Permission error in conditional access insights and reporting

Christine Stack Admin 10 Reputation points
2025-05-13T17:40:11.7133333+00:00

I used to be able to see insights and reporting in conditional access and now I cannot. I have all the correct RBAC roles.
This is the error all IT staff are getting:User's image

{"sessionId":"8672169a0b6e48ccae1232b433c31fe3","subscriptionId":"","resourceGroup":"","errorCode":"401","resourceName":"","details":"Error loading your content"}

You don't have access

Microsoft Security Microsoft Entra Microsoft Entra ID
{count} vote

2 answers

Sort by: Most helpful
  1. Raja Pothuraju 23,465 Reputation points Microsoft External Staff Moderator
    2025-05-13T18:27:05.55+00:00

    Hello @Christine Stack Admin,

    This error typically occurs when the user account does not have the required role assignments.

    According to the documentation below, anyone accessing the "Insights and Reporting" section under Conditional Access must have at least the Security Reader role (Entra ID role) and the Log Analytics Contributor role (assigned at the subscription level via IAM):

    https://learn.microsoft.com/en-us/entra/identity/conditional-access/howto-conditional-access-insights-reporting#prerequisites

    To verify if there's an outage, I conducted a quick test by creating a new user with only the Global Administrator role (no subscription-level roles). As expected, accessing the Conditional Access Insights and Reporting page resulted in the same error.

    However, once I assigned the Log Analytics Contributor role to this user at the subscription level (IAM), the user was able to access the Insights and Reporting page without any issues. This confirms there is no ongoing platform issue.

    To investigate why all your IT staff are experiencing this error, could you please confirm whether they have the necessary roles assigned both in Entra ID (RBAC) and Subscription IAM Access Control?

    If they do, and the issue still persists, I’d like to connect with you offline to collect logs and better understand the behavior. Please share your email address and available time via private message.

    1 person found this answer helpful.
    0 comments No comments

  2. Aditya Kumar Singh 0 Reputation points
    2025-05-19T21:15:53.7333333+00:00

    Hello @Raja Pothuraju ,

    I too have similar issue but my concern is that we have more than 50 subscriptions, so how we can determine to provide Log Analytics Contributor role to which subscription.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.