Azure Manage artifact signing account -> Identity validation, "Renew" button greyed out

Assign your user account the Artifact Signing Identity Verifier role, because that role—not Owner or Contributor—enables the Renew action for identity validations.

Assign the required role

1. In the Azure portal, open the relevant Artifact Signing account.
2. Select Access control (IAM).
3. Open Roles, then search for Artifact Signing Identity Verifier.
4. Select Add → Add role assignment and assign the role to the user who will perform the renewal.
5. Ensure that user also has at least Reader at the subscription scope, which is a prerequisite for the Identity Verifier role.^1^

Being Owner or Contributor does not replace this service-specific role: the Artifact Signing permissions table shows that only Artifact Signing Identity Verifier manages identity validation requests. Identity validation management and role assignment must be completed through the Azure portal, not Azure CLI.^1^

Renew the validation

After the role is assigned:

1. Open the Artifact Signing account.
2. From the account overview or Objects, select Identity Validation.
3. Select the organization identity validation that is approaching expiration.
4. Select Renew in the top toolbar.
5. Complete the new validation review and provide any requested documentation.

Renewal becomes available starting 60 days before expiration and can take 1–20 business days. The renewal itself can only be completed in the Azure portal.^2^

A directly matching disabled-renewal case was resolved by assigning the Identity Verifier role.^3^

If Renew remains disabled

Check these conditions:

• More than 60 days remain: wait until the validation enters its documented 60-day renewal window.
• The validation has already expired: create a new identity validation instead of renewing it.
• Renew opens but produces validation errors: create a new identity validation, as prescribed by the renewal procedure.^2^
• The correct role is assigned, fewer than 60 days remain, and Renew is still disabled: create an Azure support ticket from the Azure portal and include the Artifact Signing account, identity-validation ID, expiration date, and a screenshot of the disabled button. Artifact Signing’s documented support options include Azure Support and Microsoft Q&A under the Artifact Signing tag.^4^

Do not allow the validation to expire if possible: expiration stops certificate renewal and consequently stops signing through the affected certificate profiles.^2^

References

1. Tutorial: Assign roles in Artifact Signing
2. Renew or delete Artifact Signing Identity Validations
3. I can't renew individual identity validation being in Czechia - Microsoft Q&A
4. Artifact Signing FAQ