Azure Global Reader no able to read Entra ID

Question

I just got the global reader role for the azure, but when i try to check the detailed configuration of the Entra ID, e.g. Activity logs, Users, using Azure portal, I am not able to do it, showing the message " Insufficient privileges to complete the operation. ", would anyone know how to solve, thank you!

Answer 1

Hi @Celine Yip

Thank you for posting this in Microsoft Q&A.I understand that you have facing an issue where you are unable to view the detailed information of the Entra ID, even though you have the global reader role for Azure.

We can check Activity logs in entra id with the help of global reader role, which allows us to check activity logs. I've tried using global reader to see the logs in my environment, and I'm seeing them successfully.

Please check below steps to fix this issue:

1.Could you please attempt to access the detailed information of the Entra ID using a different web browser?

2.Can you confirm whether you are currently using a member account or a guest account?

If you are using guest account, check below highlighted settings. When guest access is restricted, guests can view only their own user profile. Permission to view other users isn't allowed even if the guest is searching by User Principal Name or objectId.
For your reference: Restrict guest access permissions in Microsoft Entra ID

If you are using member account, please refer this post where similar issue has been discussed: https://learn.microsoft.com/en-us/answers/questions/1622528/403-error-when-opening-microsoft-entre-id-with-own

3.If your organization utilizes PIM, can you kindly verify whether you have acquired the eligible role or activated role?

It may be feasible for your organization to grant global reader role eligibility through PIM. In order to activate this role, you must ensure that the necessary steps have been completed.

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.