对象ID为xxx的客户端xxx无权在作用域上执行操作microsoft.resources/subscriptions/resourcegroups/write'

我正在尝试使用Azure Management SDK动态创建资源组 以下是我的Azure配置详细信息

subscription=<private-data>
client=<private-data>
key=<private-data>
tenant=<private-data>
managementURI=https://management.core.windows.net/
baseURL=https://management.azure.com/
authURL=https://login.windows.net/
graphURL=https://graph.windows.net/

这是创建资源的代码

// Credentials
AzureCredentials credentials = new AzureCredentialsFactory()
    .FromFile("azureauth.properties");
string resourceName = GetRandomString();

// Create Azure Instance
var azure = Azure
        .Configure()
        .Authenticate(credentials)
        .WithDefaultSubscription();

// Create a Resource Group
azure.ResourceGroups
        .Define(resourceName)
        .WithRegion(Region.USWest)
        .Create();

我得到的错误是:

具有对象ID的客户端“AE8BC2EA-9680-4F66-934C-AD40B82C30AC” “AE8BC2EA-9680-4F66-934C-AD40B82C30AC”无权 执行操作 作用域上的“microsoft.resources/subscriptions/resourcegroups/write” '/subscriptions/e9d6100-a82a-48ca-b6f8-51b06a1eebe6/resourcegroups/5oxjhjic'。

我已经按照规定的步骤 https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-create-service-principal-portal
我也在尝试 全局管理员 解释