Azure Load Test on Private Network Stuck on Provisioning with: "Failed to provision test engines for the test run in the private network..."

Jason Kang 25 Reputation points
2025-06-19T17:59:35.0933333+00:00

We're trying to set up the ability to perform Azure Load Tests on our Azure Subscription. We are testing private endpoints. We are trying a simple URL Test, but can't get past the provisioning stage. It fails with the message:

"Failed to provision test engines for the test run in the private network '___'. Refer https://aka.ms/alt/VnetTSG for troubleshooting test engine virtual network connectivity to address any network configuration issues and try again. If the issue persists, raise a support ticket along with the test run ID."

We are able to elevate ourselves to the Network Contributor and Load Test Owner roles. Is this all we need to provision the test engine VMs? Or do we need an additional role for this?

Azure Load Testing
Azure Load Testing
An Azure service that enables developers and testers to generate insights on how to improve the performance, scalability, and capacity usage of their application
0 comments No comments
{count} votes

Accepted answer
  1. Vinodh247 36,031 Reputation points MVP Volunteer Moderator
    2025-06-22T16:11:25.43+00:00

    Hi ,

    Thanks for reaching out to Microsoft Q&A.

    Use the troubleshooting guide from the error message: https://aka.ms/alt/VnetTSG

    It gives precise steps for:

    Verifying NSG/UDR

    Outbound FQDN access

    Enabling diagnostic logs on Load Testing

    Minimum Working Setup Checklist

    Azure Load Testing is deployed in the same region as the VNet

    Load Testing resource has Managed Identity enabled

    The subnet allows:

    Outbound to target endpoints

      Outbound to Azure service endpoints
      
      No restrictive UDRs or NSGs blocking outbound traffic
      
    
    • DNS resolution works from the subnet to the private endpoin

    Suggested Next Steps

    Verify NSG/UDR/DNS as above

    Check if you need to add "Managed Identity Operator" role temporarily to assign identity

    Attempt a test from a VM in the same subnet as test engine

    Review Diagnostic logs from the Load Test Resource

    1. If issue persists, raise a ticket with Test Run ID and reference to the TSG doc

    Please 'Upvote'(Thumbs-up) and 'Accept' as answer if the reply was helpful. This will be benefitting other community members who face the same issue.


0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.