I have an Azure Function App with both a user & system assigned identities – the user-assigned-identity is also create as a external user in the ‘contained’ database and has reader/writer/ddladmin roles assigned…

When executing the function app the logs are showing…

Result: Failure Exception: Microsoft.Data.SqlClient.SqlException (0x80131904): The user attempting to perform this operation does not have permission as it is currently logged in as a member of an Azure Active Directory (AAD) group but does not have an associated database user account. A user account is necessary when setting the ownership of an object. To resolve this error, create an Azure AD user from external provider, then rerun the statement.

I tried to find the cause of the above error message online but can’t find anything…will keep looking.

Any thoughts on the cause and a fix?