Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
Failed CIAM resource blocks resource-group deletion; external tenant inaccessible
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(3.2, 49%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EU%3C/text%3E%3C/svg%3E)
Uralstech
20
Reputation points
I cannot delete resource group <resource-group>. Its only remaining resource is:
Microsoft.AzureActiveDirectory/ciamDirectories/name1dom1.onmicrosoft.com
The resource has provisioningState: Failed.
Deletion returns 403 Forbidden: Only Global Administrators for this directory can manage its settings. An earlier attempt returned AADB2C95060: UserCountExceeded.
The associated external tenant is different from my main tenant. I believe it was created earlier and then I deleted the account maybe an entra account and I no longer remember which one it was.
I cannot complete the normal tenant-deletion prerequisites because the directory is inaccessible.
Azure Role-based access control
Sign in to answer