Hi Abrar Adil S,
Thank you for reaching out on Microsoft Q&A forum
Please be assisted with below followings for bastion service.
Extension and Permissions:
Make sure the Azure AD Login extension is correctly installed on your VM, as you have already assigned the RBAC roles (Virtual Machine User Login and Virtual Machine Administrator Login), ensure the user is indeed granted access properly without any conflicts.
Connection Settings:
When connecting through Bastion, on the Bastion connection page, make sure you are using the correct format for the username. If your VM is domain-joined, use the format: ******@domain.com.
Enable System Assigned Managed Identity
This is automatically enabled when you toggle Login with AAD credentials during VM creation.
If not, enable it manually in the VM’s Identity blade.
Network Requirements
Ensure Public IP is disassociated from the machine to make azure bastion functional.
Ensure outbound access to Azure AD endpoints over TCP port 443 is allowed.
Bastion service should be attached to same v-net.
Confirm the VM has internet connectivity and the Azure VM Agent is in a healthy state.
Please find the link below for Azure Bastion reference.
https://learn.microsoft.com/en-us/azure/bastion/bastion-overview
If you find this comment helpful, Please “up-vote” for the information provided , this can be beneficial to community members.
Kindly let us know if you have any additional questions.
Thanks