Cannot view virtual machine inventory

Question

We currently have a site to site vpn configured to connect to our azure environment directly from our corporate LAN via vCenter. When accessing the portal (portal.azure.com) from a computer that is connected to the corporate LAN we are unable to view the virtual machine inventory and other information within the azure portal. But when connecting to the portal from outside of our LAN the portal displays this information as expected. Does this have something to do with our site to site configuration or is there something else that may be the issue. Thank you in advance for any feedback.

I have attached a screenshot of the f12 output that displays the error. The listed domain is included within our access control rules for allowed destinations. The second attachment is the f12 output for when the connection is working as expected (Not connected to LAN).

2025-04-25_15-12-19.png

2025-04-25_15-16-47.png

Answer 1

Dear Stanley Shockley,

Thank you for posting your question on the Q&A portal and providing detailed information, including the error logs. Based on your description and the attached screenshots, the issue appears to be related to connectivity or permissions when accessing the Azure portal from your corporate LAN via the site-to-site VPN. The errors in your logs suggest potential network restrictions (e.g., timeouts, blocked domains) or missing permissions (e.g., the Microsoft.Network/publicIPAddresses/ddosProtectionStatus/action error).

Check Network Configuration: Ensure your site-to-site VPN allows traffic to Azure domains, including portal.azure.com and related CDN endpoints. The ERR_CONNECTION_TIMED_OUT errors indicate connectivity issues.

Azure IP Ranges and Service Tags

Verify Permissions: The error about ddosProtectionStatus suggests a role assignment issue. Confirm your account has the required permissions (e.g., Reader or Contributor role on the VM resources).

Azure RBAC Documentation

Browser/Portal Issues: Clear your browser cache or try accessing the portal in an incognito window. The 404 errors for blade definitions may indicate a caching problem.

Troubleshoot Azure Portal Issues

For further troubleshooting, you can also review:

Azure Virtual Machines Documentation

Azure VPN Gateway Troubleshooting

Hope that would help, and let me know if you need additional clarification.

Best regards,

Alex
P.S. If my answer help to you, please Accept my answer
PPS That is my Answer and not a Comment

Answer 2

Hello @Stanley Shockley,To be able to view virtual machines, you would need one of these below RBAC roles, From Azure portal, go to Virtual machine, and select the. In the Virtual machine page, under Overview, select > Access Control (IAM).

In the Virtual machine | Access Control (IAM) page, select Add and then select Add role assignment.

Virtual Machine Administrator Login	View Virtual Machines in the portal and login as administrator	1c0163c0-47e6-4577-8991-ea5c82e286e4
Virtual Machine Administrator Login	View Virtual Machines in the portal and login as administrator	1c0163c0-47e6-4577-8991-ea5c82e286e4
Virtual Machine Administrator Login	View Virtual Machines in the portal and login as administrator	1c0163c0-47e6-4577-8991-ea5c82e286e4
Virtual Machine Contributor	Create and manage virtual machines, manage disks, install and run software, reset password of the root user of the virtual machine using VM extensions, and manage local user accounts using VM extensions. This role does not grant you management access to the virtual network or storage account the virtual machines are connected to. This role does not allow you to assign roles in Azure RBAC.	9980e02c-c2be-4d73-94e8-173b1dc7cf3c
Virtual Machine Data Access Administrator (preview)	Manage access to Virtual Machines by adding or removing role assignments for the Virtual Machine Administrator Login and Virtual Machine User Login roles. Includes an ABAC condition to constrain role assignments.	66f75aeb-eabe-4b70-9f1e-c350c4c9ad04
Virtual Machine Local User Login	View Virtual Machines in the portal and login as a local user configured on the arc server	602da2ba-a5c2-41da-b01d-5360126ab525
Virtual Machine User Login	View Virtual Machines in the portal and login as a regular user.	fb879df8-f326-4884-b1cf-06f3ad86be52

If you have any further queries, do let us know.