az group create fails with AuthorizationFailed error on new subscription

[rootd4ddy]

Describe the bug

When running az group create --name test-rg --location eastus on a fresh subscription, I get:

ERROR: (AuthorizationFailed) The client does not have authorization to perform action 'Microsoft.Resources/subscriptions/resourcegroups/write'

Environment

• Azure CLI version: 2.67.0
• OS: Ubuntu 22.04
• Python: 3.10.12

Steps to reproduce

1. Create a new Azure subscription
2. Run az login
3. Run az group create --name test-rg --location eastus
4. Observe AuthorizationFailed error

Expected behavior

Resource group should be created successfully.

[yonzhan]

Thank you for opening this issue, we will look into it.