Deploying hosted agent in Microsoft Internal tenant issue

[prashantatrimicrosoft]

Lab 05 — Deploy the Hosted Agent - Deploying hosted agent in Microsoft Internal tenant having issues.

AZ login and AZD login done multiple times, but still same issue. Please document the permissions needed (RBAC).

azd deploy contoso-travel-concierge

Deploying services (azd deploy)

Service Status Duration
──────────────────────── ──────────── ──────────
✗ contoso-travel-concierge Failed 6s

ERROR: deploying service contoso-travel-concierge: failed deploying service 'contoso-travel-concierge': failed to check if agent exists: HTTP request failed: AzureDeveloperCLICredential: ********: The refresh token has expired due to inactivity. The token was issued on 2026-01-20T23:01:12.8193978Z and was inactive for 90.00:00:00. Trace ID: ************ Correlation ID: ***************** Timestamp: 2026-08-11 23:26:21Z. To troubleshoot, visit https://aka.ms/azsdk/go/identity/troubleshoot#azd

[nitya]

Tracked in the Code Club walkthrough: #4 — verified at checklist items 0.3 (re-auth both az and azd, which cache tokens independently), 0.6 (document the exact RBAC roles needed for hosted-agent deploy), and B6b (stale-token gotcha covering both refresh token has expired due to inactivity and the 404 Subdomain does not map to a resource variant).

[nitya]

Issue identified as change in azd and foundry process. Refactor in progress