When trying to update my app, I get "not authorized to update apps using consumer identity"

Question

When trying to update my app, I get "not authorized to update apps using consumer identity"

Fabian Jäger 0

When I try to update my app in "App registrations" within Azure, I get the following error message:

"Failed to update Mailbutler application. Error detail: Client 18ed3507-a475-4ccb-b669-d66bc9f2a36e is not authorized to update apps using consumer identity [2Y8T+2peoxpRlzJm/7cnUp]"

What needs to be done to resolve this? I was definitely able to edit the app in the past!

Harshitha Eligeti 4,055 Reputation points Microsoft External Staff Moderator

2025-04-30T14:05:20.63+00:00

Hello @Fabian Jäger
I understand that you're encountering the error message: "Not authorized to update apps using consumer identity" when attempting to update your app under App registrations in Azure. This typically indicates that the application lacks the required permissions or roles to perform the update.

Please ensure the that the application has the appropriate permissions assigned in the Azure portal. Your account holds the necessary admin role in Entra ID to make changes to the app. Make sure you are signed in with the account that was used to create the app registrations.

Could you please provide a screenshot of the error for further troubleshooting?
For additional Information Refer this link: https://learn.microsoft.com/en-us/entra/identity-platform/howto-update-permissions?pivots=portal

Do Let us know if you have any Queries. We are happy to assist further.
Harshitha Eligeti 4,055 Reputation points Microsoft External Staff Moderator

2025-05-02T09:59:36.8233333+00:00

Hello @Fabian Jäger
Following up to see if the suggestion was helpful. And, if you have any further query do let us know.
Fabian Jäger 0 Reputation points

2025-05-02T17:57:55.4633333+00:00

@Harshitha Eligeti Thanks for getting back to me!

It seems my user account is somehow not having the required permission to edit the registered app. The app was created by the active user's personal account and was editable in the past.

The user account is a personal Microsoft account and the App registration is under this personal account (see screenshot).
Harshitha Eligeti 4,055 Reputation points Microsoft External Staff Moderator

2025-05-05T20:06:12.5933333+00:00

Hello @Fabian Jäger
I understand that the application was created using a personal Microsoft account. To edit or configure the registered application, you must have either the Owner role on the application or be assigned the Application Administrator role.
Do Let us know if you have any Queries. We are happy to assist further.
Fabian Jäger 0 Reputation points

2025-05-06T07:38:23.0633333+00:00

@Harshitha Eligeti Isn't role assignment a concept of a directory within Azure? The personal account's application does not belong to any directory, as far as I understand the structure.

Furthermore, there is something weird about my Azure portal user account. As you can see in the screenshot, I am logged in with xxxxx (my personal account). In the directory's user management, I only see a single user with the principal name xxxxx but it seems that this is somehow the same account, but even though the account's roles are "Global Administrator" and "Application Administrator", I am not allowed to edit the personal account's registered application.

How would I assign the "Owner" of the registered application? As you can see in the other screenshot, there is no way to assign an owner!
Christian Kündig 0 Reputation points

2025-05-06T09:06:36.26+00:00
I have the same error with the same app setup. "This app does not belong to any directory, so owners can’t be added to it." when looking at Owners and the following error when saving changes for the app. I have set up and changed this app before with the same user account, so this is a more recent issue.

Failed to update XXXXX application. Error detail: Client 18ed3507-a475-4ccb-b669-d66bc9f2a36e is not authorized to update apps using consumer identity [+y3EdL9Zofzm540q4hrB3q]
Dev Tilda 0 Reputation points

2025-05-06T17:05:10.6+00:00

Hello! We have the same issue. Can't make any changes to the app. And file uploads get 401 Unauthenticated message.
Harshitha Eligeti 4,055 Reputation points Microsoft External Staff Moderator

2025-05-06T21:13:10.1933333+00:00

Hello @Fabian Jäger
It seems that you are encountering an authorization issue when trying to update your application registered under a personal Microsoft account. Since the application was created using a personal account, it does not belong to any directory, which can lead to complications with role assignments.
As you are logged in with your personal account and you cannot see the option to assign an owner, it is due to the limitations of managing applications created under personal Microsoft accounts. In this case, you need to consider creating a new application under a work or school account that allows for proper role management and permissions.
Do Let us know if you have any Queries. We are happy to assist further.
Fabian Jäger 0 Reputation points

2025-05-07T07:00:43.2266667+00:00

@Harshitha Eligeti Thanks for repeating what I already mentioned before.

What's very confusing to me now is that you are suggesting to abandon the existing application, which thousands of users already use in our product, because there is this permissions issue on Microsoft's side!?

To my perspective this is a bug in Azure/Entra/AD, which was recently introduced. As the info banner in one of my earlier screenshots states, it should still be possible to manage applications, which are registered outside of any directory.

Dev Tilda 0

Any updates on the issue? Any action in the interface causes error:

{
  "sessionId": "f221d68eb577490a967fd2e415a0ac86",
  "errors": [
    {
      "errorMessage": "interaction_required: AADSTS16000: User account &#39;{EUII Hidden}&#39; from identity provider &#39;live.com&#39; does not exist in tenant &#39;Microsoft Services&#39; and cannot access the application &#39;74658136-14ec-4630-ad9b-26e160ff0fc6&#39;(ADIbizaUX) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: 94958df0-ec83-45ad-ba86-90b6e51c6600 Correlation ID: 4d4b9d52-ada0-44ea-80af-bb7bcc8d01b5 Timestamp: 2025-05-12 18:22:25Z",
      "clientId": "74658136-14ec-4630-ad9b-26e160ff0fc6",
      "scopes": [
        "a57aca87-cbc0-4f3c-8b9e-dc095fdc8978/.default"
      ]
    }
  ]
}

We don't have another account. How to fix the issue?

chibis 0 Reputation points

2025-05-14T06:46:51.7366667+00:00

I am having the same issue. Cannot add/delete secretes and manage App permissions. I am the only user on the account and have Global Administrator role and also added Application Developer and Application Administrator role

Your answer

Harshitha Eligeti 4,055 Reputation points Microsoft External Staff Moderator

2025-04-30T14:05:20.63+00:00

Hello @Fabian Jäger
I understand that you're encountering the error message: "Not authorized to update apps using consumer identity" when attempting to update your app under App registrations in Azure. This typically indicates that the application lacks the required permissions or roles to perform the update.

Please ensure the that the application has the appropriate permissions assigned in the Azure portal. Your account holds the necessary admin role in Entra ID to make changes to the app. Make sure you are signed in with the account that was used to create the app registrations.

Could you please provide a screenshot of the error for further troubleshooting?
For additional Information Refer this link: https://learn.microsoft.com/en-us/entra/identity-platform/howto-update-permissions?pivots=portal

Do Let us know if you have any Queries. We are happy to assist further.
Harshitha Eligeti 4,055 Reputation points Microsoft External Staff Moderator

2025-05-02T09:59:36.8233333+00:00

Hello @Fabian Jäger
Following up to see if the suggestion was helpful. And, if you have any further query do let us know.
Fabian Jäger 0 Reputation points

2025-05-02T17:57:55.4633333+00:00

@Harshitha Eligeti Thanks for getting back to me!

It seems my user account is somehow not having the required permission to edit the registered app. The app was created by the active user's personal account and was editable in the past.

The user account is a personal Microsoft account and the App registration is under this personal account (see screenshot).
Harshitha Eligeti 4,055 Reputation points Microsoft External Staff Moderator

2025-05-05T20:06:12.5933333+00:00

Hello @Fabian Jäger
I understand that the application was created using a personal Microsoft account. To edit or configure the registered application, you must have either the Owner role on the application or be assigned the Application Administrator role.
Do Let us know if you have any Queries. We are happy to assist further.
Fabian Jäger 0 Reputation points

2025-05-06T07:38:23.0633333+00:00

@Harshitha Eligeti Isn't role assignment a concept of a directory within Azure? The personal account's application does not belong to any directory, as far as I understand the structure.

Furthermore, there is something weird about my Azure portal user account. As you can see in the screenshot, I am logged in with xxxxx (my personal account). In the directory's user management, I only see a single user with the principal name xxxxx but it seems that this is somehow the same account, but even though the account's roles are "Global Administrator" and "Application Administrator", I am not allowed to edit the personal account's registered application.

How would I assign the "Owner" of the registered application? As you can see in the other screenshot, there is no way to assign an owner!
Christian Kündig 0 Reputation points

2025-05-06T09:06:36.26+00:00

I have the same error with the same app setup. "This app does not belong to any directory, so owners can’t be added to it." when looking at Owners and the following error when saving changes for the app. I have set up and changed this app before with the same user account, so this is a more recent issue.

Failed to update XXXXX application. Error detail: Client 18ed3507-a475-4ccb-b669-d66bc9f2a36e is not authorized to update apps using consumer identity [+y3EdL9Zofzm540q4hrB3q]
Dev Tilda 0 Reputation points

2025-05-06T17:05:10.6+00:00

Hello! We have the same issue. Can't make any changes to the app. And file uploads get 401 Unauthenticated message.
Harshitha Eligeti 4,055 Reputation points Microsoft External Staff Moderator

2025-05-06T21:13:10.1933333+00:00

Hello @Fabian Jäger
It seems that you are encountering an authorization issue when trying to update your application registered under a personal Microsoft account. Since the application was created using a personal account, it does not belong to any directory, which can lead to complications with role assignments.
As you are logged in with your personal account and you cannot see the option to assign an owner, it is due to the limitations of managing applications created under personal Microsoft accounts. In this case, you need to consider creating a new application under a work or school account that allows for proper role management and permissions.
Do Let us know if you have any Queries. We are happy to assist further.
Fabian Jäger 0 Reputation points

2025-05-07T07:00:43.2266667+00:00

@Harshitha Eligeti Thanks for repeating what I already mentioned before.

What's very confusing to me now is that you are suggesting to abandon the existing application, which thousands of users already use in our product, because there is this permissions issue on Microsoft's side!?

To my perspective this is a bug in Azure/Entra/AD, which was recently introduced. As the info banner in one of my earlier screenshots states, it should still be possible to manage applications, which are registered outside of any directory.
Dev Tilda 0 Reputation points

2025-05-12T18:26:23.78+00:00

Any updates on the issue? Any action in the interface causes error:

{ "sessionId": "f221d68eb577490a967fd2e415a0ac86", "errors": [ { "errorMessage": "interaction_required: AADSTS16000: User account '{EUII Hidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application '74658136-14ec-4630-ad9b-26e160ff0fc6'(ADIbizaUX) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: 94958df0-ec83-45ad-ba86-90b6e51c6600 Correlation ID: 4d4b9d52-ada0-44ea-80af-bb7bcc8d01b5 Timestamp: 2025-05-12 18:22:25Z", "clientId": "74658136-14ec-4630-ad9b-26e160ff0fc6", "scopes": [ "a57aca87-cbc0-4f3c-8b9e-dc095fdc8978/.default" ] } ] } We don't have another account. How to fix the issue?
chibis 0 Reputation points

2025-05-14T06:46:51.7366667+00:00

I am having the same issue. Cannot add/delete secretes and manage App permissions. I am the only user on the account and have Global Administrator role and also added Application Developer and Application Administrator role

Share via

When trying to update my app, I get "not authorized to update apps using consumer identity"

Your answer