Lost ownership of my Azure Portal

Question

Hello,

I have my Azure account that I created to my personal project. When I was trying to access the SQL Server using MSSQL I could not sign in using my regular account that I used to create the account on Azure (never happened before), it was saying that it was a personal account. Now, trying to solve this unexpected issue that I have never faced before, I lost my ownership of my Azure Portal, I can log in but I can not do anything else, not even create a ticket for support.

Everytime I log in to the Azure Portal I get this notification. If I try to sign in again it fails saying that my tenant has no permission and I dont have enough permission to add or modify any Users in my Microsoft Entra ID.

Please, I need your help to get access to my Azure Portal and do my work ASAP, my work day is almost lost because of that.

Thank you in advanced.

Best regards,
Marcos Almeida

Answer 1

Hello @reverlog Company

Thanks for contacting MS Q&A. I will be able to help you with resolving your issues.

You can try using the below URL to access your tenant.

Portal.azure.com/<tenantID >

If you are having any errors, please feel free to leave a comment.

If this answers your query, do click Accept Answer and Yes if this was answer helpful. And, if you have any further query do let us know.

Siri

Answer 2

Hello @ReverLog Company ,

I hope the suggestion provided by Akpesiri Ogbebor is helpful.

If you are facing the same error please provide me the tenantID and Global admin UPN via private message.

Additionally, to elaborate the issue When Users are trying to login to Azure portal using their personal Microsoft Account (Outlook, Hotmail..) they are getting AADSTS160021 or AADSTS16000 or AADSTS50020 errors.

Reason: Whenever you sign in Azure portal using Microsoft Personal Account you by default get connected to the Microsoft Services tenant. You can also confirm this by navigating to Azure Active Directory > Overview blade and you can see the Tenant ID.

In this default tenant, you do not have any directory associated with it which you can confirm by navigating to settings.
As this is a standard tenant without any directory associated, you cannot perform actions such as creating new users, groups, enterprise applications, and so on. To perform administrative actions, you must have administrative access to the tenant.

Fix: For this purpose, you need to create your own tenant rather than using the Microsoft Services tenant.

To create a new tenant, open in-private/incognito browser window (just to avoid SSO), access https://azure.microsoft.com/en-us/free/ to create a free Azure account.

When you create a new tenant, you by default become the Global Administrator of the new tenant and have full access to all the options in that tenant.

If you still want to access Entra portal using your personal Microsoft account only, you can invite that user as a guest user as mentioned here : https://learn.microsoft.com/en-us/azure/active-directory/external-identities/add-users-administrator#add-guest-users-to-the-directory and assign the Global Administrator role.

Once you are added to an azure tenant and you accept the invite sent to you via email, you can use https://portal.azure.com/#create/Microsoft.AzureActiveDirectory URL to create your own tenant as well.

Hope this information Helps. Let us know if you have any additional queries. Happy to assist you further.