App registration permission denied

de Souza, Manassés 20 Reputation points
2026-04-16T15:06:24.9133333+00:00

Screenshot 2026-04-15 162651.png

How can I troubleshoot the following error while trying "New registration" on "App registrations" menu option at Microsoft Entra admin center

Microsoft Security | Microsoft Entra | Microsoft Entra ID
Answer accepted by question author
Thanmayi Godithi 11,905 Reputation points Microsoft External Staff Moderator
2026-04-17T09:30:44.43+00:00

Hi de Souza, Manassés ,The error shown in the screenshot (“You don’t have permission to register applications” – Error 403) indicates that your user account does not have permission to create app registrations in this Microsoft Entra ID tenant. This is a tenant‑level restriction, not a portal or browser issue.

Please ask a Global Administrator in your tenant to verify the following:

User role

1.App registration requires one of these roles:

  • Application Developer (minimum)
  • Application Administrator
  • Cloud Application Administrator
  • Global Administrator

2.Tenant app registration setting

3.Go to: Microsoft Entra admin center → Identity → Users → User settings → App registrations

4.Ensure “Users can register applications” is enabled (If disabled, only privileged roles can create app registrations.)

In many enterprise tenants, app registrations are intentionally restricted. If you do not have the required role, this access‑denied message is expected behavior.

Kindly let us know if the above helps or you need further assistance on this issue.

If the answer is helpful, please "Accept the answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Was this answer helpful?

1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest

  1. AI answer

    2026-04-16T15:06:40.0866667+00:00

    The error when selecting New registration in App registrations is typically caused by restricted permissions for creating applications in the Microsoft Entra tenant.

    Troubleshoot and resolve as follows:

    1. Confirm the symptom and cause
      • The portal shows a message similar to:
        • Access denied
        • You do not have access
        • You don't have permission to register applications in the <directoryName> directory. To request access, contact your administrator.
      • Cause: The directory administrator has restricted who can create app registrations.
    2. Ask an administrator to grant the right permissions
      • Contact a Microsoft Entra administrator (for example, Global Administrator, Privileged Role Administrator, or similar) and request one of these actions:
        1. Assign the Application Developer role
          • The admin should go to Microsoft Entra admin center → Entra ID → Roles and administrators and assign the Application Developer role to the account that needs to create app registrations.
          • This role grants permission to create and consent to applications.
        2. Create the app registration and assign ownership
          • The admin can create the app under Entra ID → App registrations → New registration.
          • After creation, the admin should add the user as an Owner of the app registration so it can be managed without needing full registration permissions.
    3. (For admins) Check tenant-wide app registration settings
      • If users should be allowed to self-register apps, the admin can:
        • Go to the User settings blade in Microsoft Entra ID.
        • Ensure Users can register applications is set to Yes.
      • If this setting remains No, only users with appropriate roles (such as Application Developer) or admins can register apps.
    4. Use an existing app registration when creation is blocked
      • If the account cannot be granted app registration permissions, an admin can:
        • Create the app registration in the tenant.
        • Assign the user as Owner.
      • For services like App Service or Azure Functions, configuration can then point to this existing registration instead of creating a new one.

    If, after these steps, the error persists, the tenant admin should review role assignments and directory settings in the Microsoft Entra admin center and, if needed, open a support request from Diagnose & solve problems.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.