “msg”: “MODULE FAILURE”, “parsed”: false}

NO MORE HOSTS LEFT \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*  
to retry, use: --limit @test.retry

PLAY RECAP \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*  
localhost : ok=1 changed=0 unreachable=0 failed=1

`

execution environment:

`  
$ lsb\_release -a  
No LSB modules are available.  
Distributor ID: Ubuntu  
Description: Ubuntu 15.10  
Release: 15.10  
Codename: wily

$ ansible --version  
ansible 2.1.1.0 (stable-2.1 a598f26006) last updated 2016/06/30 22:57:28 (GMT +300)  
lib/ansible/modules/core: (detached HEAD 1d0d5db97a) last updated 2016/06/30 21:14:15 (GMT +300)  
lib/ansible/modules/extras: (detached HEAD 00b8b96906) last updated 2016/06/30 21:14:19 (GMT +300)  
config file = /etc/ansible/ansible.cfg  
configured module search path = Default w/o overrides

$ pip list | grep azure  
azure (2.0.0rc2)  
azure-common (1.1.2)  
azure-graphrbac (0.30.0rc2)  
azure-mgmt (0.30.0rc2)  
azure-mgmt-authorization (0.30.0rc2)  
azure-mgmt-cdn (0.30.0rc2)  
azure-mgmt-compute (0.30.0rc2)  
azure-mgmt-logic (0.30.0rc2)  
azure-mgmt-network (0.30.0rc2)  
azure-mgmt-notificationhubs (0.30.0rc2)  
azure-mgmt-nspkg (1.0.0)  
azure-mgmt-redis (0.30.0rc2)  
azure-mgmt-resource (0.30.0rc2)  
azure-mgmt-scheduler (0.30.0rc2)  
azure-mgmt-storage (0.30.0rc2)  
azure-mgmt-web (0.30.0rc2)  
azure-nspkg (1.0.0)  
azure-servicebus (0.20.1)  
azure-servicemanagement-legacy (0.20.2)  
azure-storage (0.30.0)  
msrestazure (0.2.1)

`

---

<div class="post-metadata">

**Author:** ![Chris\_Houseknecht](https://avatars.discourse-cdn.com/v4/letter/c/c57346/32.png) [@Chris\_Houseknecht](https://forum.ansible.com/u/Chris_Houseknecht)\
**Post date:** [July 4, 2016, 7:28pm UTC](https://forum.ansible.com/t/how-to-use-new-azure-modules/21598/5 "2016-07-04T19:28:56Z")

</div>

This was definitely a problem, and it has been fixed in the devel branch with [PR #16559](https://github.com/ansible/ansible/pull/16559). To use this fix you will need to:

- [Run from source](http://docs.ansible.com/ansible/intro_installation.html#running-from-source)
- [Install Azure Python SDK == 2.0.0rc5](https://azure-sdk-for-python.readthedocs.io/en/latest/)

–Chris