Azure Virtual Machine Role assignment

Question

We have a new Azure VM deployed, it's using Windows multi-session + Microsoft 365 Apps Image, we also have AADLoginForWindows extension installed.

I assigned a user to Virtual Machine User Login Role, but he can't login. He is getting "The requested session access is denied."

If I assign him to Virtual Machine Administrator Login Role, then he login fine. However, I am fine logging in for both Virtual Machine Administrator Login or Virtual Machine User Login role, also same setting is working fine for other virtual machines, so I am not sure why.

Answer 1

Hi @Mayank Sing,

Thanks for contacting Microsoft Q&A platform.

To allow a user to log in to the VM over RDP, you must assign the Virtual Machine Administrator Login or Virtual Machine User Login role to the resource group that contains the VM and its associated virtual network, network interface, public IP address, or load balancer resources. Can you try this adding the user to the resoure group and other associated dependencies.

Hope this helps you.