This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 28.999999999999996%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EK%3C/text%3E%3C/svg%3E)
Hello all, my primary Azure user somehow became an internal user and lost access to do just about anything.
All I want to do is upgrade my account to pay-as-you-go and start using the services, but it gives me this error and then cannot log me back in when prompted.
I have tried creating another account, but the same thing is happening. Please help asap.
{
"sessionId": "b23dfed15638447599cf6c4513d17801",
"errors": [
{
"errorMessage": "interaction_required: AADSTS160021: Application requested a user session which does not exist. Trace ID: e879f713-a322-47dc-ba36-331bd65d6000 Correlation ID: f782a483-d06e-4711-b5ac-b232da96aae1 Timestamp: 2024-06-09 16:56:22Z",
"clientId": "631d36ba-ddbd-4e88-807a-b8cd54f9b390",
"scopes": [
"https://signup.azure.com//.default"
]
}
]
}
this is the error I get when I try to sign in again via the prompt: Selected user account does not exist in tenant 'Microsoft Services' and cannot access the application 'f9885e6e-6f74-46b3-b595-350157a27541' in that tenant. The account needs to be added as an external user in the tenant first. Please use a different account.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(272, 27%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVV%3C/text%3E%3C/svg%3E)
Hi @Knell,
Thanks for contacting Microsoft Q&A platform.
If you are using non-Microsoft account for login. That is expected, the idea behind allowing the guest account is for collaboration on files and resources under portal.azure.com, portal.office.com for any other admin security related stuff you need to be either the user in the directory or a user from another directory (External user) A guest user with Microsoft account will not have these access.
Here is how the Guest account looks when they are from other tenant (External) or Outside (Gmail, live, hotmail) (Microsoft account)
If you have any admin role with that account, create a new user and keep the UPN to a tenants default. Then assign it a Global Admin role or security admin role, Assign necessary licenses. Use that newly created account to access this stuff.
Hope this helps you.
Hi @Knell,
Just checking in to see if the below answer helped. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
hey @v-vvellanki-MSFT , no, the answer is not sufficient at all, and I am amazed that Azure has a way to brick entire accounts with a single click.
The client assigned their primary admin account as "internal" via Intune, which removed access to all functions, including creating support tickets. An absolute Achilles' heel. Currently migrating their backup to AWS.
hello v-vvellanki-MSFT, no, the answer did not help at all.
I am amazed that Azure has a method to brick an account with a single click, the client assigned their primary account as "internal", which removed all functionality including creating support tickets
Currently migrating them to another cloud service via a backup.
This is the error I received when I try to sign in again via the prompt:
Selected user account does not exist in tenant 'Microsoft Services' and cannot access the application 'f9885e6e-6f74-46b3-b595-350157a27541' in that tenant. The account needs to be added as an external user in the tenant first. Please use a different account.