Unable to Create Always On Listener Due to Permission Issue

Error:

Cluster network name resource ‘XXXX’ failed to create its associated computer object in domain ‘xxxxx’ during: Resource online.

The text for the associated error code is: Cannot complete this function.

Please work with your domain administrator to ensure that:

• The cluster identity ‘XXXX$’ has Create Computer Objects permissions. By default all computer objects are created in the same container as the cluster identity ‘XXXX$’.
• The quota for computer objects has not been reached.
• If there is an existing computer object, verify the Cluster Identity ‘XXXX$’ has ‘Full Control’ permission to that computer object using the Active Directory Users and Computers tool.

Resolution:

In Active Directory Users and Computers…

• Cluster Object -> Security -> Domain Admins -> Full Control
• Listener Object -> Security -> Server Node (XXXXXX$) -> Full Control
• Listener Object -> Security -> Cluster Object (XXXXXX$) -> Full Control

Documentation:

Check on the documentation listed below and verify the permissions are properly assigned to both accounts.

Configuring cluster accounts in Active Directory | Microsoft Learn

How to Troubleshoot Create Cluster Failures – Microsoft Community Hub

Troubleshoot Cluster service account – Windows Server | Microsoft Learn

https://learn.microsoft.com/en-us/sql/database-engine/availability-groups/windows/create-or-configure-an-availability-group-listener-sql-server?view=sql-server-ver15

https://learn.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/availability-group-load-balancer-portal-configure?view=azuresql#step-5-create-the-availability-group-listener-on-the-failover-cluster

Sources:

Grant create computer object permissions to the cluster