Unable to access Microsoft Entra ID

Question

Hi,

I am using Azure's Pay As You Go Subscription.
When I am trying to access Microsoft Entra Service getting attached error. I have attached my user below permissions under 'Subscription-->IAM-->Add roles'

1. Owner
2. [Role Based Access Control Administrator](https://portal.azure.com/#"Role Based Access Control Administrator")
3. [User Access Administrator](https://portal.azure.com/#"User Access Administrator")

Any quick help would help to get started asap pls.

Answer 1

Hi @Tarique Salat

I understand you are trying to access the Microsoft Entra service, but you are encountering a 403 error code. This error means you don't have permissions to access the Microsoft Entra admin center.

Based on the screenshot you shared; I confirmed that your global administrator has restricted access to the Microsoft Entra admin center.

You have RBAC roles, such as Owner, Role-Based Access Control Administrator, and User Administrator roles on the subscription, but to access Microsoft Entra service, you need Microsoft Entra roles due to the administrator blocking access.

I believe you accessed this page by searching for "user settings" in Azure, not from the Microsoft Entra ID Portal. Since you don't have access to Entra, all the settings are greyed out for you.

To resolve this issue, there are two possible methods:

1.Reach out to your global administrator and ask them to assign a role to you. This will grant you access to the Microsoft Entra admin center, even if the restriction is set to "Yes." As long as you have any role or custom role assigned, you will not be restricted from accessing the portal.

2.The global administrator can disable the restriction by selecting "No." This will allow non-admin users to access the Microsoft Entra admin center without any issues.

For your reference: Microsoft Entra Users Default Permissions

Hope this helps. Do let us know if you any further queries.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Answer 2

hello @Tarique Salat

Can you try to login in to your tenant using the Global Admin credentials,

Enabling the below option, will restrict the normal users from accessing the Entra ID.