Authorization settings for Deploy SAP IDES on Azure

Hello community,
currently, we are trying to deploy SAP IDES on Azure using SAP CAL. We want to try the free solution in first place.

Unfortunately, we are facing some issues with the connection from SAP CAL to Azure.

We are following this guide here:

https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/cal-ides-erp6-erp7-sp3-sql

A service account with the permission "owner" was created on the Azure subscription, but still SAP CAL is not able to connect to Azure with this service account. Maybe you can give us a hint what we missed to configure.

Thanks.