1,012 questions with Azure Role-based access control tags

Sort by: Updated
Updated Created Answers
1 answer One of the answers was accepted by the question author.

Azure Cost management edit permission

Hi, We’ve recently started using a new SCE agreement, but the subscription owner is currently unable to view cost information. They are seeing an error message that says they don't have permission and should contact the provider. I believe the setting…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
1,012 questions
asked 2025-08-29T01:26:34.63+00:00
Yu-Jeong Seo 230 Reputation points
edited a comment 2025-08-29T06:59:39.03+00:00
Yu-Jeong Seo 230 Reputation points
1 answer

Locked out of tenant for 4+ weeks – Identity Protection block, no resolution

I’ve been completely locked out of a Microsoft 365 / Azure tenant for over 4 weeks due to a Microsoft Entra ID (Azure AD) Identity Protection policy misconfiguration. Only a break-glass account can sign in, but it does not have sufficient permissions to…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
1,012 questions
asked 2025-08-11T06:25:01.2566667+00:00
Christopher Quinn 0 Reputation points
commented 2025-08-29T04:13:10.3833333+00:00
Monalisha Jena 330 Reputation points Microsoft External Staff Moderator
1 answer

Microsoft transferred subscription to a new directory and broke all RBAC assignments. Now owners have no privileges.

Microsoft transferred subscription to a new directory and broke all RBAC assignments. Now owners have no privileges and no way to get them back. I require Microsoft intervention in this to restore access.

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
1,012 questions
asked 2025-07-29T23:01:45.7633333+00:00
Greg Dobbs 0 Reputation points
commented 2025-08-28T12:05:33.28+00:00
Praveen Chivarla 105 Reputation points Microsoft External Staff Moderator
1 answer

Role Permission problems on my Azure Subscription

I have a test Azure subscription we use for testing, etc. I haven't used it in about 3 months and when I go to login with my Global Admin account I get this error- The client (my UPN) with object (SID for my UPN) does not have authorization to perform…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
1,012 questions
asked 2025-08-27T19:22:06.6733333+00:00
Gigmac 0 Reputation points
edited the question 2025-08-28T03:01:09.6666667+00:00
Jilakara Hemalatha 340 Reputation points Microsoft External Staff Moderator
1 answer One of the answers was accepted by the question author.

My Staff page does not dispay all users in Administrative Unit

I have created multiple Administrative Units and assigned the Password Administrator role to the appropriate staff. I am getting reports from one of my larger AUs, 1500+ users, that they cannot find some users in the mystaff.microsoft portal. Either via…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
1,012 questions
asked 2025-08-27T15:55:43.12+00:00
Ryan Dodd 20 Reputation points
commented 2025-08-27T16:58:15.7466667+00:00
Ryan Dodd 20 Reputation points
0 answers

Subscription RBAC export does not include roles assigned to PIM onboarded security groups

Using azure portal 'download rbac assignments' for the subscription, and similarly using 'az' and 'management.azure.com' api's they all do not include roles assigned to the PIM onboarded security groups - every other role assignment is present, including…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
1,012 questions
asked 2025-08-21T20:48:48.3733333+00:00
Robert Thomson 0 Reputation points
commented 2025-08-26T15:36:04.0666667+00:00
Surya Prakash Kotte 160 Reputation points Microsoft External Staff Moderator
1 answer One of the answers was accepted by the question author.

Verifying "Restrict access to Microsoft Entra administration portal" Setting via API in Azure Entra ID

How can a script be written to check the current setting of all options under user settings in Azure Entra ID? Specifically, what is the method to verify via API whether the "Restrict access to Microsoft Entra administration portal" option is…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
1,012 questions
asked 2025-08-12T14:48:12.2366667+00:00
DiptiRanjan Swain 236 Reputation points
commented 2025-08-25T14:11:51.8733333+00:00
DiptiRanjan Swain 236 Reputation points
1 answer One of the answers was accepted by the question author.

MFA Enabled on Azure Account and need to add domain as external domain

Tenant ID: 3f1a724c-80c0-4e4a-9f48-df421ce006c5 Domain FITI.ORG Username: ******@fiti.org Domain to transfer to : FITIMD.ONMICROSOFT.COM Tenant ID: 60d67474-1bf6-4d5c-bbfd-fef4ede7a476 Username: ******@fitimd.onmicrosoft.com

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
1,012 questions
asked 2025-07-27T23:18:03.5833333+00:00
Anthony G. McMillon 20 Reputation points
commented 2025-08-22T17:47:57.21+00:00
Anthony G. McMillon 20 Reputation points
1 answer

systemforcrossdomainidentitymanagementclientnonservicefailure error in EntraID to Oracle IDCS provisioning for some users

I have a SCIM connection between EntraID and Oracle IDCS. We recently added this and are trying to provision groups to users through the SCIM connection. the connection and provisioning work fine for net new users, however for users who already existed…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
1,012 questions
asked 2025-08-21T21:11:00.82+00:00
Choksi, Neal Manish 0 Reputation points
answered 2025-08-22T17:03:11.2533333+00:00
Sina Salam 24,096 Reputation points Volunteer Moderator
3 answers

Not able to DISABLE the function in Azure function app with custom role

I have created custom role for users. In this role I have given all the access to function app except delete access to function app. However, user is not able to "Disable" the functions in function app. Error is as below: Failed to disable…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
1,012 questions
asked 2025-07-08T05:42:06.18+00:00
Urmila Purohit 100 Reputation points
edited an answer 2025-08-22T15:40:48.64+00:00
Robert-Jan Martens 0 Reputation points
2 answers

App Registration

Hi I have create App Registration than I given access to various resources on azure to this service principal, When running az role assignment list --assignee "{clientId}" it returns me empty roles assigned to this app registration and it…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
1,012 questions
asked 2025-08-06T11:23:02.5766667+00:00
Krzysztof Raczka 0 Reputation points
commented 2025-08-21T04:54:16.7766667+00:00
Praveen Chivarla 105 Reputation points Microsoft External Staff Moderator
4 answers

Missing Cosmos DB Built-in Data Reader and Cosmos DB Built-in Data Contributor roles in Access Control (IAM)

I'm trying to assign roles to managed identity in Cosmos DB, through browser using Access Control (IAM). Unfortunately two build in roles Cosmos DB Built-in Data Reader and Cosmos DB Built-in Data Contributor are not there. How can I add managed…

Azure Cosmos DB
Azure Cosmos DB
An Azure NoSQL database service for app development.
1,948 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
1,012 questions
Microsoft Security | Microsoft Identity Manager
asked 2023-02-01T15:31:32.8+00:00
Jacek Przezdziecki (ext) 20 Reputation points
commented 2025-08-20T21:29:49.0333333+00:00
Schroeder, Michael (CTR) 36 Reputation points
3 answers One of the answers was accepted by the question author.

Locked out as sole Global Admin – lost Authenticator and no backup methods

I am the only Global Administrator in my Azure AD / Microsoft Entra ID tenant (<PII removed>@removed.onmicrosoft.com). I recently changed my phone and no longer have access to the Microsoft Authenticator app. I did not set up any alternate phone…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
1,012 questions
asked 2025-06-24T06:36:54.2966667+00:00
Mohd Umair Ansari 35 Reputation points
answered 2025-08-20T04:04:05.9966667+00:00
VILLANUEVA Angelica 0 Reputation points
1 answer

Access Issues with User and Group in Student Subscription

Encountering an error when trying to access users or groups in a student subscription. The error message received…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
1,012 questions
asked 2025-08-17T23:06:45.57+00:00
Nandini Vats 0 Reputation points
edited the question 2025-08-18T17:19:53.1833333+00:00
Rahul Jorrigala 4,325 Reputation points Microsoft External Staff Moderator
1 answer

Prevent users from creating azure subscriptions in tenant

Hi Team, Is there any option to prevent the users from creating azure subscriptions in tenant. Only Global admin should have access for creating subscription and other users should not have option to create subscription in tenant level

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
1,012 questions
asked 2024-11-04T14:30:32.7666667+00:00
Naveen Rayudu (MINDTREE LIMITED) 0 Reputation points Microsoft External Staff
commented 2025-08-15T12:55:05.6033333+00:00
Zvi 0 Reputation points
1 answer

In one of our subscriptions I cannot add a role assignment to a user, in 3 others it works just fine

In one subscription I am trying to add a role assignment to a user. When I do this no roles are displayed. If I try to do it by looking at the roles - I can find the role, but when I try and add an assignment from here I get pushed back to the first…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
1,012 questions
asked 2025-08-14T21:37:06.1866667+00:00
Patrick Grant 0 Reputation points
answered 2025-08-15T00:38:13.5366667+00:00
Swaroop Kolli 5,160 Reputation points Microsoft External Staff Moderator
1 answer One of the answers was accepted by the question author.

Setting access review for PIM - Showing groups and not users

We're deploying PIM and PIM for Groups. We have some singular roles (such as Exchange Recipient Administrator) for specific tasks, and we have some groups set up that require several roles (such as user separations that required User Administrator,…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
1,012 questions
asked 2025-08-13T12:29:38.1833333+00:00
Joe Grover 606 Reputation points
accepted 2025-08-14T12:09:09.18+00:00
Joe Grover 606 Reputation points
0 answers

Getting error when connecting LCS to Azure

Why am I getting this error when connnecting my Azure subscription to my LCS

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
1,012 questions
asked 2025-08-13T16:51:17.5266667+00:00
Manish Kaura 0 Reputation points
edited the question 2025-08-13T18:12:49.5866667+00:00
Gérard Oomens 105.8K Reputation points Volunteer Moderator
1 answer One of the answers was accepted by the question author.

Azure Access error

Error Code: 53003 Request Id: xxxxxxxx-xxxx-xxxx-xxxx-0f1xx... Correlation Id: xxxxxxxx-xxxx-xxxx-xxxx-114xx... Timestamp: 2025-07-22T13:59:40.180Z App name: Microsoft App Access Panel App id: 000... IP address: 95.xx... Device identifier: Not…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
1,012 questions
asked 2025-07-23T15:24:27.4866667+00:00
James Murphy 20 Reputation points
accepted 2025-08-12T12:51:37.24+00:00
James Murphy 20 Reputation points
2 answers

Request for Access to Microsoft Entra Admin Center – Azure for Students

I'm a student at Harper College using the Azure for Students subscription. I'm trying to access the Microsoft Entra Admin Center (entra.microsoft.com) to register my application and configure SSO under Enterprise Applications. However, I'm receiving an…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
1,012 questions
asked 2025-07-29T16:02:11.66+00:00
Joey Tran 0 Reputation points
commented 2025-08-12T00:52:42.0233333+00:00
Joey Tran 0 Reputation points