Azure Event Grid System Topic Deployment Fails with Maintenance Configuration Source — Anyone Else Experiencing This?

Question

Azure Event Grid System Topic Deployment Fails with Maintenance Configuration Source — Anyone Else Experiencing This?

Jeroen Monnens 20

Hi all,

I'm running into a consistent issue when trying to deploy an Event Grid System Topic using a Maintenance Configuration as the source in Azure. The deployment fails with the following error:

Creation of System Topic has failed with error: Unable to verify access to resource /subscriptions/<SubscriptionId>/resourceGroups/<ResourceGroupName>/providers/Microsoft.Maintenance/MaintenanceConfigurations/<MaintenanceConfigurationName>. Please try again in a few minutes. Event Subscription will not be created.

What I've tried:

Deployment via Azure Portal
Deployment using Bicep
Deployment using the EventGrid PowerShell module
Tested across multiple subscriptions and different tenants

The error is consistent across all methods and environments. Permissions and role assignments appear to be correctly configured, and the Maintenance Configuration resource is valid and accessible. No special characters in the name either.

My question:

Has anyone successfully deployed a System Topic with a Maintenance Configuration as the source in the last weeks?
Is there a known issue? We have deployed these in the past without any issues.
Could this be a broader issue on Azure’s side?

Any insights, workarounds, or confirmation from others experiencing the same would be super helpful.

Thanks in advance!

Anurag Rohikar 2,785 Reputation points Microsoft External Staff Moderator

2025-08-28T09:43:16.75+00:00
Thanks for reaching out on Microsoft Q&A and really appreciate the detailed troubleshooting steps you’ve already done.

The error typically occurs when Event Grid is unable to validate access to the Maintenance Configuration resource. This can sometimes happen due to role assignment issues, API validation mismatches, or a platform-side regression.

Since you’ve already tested across multiple subscriptions, tenants, and deployment methods (Portal, Bicep, PowerShell), this is unlikely to be a misconfiguration on your side.

To narrow this down further, could you please confirm:

Region: Which region are the Maintenance Configuration and System Topic deployed in? Does the issue occur across regions?

Other sources: Are you able to create System Topics successfully from other sources (e.g., Storage Account, Key Vault) in the same subscription?

Roles: Can you confirm that your identity has the right RBAC roles, such as EventGrid Contributor on the Event Grid resource and proper access to the Maintenance Configuration?

Template details: Which API version for Microsoft.EventGrid/systemTopics are you using in your Bicep/ARM deployment?

Given that you mentioned these deployments used to work but are now failing consistently, this could point to a regression or backend validation issue on Azure’s side for the Maintenance Configuration event source.

Next steps / Workarounds:

Try deploying the System Topic in a different Azure region, as rollouts can sometimes behave differently across regions.

Attempt to create the System Topic first without attaching the Event Subscription, then add the subscription separately.
These above two-step process bypasses the combined validation check that fails, allowing the deployment to succeed.

If the issue persists, I recommend raising a support request with Microsoft Support to confirm if this is an active platform issue.

Documentation References:

System topics in Azure Event Grid

Azure Event Grid schema for maintenance events

Authorizing access to Event Grid resources

Hope this helps and thank you for your patience while we looked into this!
Anurag Rohikar 2,785 Reputation points Microsoft External Staff Moderator

2025-08-29T10:41:37.5333333+00:00

Hello Jeroen Monnens, Just checking to see if you have a chance to check my previous response and helped, do let me know if you have any further questions on this. Thank you!
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Derek Weber 0 Reputation points

2025-08-29T17:37:11.14+00:00

I am also experiencing this. I am trying to subscribe to SMS Events for a POC project, but I get the error
Creation of System Topic has failed with error
Unable to verify access to resource /subscriptions/***/resourceGroups/GWNN/providers/Microsoft.Communication/CommunicationServices/

If I try to create a system topic from the subscription, the UI is not able to read any resources in any resource group so the UI will not pass validation for creating a system topic
Derek Weber 0 Reputation points

2025-08-29T17:51:07.7633333+00:00

It appears to me like the Write System Topic operation is having issues reading other resources
Jeroen Monnens 20 Reputation points

2025-09-01T09:47:11.73+00:00

Derek,

I currently have an open Microsoft Support case.
It seems we can no longer create System Topics when using Contributor permissions.
Could you confirm if that is the case?
I tried it on another subscription with Owner permissions and then it succeeded successfully.
Jeroen Monnens 20 Reputation points

2025-09-01T09:49:06.98+00:00

Anurag Rohikar sorry my previous message was removed for some reason.
We currently have an open Support case with Microsoft.
gsouf 0 Reputation points

2025-09-11T11:42:49.14+00:00

Opened a ticket for a similar issue:

https://free.blessedness.top/en-us/answers/questions/5551973/azure-event-grid-system-topic-will-not-deploy-unab
gsouf 0 Reputation points

2025-09-11T11:44:13.5366667+00:00

@Jeroen Monnens did you get any insights from the support case?

1 answer

Your answer

Anurag Rohikar 2,785 Reputation points Microsoft External Staff Moderator

2025-08-29T10:41:37.5333333+00:00

Hello Jeroen Monnens, Just checking to see if you have a chance to check my previous response and helped, do let me know if you have any further questions on this. Thank you!
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Derek Weber 0 Reputation points

2025-08-29T17:37:11.14+00:00

I am also experiencing this. I am trying to subscribe to SMS Events for a POC project, but I get the error
Creation of System Topic has failed with error
Unable to verify access to resource /subscriptions/***/resourceGroups/GWNN/providers/Microsoft.Communication/CommunicationServices/

If I try to create a system topic from the subscription, the UI is not able to read any resources in any resource group so the UI will not pass validation for creating a system topic
Derek Weber 0 Reputation points

2025-08-29T17:51:07.7633333+00:00

It appears to me like the Write System Topic operation is having issues reading other resources
Jeroen Monnens 20 Reputation points

2025-09-01T09:47:11.73+00:00

Derek,

I currently have an open Microsoft Support case.
It seems we can no longer create System Topics when using Contributor permissions.
Could you confirm if that is the case?
I tried it on another subscription with Owner permissions and then it succeeded successfully.
Jeroen Monnens 20 Reputation points

2025-09-01T09:49:06.98+00:00

Anurag Rohikar sorry my previous message was removed for some reason.
We currently have an open Support case with Microsoft.
gsouf 0 Reputation points

2025-09-11T11:42:49.14+00:00

Opened a ticket for a similar issue:

https://free.blessedness.top/en-us/answers/questions/5551973/azure-event-grid-system-topic-will-not-deploy-unab
gsouf 0 Reputation points

2025-09-11T11:44:13.5366667+00:00

@Jeroen Monnens did you get any insights from the support case?

Answer 1

Microsoft Support:

We’ve received an update from our Product Group team regarding the issue you reported. After thorough investigation, they have identified a limitation within Event Grid. Currently, creating system topics in Azure subscriptions managed from a separate tenant via Azure Lighthouse is not supported.

This functionality was previously working; however, earlier this year, we migrated to a new system for checking user permissions during system topic creation. Unfortunately, this change introduced limitations specifically affecting Azure Lighthouse scenarios.

To resolve this, a code change is required, which will enable proper support for this scenario. The team has informed us that implementation and deployment will take a minimum of several weeks, and at this time, they do not have a concrete ETA.

Share via

Azure Event Grid System Topic Deployment Fails with Maintenance Configuration Source — Anyone Else Experiencing This?

1 answer

Your answer