Not able to create a Managementgroup within the Root Managementgroup

[mkuhn75]

Hey guys
i'm trying to figure out how i can create a new managementgroup within the root management group. i have a user with global admin permissions and when i click on the root managementgroup IAM i have the following:

• hierarchy settings administrator
• owner
• user access administrator

previously i didn't had that permissions as i believe someone added that account just weeks ago.

anyway, when i try to create a new managementgroup in azure portal, i'm successful, but when i try it with bicep with this script, i get an error:

Tenant scope deployment is not currently supported.

`
targetScope = 'tenant'
param mgName string = 'mg-${uniqueString(newGuid())}'

resource mgName_resource 'Microsoft.Management/managementGroups@2021-04-01' = {
name: mgName
properties: {}
}
`

which i have from here: [https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deploy-to-tenant?tabs=azure-cli#required-access]

Can anyone help me what could be wrong?

Thanks and best regards,
Marc