Unable to get table reference or create table. Aborting write operation.

[Mikkelcv]

Previous function runtime: 4.1037.1.23605
Current function runtime: 4.1038.300.25164

After the function runtime version has been updated to 4.1038 then our function app periodicaly every 10 minutes reports the exception:

"Unable to get table reference or create table. Aborting write operation."

Message:

This request is not authorized to perform this operation using this permission.
Time:2025-04-11T11:38:55.5555894Z
Status: 403 (Forbidden)
ErrorCode: AuthorizationPermissionMismatch

The execption originates in:
{"assembly":"Microsoft.Azure.WebJobs.Script.WebHost, Version=4.1038.0.0, Culture=neutral, PublicKeyToken=null","method":"Microsoft.Azure.WebJobs.Script.WebHost.Diagnostics.DiagnosticEventTableStorageRepository+<FlushLogs>d__30.MoveNext","level":34,"line":195,"fileName":"/_/src/WebJobs.Script.WebHost/Diagnostics/DiagnosticEventTableStorageRepository.cs"}

Granting the function app: "StorageTableDataContributor" RBAC role on the storage enables the function app to create an empty table in the storage.

Why is it now a requirement that this empty table must be created?
How do we disable this so we can have the old functionallity back?

It is NOT an option to grant this RBAC role to all function apps, we do not need this and wont grant access that is not required otherwise.

The guide:
https://learn.microsoft.com/en-us/azure/azure-functions/storage-considerations?tabs=azure-cli

Does not explain that the access is required. Is it something that is on its way?

[asos-chanhkiethuynh]

We have been experiencing the same issue as well out of no where, since 26/04/2025.

[scrocquesel-ml150]

Neither is https://learn.microsoft.com/en-us/azure/azure-functions/functions-reference?tabs=blob&pivots=programming-language-csharp#connecting-to-host-storage-with-an-identity updated.
This is related to modification done for #9569

[scrocquesel-ml150]

The role "Storage Table Data Contributor" on the storage account is enough.

[rob-thijssen]

I totally agree on all statements made by @Mikkelcv. Especially on this one:
It is NOT an option to grant this RBAC role to all function apps, we do not need this and wont grant access that is not required otherwise.

We're also experiencing this issue since april 11th, and our logs are already polluted with these messages for multiple subscriptions.
As a work-around we could add this statement: "Microsoft.Azure.WebJobs.Script.WebHost.Diagnostics.DiagnosticEventTableStorageRepository": "None" to host.json in the logging/loglevel section. But for obvious reasons this is not the desired solution.
So could this please be fixed in a decent manner asap?

[WingTai]

We have also been experiencing this issue since around March 26th, with an increase in these errors since April 11th, even though we haven't deployed any new versions of the affected function apps in long time.

Any acknowledgement and fix from MSFT? Preferably would not like to apply the suggested workarounds.

[arjavgarg]

Yes, we also started seeing this issue on 3/26/2025, 9:25:43.665 AM (UTC)

[czeslav87]

+1

Multiple function apps, using Managed Identity access to storage with Storage Blob permissions only, started to throw this on 26th March 2025.

[LavanyaMullapudi2328]

Role assignment is not helping out. Still seeing the error even after assigning the "Storage Table Data Contributor " Role to the function app