Azure Guest User Can't See App

Question

Azure Guest User Can't See App

Staton, Kevin 1

We have created a Linux app service in our Azure account. We invited a guest user (development partner) to our organization and set their role for the app service to "owner". The guest user can login but does not see any apps listed. I'm sure this is a dumb question but we currently do not have a sysadmin on staff so I'm trying to fill in. Is giving the owner role sufficient to allow the guest user to see, manage, and connect to the server? Is there another method the guest should be using to connect? (SSH, FTP for example)

SnehaAgrawal-MSFT 22,706 Reputation points Moderator

2021-04-26T13:46:22.17+00:00

Just checking in to see if the below answers helped. If this answers your query, do click “Accept Answer” and Up-Vote for the same. And, if you have any further query do let us know.

4 answers

Your answer

SnehaAgrawal-MSFT 22,706 Reputation points Moderator

2021-04-26T13:46:22.17+00:00

Just checking in to see if the below answers helped. If this answers your query, do click “Accept Answer” and Up-Vote for the same. And, if you have any further query do let us know.

Answer 1

SnehaAgrawal-MSFT 22,706 Moderator

Thanks for asking question! If for guest users access panel stays empty and says "No apps found" then you need to enable user assignment for the app and ensure that users have access to the apps.

You may refer to document link Manage user assignment for an app in Azure Active Directory

Let us know if further query on this or issue remains.

Staton, Kevin 1 Reputation point

2021-04-28T02:22:27.387+00:00

Thanks for that response. I'm not sure I understand. This is a guest user so would the authentication methods in that article still apply? Is the guest account considered an SSO login?

Assuming it's SSO, I tried to follow the document you linked to. Under the section "require user assignment for an application", what application am I setting to "user assignment required? Yes". This is a azure app service (P1v2) running linux OS and I didn't see anything relevant in the list of Enterprise Applications.

Answer 2

sadomovalex 3,636

how exactly you have granted access? Good practice is not to add guest user permissions on organization level. Instead add permission only in those resource group where your app service is located. You can do that in Resource group > Access control tab:

Staton, Kevin 1 Reputation point

2021-04-28T02:11:26.013+00:00

Thanks sadomovalex. What you're showing in your screenshot is exactly how I've added access. I go into Access Control (IAM) and select "grant access to this resource". When I select "view access to this resource" I see the guest account has the "Owner" role to "This resource".

Answer 3

John Guilbert 101

Any solution to this. I add guest user to application and he doesn't see Application in https://myapps.microsoft.com

Luan Au 1 Reputation point

2022-08-24T12:04:06.17+00:00

In App Service Edit authentication settings, choose "HTTP 302 Found redirect: recommended for websites" for unauthenticated requests.

Answer 4

I'm not sure if you ever got your answer but here is some more info that could be helpful.

Once your Guest has accepted your invite (through Azure AD Users), and once you granted access to this Guest to your desired application, he will receive an email with a link in it that will bring the user to myapps.microsoft.com once he accepts the terms. If he looks at the top right corner of the screen, he will see a button that looks like this:

If the Guest clicks on the organization that "he also belongs to", he will switch to a view with the apps shared from this organization. If he wants to access his own organization applications he needs to toggle back using the same button but this time click on his own organization.

Also once you grant access to an application, it can take some time to show for your users. It is not instantaneous.

Hope this can help someone.

Share via

Azure Guest User Can't See App

4 answers

Your answer