Cannot save changes on Entra despite being Global Administrator

Question

Cannot save changes on Entra despite being Global Administrator

Matt Temp 0

I'm trying to delete my microsoft account, and need to delete my organization tenancy first (though I wasn't aware I had one).

In Entra, when trying to delete the tenancy I'm told I have to set "Access management for Azure resources" to yes beforehand. When I try and do this in Identity-->Overview-->Properties, when I slide the relevant toggle to yes, the save button remains disabled (only the discard button becomes active).

Despite being the only user and a Global Administrator, it seems I do not have permissions to modify my organization properties (I cannot change the technical or privacy contact emails either, the save button remains disabled).

What can I do?

Matt

James Hamil 18,951 Reputation points Microsoft Employee

2023-11-29T23:42:03.73+00:00

Hi @Matt Temp , can you please send me an email at "azcommunity@microsoft.com" with subject "ATTN: James Hamil" and your subscription ID? I can open a free support ticket for you.

Best,

James

James Hamil 18,951 Reputation points Microsoft Employee

2023-11-29T23:42:03.73+00:00

Hi @Matt Temp , can you please send me an email at "azcommunity@microsoft.com" with subject "ATTN: James Hamil" and your subscription ID? I can open a free support ticket for you.

Best,

James

Answer 1

Carlos Solís Salazar 14,866

If you're unable to save changes in Microsoft Entra, particularly regarding the "Access management for Azure resources" setting or other organizational properties, despite being a Global Administrator, there could be several factors at play. Here are some steps to troubleshoot and potentially resolve the issue:

1. Check for Conditional Access Policies

Conditional Access Policies in Azure AD might restrict changes to certain settings. Ensure that no policy is inadvertently preventing you from making changes.

2. Browser Issues

Sometimes, browser-related issues can cause problems with saving settings in Azure portals.
- Clear Cache/Cookies: Try clearing your browser's cache and cookies.
- Use a Different Browser: Attempt to make the changes using a different web browser.
- Incognito Mode: Try using an incognito or private browsing window.

3. Check for Directory Roles

Being a Global Administrator should typically grant full permissions, but verify that there are no conflicting roles or restrictions placed on your account.
Check in the Azure AD roles and administrators section to confirm your exact permissions.

4. Review Tenant Status

Ensure that your tenant is in good standing (e.g., no billing issues or service suspensions) as this might affect your ability to make changes.

5. Check for Service Health Issues

Occasionally, service health issues in Azure AD can temporarily prevent changes. Check Azure Service Health for any ongoing issues.

6. Use PowerShell or Azure CLI

As an alternative, try using PowerShell or Azure CLI to make the necessary changes. Sometimes, the Azure portal might have UI glitches that these tools can bypass.
Be cautious with PowerShell or CLI, especially if you're not familiar with these tools, as they are powerful and can significantly alter your tenant configuration.

7. Contact Microsoft Support

If none of the above steps work, it might be a more complex issue with your tenant or account. In such cases, reaching out to Microsoft Support is advisable. They can provide more detailed guidance and look into backend issues that might be causing this problem.

8. Documentation

Check the Microsoft Entra documentation for any specific guidelines regarding tenant management.

Conclusion

The inability to save changes could be due to a range of issues from browser glitches to specific tenant configurations. Methodically going through these troubleshooting steps should help identify the problem. If the issue persists, Microsoft Support will be your best resource.

Accept the answer if the information helped you. This will help us and others in the community as well.

Matt Temp 0 Reputation points

2023-11-17T18:39:48.85+00:00
Thanks for your reply. None of it has got me closer to resolving this unfortunately.

There are no conditional access policies

Same issues on Edge and Firefox, private and normal

Only role is Global Administrator

Tenancy in good standing (no issues, has always only been free outlook usage?)

There do not appear to be any Azure health issues of relevance

I'd need complete steps for the required powershell commands, I'm not familiar with how to do the equivalent via command line

I can only open a support request regarding "billing" or "subscription management", not technical. I don't think I'm allowed any technical support?

I've already consulted the documentation in I think the required areas, and it asks me to set "Access management for Azure resources". It does not mention the save button being disabled, only "press save".
Carlos Solís Salazar 14,866 Reputation points

2023-11-17T18:54:04.1166667+00:00
Given the difficulties you're facing in saving changes on Microsoft Entra as a Global Administrator, using PowerShell or Azure CLI can be an effective alternative. This approach allows for more direct and scriptable interactions with Azure services.

Using Azure PowerShell

Install Azure PowerShell Module: If not already installed, you can install the Azure PowerShell module. Follow the instructions in the Azure PowerShell installation guide.

Connect to Azure: Use the Connect-AzAccount cmdlet to sign in to Azure.
Connect-AzAccount

Make Necessary Changes: Depending on the specific changes you need to make in Entra, you'll use different cmdlets. For instance, if you're managing user roles or permissions, you might use cmdlets like Get-AzRoleAssignment, New-AzRoleAssignment, or Remove-AzRoleAssignment. Here's an example of assigning a role to a user:
New-AzRoleAssignment -ObjectId <UserObjectID> -RoleDefinitionName <RoleName> -Scope <Scope>
Replace <UserObjectID>, <RoleName>, and <Scope> with the appropriate values for your situation.

Using Azure CLI

Install Azure CLI: If Azure CLI is not installed on your system, follow the installation guide.

Login to Azure: Use the az login command to log in to your Azure account.
az login

Execute Commands: Similar to PowerShell, you'll use Azure CLI commands based on what you need to accomplish. For example, to manage role assignments, you can use az role assignment. Here's an example of listing role assignments:
az role assignment list --assignee <UserEmailAddress>
Replace <UserEmailAddress> with the user's email address.

Both PowerShell and Azure CLI provide extensive capabilities for managing Azure resources, including Microsoft Entra. Be sure to check the specific documentation for the cmdlets or commands relevant to your task.

Note: Always ensure you have the necessary permissions and understand the implications of the changes you're making.

I hope this approach resolves the issues you're facing. Please feel free to reach out if you have further questions or need additional assistance!

PS: in response to your comment: "I can only open a support request regarding "billing" or "subscription management", not technical. I don't think I'm allowed any technical support?" Yes, as a Global Administrator, you can create a technical ticket.

Accept the answer if the information helped you. This will help us and others in the community as well.
Matt Temp 0 Reputation points

2023-11-18T17:34:18.1133333+00:00

Thanks. Though you've said how to install azure powershell/cli I don't know what commands I'd need to use to fix this problem. Your examples of role assignment aren't specific enough I'm afraid.

I am a Global Administrator, but really can't create a technical ticket.

This is literally just a free outlook.com account. For some reason when I try and delete it it pushes me into a world of Entra, Azure and trying to delete tenants etc.

Since this account was originally free, I do not have the support level required to ask any technical questions.

However, I also absoloutely cannot delete my tenancy and therefore my microsoft account.

At the very least, as I'm in the UK do I not have the right to have my data removed from your system?

Cannot save changes on Entra despite being Global Administrator

1 answer

1. Check for Conditional Access Policies

2. Browser Issues

3. Check for Directory Roles

4. Review Tenant Status

5. Check for Service Health Issues

6. Use PowerShell or Azure CLI

7. Contact Microsoft Support

8. Documentation

Conclusion

Using Azure PowerShell

Using Azure CLI

Activity