This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
In my Azure Portal, I am unable to add or search for a managed identity. The error message is "Some results might be hidden due to your ABAC condition," even when successfully authenticated as the Global Admin
How can I rectify this issue?
Is this due to the roles permanently assigned to my user account?
From: https://entra.microsoft.com/#view/Microsoft_Azure_PIMCommon/ActivationMenuBlade/~/aadmigratedroles
Authentication Administrator
Global Administrator
Security Operator
Security Administrator
Global Admin doesnt mean you also have access to an Azure resource.
Typically what you want to do is toggle and temporarily elevate your access once you are global admin:
then when done assigning perms to the managed id, toggle it off again.
Hi ,
OK, so how do I toggle it, since there is no PIM assigned role to my user account?
@EnterpriseAdmin Can manage access to all Azure subscriptions and management groups in this tenant ?
OK, as suggested from here: https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/%7E/Properties
The Save button is still not working?
Thank you for the suggestion before, I am also not sure why I can only elevate myself to the User Access Administrator role using: https://learn.microsoft.com/en-us/azure/role-based-access-control/elevate-access-global-admin?tabs=azure-cli%2Centra-audit-logs
az rest --method post --url "/providers/Microsoft.Authorization/elevateAccess?api-version=2016-07-01"
Command above, but not via the Azure Portal GUI: https://entra.microsoft.com/#view/Microsoft_AAD_IAM/TenantOverview.ReactView/initialValue//tabId//recommendationResourceId//fromNav/Identity