230 questions with Azure Role-based access control tags

Sort by: Answers
Updated Created Answers
6 answers One of the answers was accepted by the question author.

Authorization failed when when writing a roleAssignment

I'm receiving the following error when trying to create a role assignment using terraform: Error: authorization.RoleAssignmentsClient#Create: Failure responding to request: StatusCode=403 -- Original Error: autorest/azure: Service returned an error.…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
694 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,034 questions
asked 2021-02-24T21:50:28.377+00:00
Andrew 26 Reputation points
answered 2024-02-28T05:08:45.4233333+00:00
Mahmoud A. ATALLAH 201 Reputation points MVP
5 answers One of the answers was accepted by the question author.

Get-AzWvdSessionHost gives error: Cannot bind argument to parameter 'SubscriptionId' because it is null.

Hi! I am getting an error, if I am tring to run the Get-AzWvdSessionHost command from a Powershell script. The error is: Cannot bind argument to parameter 'SubscriptionId' because it is null. If i am connecting in interactive mode, using…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
694 questions
Windows Server PowerShell
Windows Server PowerShell
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.PowerShell: A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
5,426 questions
asked 2022-10-17T10:41:47.85+00:00
petersonal 86 Reputation points
commented 2022-10-24T16:21:39.203+00:00
Olga Os - MSFT 5,836 Reputation points Microsoft Employee
5 answers One of the answers was accepted by the question author.

Issue Capturing VM fortigate as an image

Hello i am trying to Capture an vm of fortigate as an image and it doesnt work does azure support capturing nva machines as an image? if no is there another way to save nva as an image ?

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
694 questions
asked 2022-09-15T08:15:26.69+00:00
Slava Shishkin 21 Reputation points
answered 2022-09-15T13:28:37.42+00:00
Martin Dimovski 1,596 Reputation points MVP
4 answers One of the answers was accepted by the question author.

Azure Service Principal owner cannot reset credentials with az cli

Hello, as an Azure subscription admin I created a service principal and granted another user as Owner of the SP itself. This user is trying to reset SP credentials with command az ad sp credential reset --id <application id> but he gets the…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
694 questions
asked 2023-07-05T16:43:30.74+00:00
Repetti Pierangelo 20 Reputation points
accepted 2023-09-29T09:45:04.19+00:00
Repetti Pierangelo 20 Reputation points
4 answers One of the answers was accepted by the question author.

Azure Management Group - Cannot add subscription if Owner via Security Group

I'm building an Azure Management Group structure where I'm having issues with the add subscription option to a sub-management group where the option is grayed out when Owner role is assigned via and AAD Security group. So in short, does Azure Management…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
694 questions
asked 2023-08-30T12:40:03.0966667+00:00
EPNAdam 35 Reputation points
accepted 2023-09-07T07:39:33.9533333+00:00
EPNAdam 35 Reputation points
4 answers One of the answers was accepted by the question author.

Azure RBAC and AKS not working as expected

Hello, I have create an AKS Cluster with AKS-managed Azure Active Directory and Role-based access control (RBAC) Enabled. If I try to connect with the Cluster by using one of the accounts which are included in the Admin Azure AD groups…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
694 questions
Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,917 questions
asked 2021-10-19T07:00:23.883+00:00
Mile Mitsev 21 Reputation points
answered 2021-10-22T12:41:31.113+00:00
Mile Mitsev 21 Reputation points
4 answers One of the answers was accepted by the question author.

Azure PIM for global reader role - No resources to discover

Hi everyone, I'm currently testing Azure PIM to delegate read permissions to our Azure tenant. I've assigned with PIM the "Global reader" role for a test account, which has validated the access. The scope defined is…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
694 questions
Microsoft Entra
asked 2021-08-18T15:08:00.467+00:00
Arnaud Rigole 131 Reputation points
accepted 2021-08-30T15:22:45.977+00:00
Arnaud Rigole 131 Reputation points
4 answers One of the answers was accepted by the question author.

Azure - Failed to delete public IP address The client 'XXX@XXXX.com' with object id XYZ does not have authorization to perform action 'Microsoft.Network/publicIPAddresses/delete' over scope 'XYZ'

User is global administrator. Cannot delete resources in the tenancy. Any idea why? Failed to delete public IP address 'XYZ'. Error: The client 'Tech.XYZ@Anonymous .com' with object id 'XYZ' does not have authorization to perform action…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
694 questions
Azure Stack Hub
Azure Stack Hub
An extension of Azure for running apps in an on-premises environment and delivering Azure services in a datacenter.
181 questions
asked 2020-06-09T17:59:58.413+00:00
Tech Support 96 Reputation points
answered 2020-06-09T18:54:21.817+00:00
Manu Philip 17,021 Reputation points MVP
3 answers One of the answers was accepted by the question author.

How to get assigned RBAC roles in a resource group which has only apps and managed identities as owners and administrators?

I want myself to have Managed Identity Contributor role in an azure resource, but I cant find the admin or owner. Only managed identities and apps are listed as owners and administrators. Whom to ask for role assignment?

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
694 questions
asked 2024-06-04T09:13:11.47+00:00
Aniruddha Acharya Kadlabalkoti 20 Reputation points Microsoft Employee
accepted 2024-06-11T08:07:07.8266667+00:00
Aniruddha Acharya Kadlabalkoti 20 Reputation points Microsoft Employee
3 answers One of the answers was accepted by the question author.

Azure Subscription showing Owner role identity not found.

Hello, I am facing a strange issue. When I am checking my Azure Subscription, Access control (IAM) - The owner role is showing - Identity not found, Unable to find identity. Here is the screenshot. Can you help? Thanks, Anuraj

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
694 questions
asked 2024-03-15T13:22:21.61+00:00
Anuraj 166 Reputation points MVP
commented 2024-03-28T08:08:47.8666667+00:00
Stanislav Zhelyazkov 21,681 Reputation points MVP
3 answers One of the answers was accepted by the question author.

How to grant end user Reader access to Entra Permission Management Portal

I want to test Entra Prmission Management. I enabled 30-days Free trial. As I am Global Admin, I can launch the portal and can see Discovery and Remediation. But I want to grant access to my team who can login to Entra Permission Management Portal and…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
694 questions
asked 2024-01-20T15:46:34.8+00:00
Neel Darji 86 Reputation points
commented 2024-01-29T19:47:39.3566667+00:00
Neel Darji 86 Reputation points
3 answers One of the answers was accepted by the question author.

From Azure AD Registered To Azure AD Joined

My organization has 500+ Azure AD registered devices(Remote Too). Now we want to mange these devices with Intune and want to convert these devices from Azure AD registered to Azure AD joined. What is the best way to do the same?

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
694 questions
asked 2021-06-16T05:23:57.377+00:00
SUNIL KUMAR 31 Reputation points
commented 2023-09-22T13:12:37.8533333+00:00
Ezequiel Negron 0 Reputation points
3 answers One of the answers was accepted by the question author.

RBAC - Which Role type would give admins to create email alias in "Microsoft 365" group?

Which Role type would give admins to create email alias in "Microsoft 365" group? I have tried exchange admin and group admin but still no luck for Microsoft 365 groups?

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
4,057 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
694 questions
Microsoft Exchange Online Management
Microsoft Exchange Online Management
Microsoft Exchange Online: A Microsoft email and calendaring hosted service.Management: The act or process of organizing, handling, directing or controlling something.
4,293 questions
asked 2023-08-02T13:59:20.5733333+00:00
Muhammad Rahman 20 Reputation points
accepted 2023-08-09T19:55:50.3866667+00:00
Muhammad Rahman 20 Reputation points
3 answers One of the answers was accepted by the question author.

Azure Subscription: The client 'live.com#' with object id '' does not have authorization to perform action

When I try to open my azure subscription I get the following Info: The client 'live.com#' with object id '' does not have authorization to perform action

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
694 questions
asked 2023-03-27T17:16:25.9166667+00:00
Isaac Wertheimer 20 Reputation points
accepted 2023-04-03T18:26:01.8433333+00:00
Isaac Wertheimer 20 Reputation points
3 answers One of the answers was accepted by the question author.

How to access virtual machines on my network

My place have added me to the work network on Azure however when i login it says i don't have a subscription, so i can't see any of the virtual machines or anything like that, all i can see is the Azure active directory and manage the users in there. I…

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
7,356 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
694 questions
asked 2023-02-28T16:17:08.93+00:00
Liam Rushmer 20 Reputation points
commented 2023-02-28T17:57:19.3066667+00:00
TP 80,981 Reputation points
3 answers One of the answers was accepted by the question author.

Azure VM & AAD of another tenancy

One of my C-Suite has asked/instructed for something to be done which I'm not sure is possible and I'm looking for some confirmation. VM-1 is in Tenancy Alpha, with AAD alpha.com C-Suite wants VM-1 to remain in Tenancy Alpha but be connected to…

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
7,356 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
694 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,034 questions
asked 2022-11-16T15:15:53.867+00:00
Rob Brown 26 Reputation points
commented 2023-02-28T14:24:37.5133333+00:00
Rob Brown 26 Reputation points
3 answers One of the answers was accepted by the question author.

Azure deny access role

Hi.. How i can prevent some user to access some resource in azure? Example i want to block some user from accessing cost management dashboard..

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
694 questions
asked 2023-01-19T06:15:26.39+00:00
Handian Sudianto 4,286 Reputation points
accepted 2023-01-31T01:54:48.2966667+00:00
Handian Sudianto 4,286 Reputation points
3 answers One of the answers was accepted by the question author.

Change Azure AD Role Settings using Powershell

Hi I have been asked by a client to change all the role settings for their PIM requirements. I have been looking at this for a while trying to figure out whether this can be updated in bulk using PowerShell but I have not found anything as yet. …

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
694 questions
Microsoft Entra
asked 2022-11-11T07:28:02.64+00:00
Dhillan Kalyan 56 Reputation points
answered 2022-11-17T07:33:16.693+00:00
Dhillan Kalyan 56 Reputation points
3 answers One of the answers was accepted by the question author.

Unable to assign group to configuration profile policy create in Microsoft Endpoint Manager

Hello, I can create Configuration profile but unable to include group of a test device group. I was able to include the group during the creation, but after review+save, the configuration profile was successfully created but after I check back in the…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
694 questions
Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,767 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,554 questions
asked 2022-10-25T09:29:59.433+00:00
Ainul Jasni 41 Reputation points
accepted 2022-11-07T03:41:48.97+00:00
Ainul Jasni 41 Reputation points
3 answers One of the answers was accepted by the question author.

If a user is granted reader role on subscription level, but I want to remove his readre role for a particular resource group under this subscription

if a user is granted owner role on subscription level, but I want to remove his owner role for a particular resource group under this subscription. I understand this can be achieved by deny assignment. Therefore wants to know how to create blueprint for…

Azure Blueprints
Azure Blueprints
An Azure service that provides templates for quick, repeatable creation of fully governed cloud subscriptions.
70 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
694 questions
asked 2022-05-25T09:05:16.68+00:00
Neha 101 Reputation points
answered 2022-08-08T17:15:11.32+00:00
Lucas Edson 21 Reputation points