AuthorizationFailed""The client '***' with object id '***' does not have authorization to perform action 'or the scope is invalid. If access was recently granted, please refresh your credentials

 Warning  SyncLoadBalancerFailed  4m9s (x11 over 29m)   service-controller  Error syncing load balancer: failed to ensure load balancer: Retriable: false, RetryAfter: 0s, HTTPStatusCode: 403, RawError: Retriable: false, RetryAfter: 0s, HTTPStatusCode: 403, RawError: {"error":{"code":"AuthorizationFailed","message":"The client '***' with object id '***' does not have authorization to perform action 'Microsoft.Network/virtualNetworks/subnets/read' over scope '***subnets' or the scope is invalid. If access was recently granted, please refresh your credentials."}}

如果patch service失败是因为over scope就是权限不足需要执行
az role assignment create --assignee *** --role "Contributor" --scope ***