Permission's deploying a template in 365

Trying to do something in Azure and getting a message like this...even though you might be a global admin?

The template deployment failed with error: 'Authorization failed for template resource of type 'Microsoft.Authorization/roleAssignments'. The client 'first.last@company.com' with object id does not have permission to perform action 'Microsoft.Authorization/roleAssignments/write' at scope '/subscriptions providers/Microsoft.Authorization/roleAssignments (Code: InvalidTemplateDeployment)

As of writing, here's a possible fix.

Log into entra.microsoft.com

Under "ENTRA ID" select "OVERVIEW"

Select "PROPERTIES" 

Scroll down to "Access Management for Azure resources" and set it to "YES".  Then wait for a period of time, 15-30 minutes for it to take effect.  Then try

At time of writing its suggested that you revert this setting back after you made the addition template.