By mistake I changed my user as internal for an existing subscription and I am unable to sign in to view the resources

Question

By mistake I changed my user as internal from external and unable to login now. I get below error when I try to perform any action. I would appreciate your help in resolving the issue in order to login back to existing subscription that i had

Additional information from the call to get a token:

Extension: Microsoft_Azure_Support

Resource: self

Details: The logged in user is not authorized to fetch tokens for extension 'Microsoft_Azure_Support' because the user account is not a member of tenant 'f8cdef31-a31e-4b4a-93e4-5f571e91255a'. Error details: invalid_grant: 50020 - [2024-11-10 05:24:01Z]: AADSTS50020: User account '{EUII Hidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application 'c44b4083-3bb0-49c1-b47d-974e53cbdf3c'(Azure Portal) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: f23a06bf-1c0c-4b55-9a76-6a6242524400 Correlation ID: 5126b9d9-971e-44a0-b340-a98328672730 Timestamp: 2024-11-10 05:24:01Z - Correlation ID: 5126b9d9-971e-44a0-b340-a98328672730 - Trace ID: f23a06bf-1c0c-4b55-9a76-6a6242524400

Answer 1

Hi @Rajesh Mandava

Here are a few steps to help resolve this issue:

1. Sign Out and Sign Back In with a Different Account

• Since you’re getting an “invalid_grant” error, the easiest first step is to sign out of your current session and then sign back in. Use an alternative Azure AD account if available, ideally with admin privileges, to access the subscription and change your account back to an external user.

2. Use an Admin Account to Restore External Status

• If you have access to an admin account in the tenant, use it to:
  • Go to the Azure Active Directory portal.
  • Navigate to Users and search for your account.
  • Update your user type from Member (internal) back to Guest (external).
  • Save the changes and try logging back in with your original account.

3. Request Assistance from Global Administrator

• If neither of the above options works, you may need help from someone with Global Administrator privileges in your organization. This person can reset your user type back to Guest.

Answer 2

Hi @Rajesh Mandava

Here are a few steps to help resolve this issue:

1. Sign Out and Sign Back In with a Different Account

• Since you are getting an “invalid_grant” error, the easiest first step is to sign out of your current session and then sign back in. Use an alternative Azure AD account if available, ideally with admin privileges, to access the subscription and change your account back to an external user.

2. Use an Admin Account to Restore External Status

• If you have access to an admin account in the tenant, use it to:
  • Go to the Azure Active Directory portal.
  • Navigate to Users and search for your account.
  • Update your user type from Member (internal) back to Guest (external).
  • Save the changes and try logging back in with your original account.

3. Request Assistance from Global Administrator

• If neither of the above options works, you may need help from someone with Global Administrator privileges in your organization. This person can reset your user type back to Guest.