Error retrieving workspace - Unable to decode or validate token

[kevinpagliarulo]

When trying to view a newly created workspace, I'm getting the following error:

Endpoint	workspaces/9109d61e-5726-440b-8148-f0c9e960f2a7/workspace-services
Status Code	401
Stack Trace	Error: Unable to decode or validate token at https://kpagtre002.eastus2.cloudapp.azure.com/static/js/main.5c7bee3c.js:2:734300 at p (https://kpagtre002.eastus2.cloudapp.azure.com/static/js/main.5c7bee3c.js:2:399423) at Generator. (https://kpagtre002.eastus2.cloudapp.azure.com/static/js/main.5c7bee3c.js:2:400760) at Generator.next (https://kpagtre002.eastus2.cloudapp.azure.com/static/js/main.5c7bee3c.js:2:399786) at i (https://kpagtre002.eastus2.cloudapp.azure.com/static/js/main.5c7bee3c.js:2:405415) at s (https://kpagtre002.eastus2.cloudapp.azure.com/static/js/main.5c7bee3c.js:2:405618)
Exception

[marrobi]

Can you go to:

https://kpagtre002.eastus2.cloudapp.azure.com/api/docs

click Authorize, and Authorize again, no client secret needed.

Use the workspace operations endpoint to retrieve the operations logs:

If can let us know what they say.

We need to fix the ability to retrieve logs for failed deployments - #2363

[marrobi]

'Authorization_RequestDenied: Insufficient privileges to complete the \u001b[31m│\u001b[0m \u001b[0moperation.'

Like like can't create the groups. What do you have AUTO_WORKSPACE_GROUP_CREATION set to in config.yaml

See https://microsoft.github.io/AzureTRE/0.8.0/tre-admins/auth/ for full description.

Might have to go manual add the Group.ReadWrite.All permission to the Application Admin identity. 

[kevinpagliarulo]

AUTO_WORKSPACE_GROUP_CREATION to TRUE and a "make auth"/"make all" fixed this. Thank you!

[marrobi]

#2628 would also alleviate this issue.