An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
Failed CIAM resource blocks resource-group deletion; external tenant inaccessible
I cannot delete resource group <resource-group>. Its only remaining resource is: Microsoft.AzureActiveDirectory/ciamDirectories/name1dom1.onmicrosoft.com The resource has provisioningState: Failed. Deletion returns 403 Forbidden: Only Global…
Azure Role-based access control
Azure for Students blocked by [UnusualActivity] Full Deny — unable to submit a support request
Hello, I am using Azure for Students for a university research project called KodMentor. When I try to create a Microsoft Foundry project, deployment validation fails with a deny assignment named “[UnusualActivity] Full Deny assignment”. Azure Portal’s…
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
Need Help with Bicep and ARM template
I am working for a tool to make , which using bicep can find out service principal id and app id and assign these roles at the following scopes : Reader at tenant root group Cost Management reader at tenant root group Reservations Reader from…
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
I need Administrator Access
I am the Chief Commercial Officer. I need Administrator access. How do I complete that task?
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
Account has lost admin privileges
The signed-in account does not have the required Microsoft Entra directory role for user creation, even though it may be an administrator at the subscription/resource level.
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
How to fix the MFA authentication reset when we reset our mobile?
I recently reset my mobile phone and cannot access my learning portal account because the MFA authentication for my Microsoft account was removed from my mobile device. However, whenever I try to log in from another device, it asks for MFA…
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
App Service - What is the exact permission to retrieve custom error pages via APIs?
Hi, I tried asking Azure support team with this question; meanwhile, I thought I may be able to seek some help here as well - what is the exact permission to retrieve custom error pages for web apps? Setup: This is the Azure public documentation site…
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
I'm unable to create any Microsoft Sentinel Scheduled analytics rule. Every attempt fails with: "Unauthorized: Make sure you have the necessary permissions on all the workspaces in your query." This happens identically across three completely different
I'm unable to create any Microsoft Sentinel Scheduled analytics rule. Every attempt fails with: "Unauthorized: Make sure you have the necessary permissions on all the workspaces in your query." This happens identically across three completely…
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
Azure Confidential Ledger advanced UDFs: authoritative documentation for commit, current-state reads and recovery
We are evaluating Azure Confidential Ledger advanced UDFs/custom endpoints at the documentation stage, without deploying a ledger or requesting preview access. Could you point us to current authoritative documentation, with applicable API and CCF…
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
Azure for Students blocked by system-protected [UNUSUALACTIVITY] Full Deny Assignment, and I cannot create a support request
Hello, My Azure for Students subscription is Active and my account has the Owner role, but I cannot deploy any Azure resources. When I try to create a Resource Group, the operation fails with: DenyAssignmentAuthorizationFailed The error states that…
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
Management Group: Unable to Add Management Group Owner — Role Assignment Restrictions
Problem description I am trying to add a management group owner or assign a role at the management group scope, but I encounter restrictions. The Azure portal only shows the Security admin role, and the 'Add role assignment' action is disabled.…
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
Lost access to Azure MFA, although I have my Microsoft account MFA
I can sign in to my personal Microsoft account and its MFA works normally. However, I am unable to sign in to Azure because Azure is requesting an MFA verification through Microsoft Authenticator that was registered on a phone I no longer have. The…
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
Locked out of my Azure subscription after an Entra change — AADSTS16000 / Microsoft Services tenant
Hello Microsoft Azure Support / Moderators, I am the sole administrator of an Azure subscription that I created through Microsoft for Startups, and I am now completely locked out of Azure. My Azure subscription was successfully created before this issue…
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
Terraform management of PIM Eligible Role Assignments via AzAPI
Hi, I am looking for guidance on the recommended approach for managing Microsoft Entra PIM eligible role assignments through Terraform. We initially attempted to use the native Terraform AzureRM resource: azurerm_pim_eligible_role_assignment However, in…
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
How to create view only access for my IT person?
Could someone please help me to create view only access for my IT person?
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
how to fix [UNUSUALACTIVITY] FULL DENY ASSIGNMENT ON / FOR ALL USERS ADDED
My Azure for Students subscription is blocked by a root-level deny assignment: [UNUSUALACTIVITY] FULL DENY ASSIGNMENT ON / FOR ALL USERS ADDED My account has Owner permissions on the subscription, but creating a resource group fails with…
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
I cannot access the data in my CosmosDB, but I am an Owner
I have both the owner role and Cosmos DB Data Contributor role for my CosmosDB instance. I cannot access the read or write abilities I should be able to. Error: Request blocked by Auth xxxxx : Request is blocked because principal <myPrincipal>…
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
AADSTS50011 Error when referencing Azure Active Directory Powershell
I'm attempting to set up a controlled-access computer such that users can only access the machine if they are in a corresponding Security Group. The code I've been advised to run for this setup is below. When I run it, I get an AADSTS50011 error when I…
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
Visual Studio Enterprise (MSDN) subscription
I have an active Visual Studio Enterprise (MSDN) subscription, but the Azure subscription associated with it no longer has an Owner assignment available to me. Subscription Name: Visual Studio Enterprise. Do I need to request our organization team or get…
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
AI answer
What type of roles to assign an account that needs to register an app, create azure resources and have visibility of marketplace results within partner center.
The scope of work requires: App registrations in Microsoft Entra ID for the marketplace solutions and related integrations. Creation and management of Azure resources required to deploy, test, and maintain the solutions published through Microsoft…
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.