Lab Sandbox Not Allowing Access to Azure AD

SecHax 61

I've been working in the learn sandbox for two weeks now with no problems. However, today is completely different. I am trying to complete this Exercise - Assign users to Azure Active Directory groups. I activated the sandbox and went through the permissions part, but it denies me access when I login and try to get to Azure AD. I've signed out and back in again and cleared cache in browsers but nothing seems to work. Any ideas?

Shashi Shailaj 7,581 Reputation points Microsoft Employee

2020-05-07T17:46:48.093+00:00

Are you trying to logon using a Microsoft Account (outlook.com , hotmail.com , live ID) or you are trying using a work account ? I tried the tutorial that you referenced https://learn.microsoft.com/en-us/learn/modules/create-users-and-groups-in-azure-active-directory/5-exercise-assign-users-azure-ad-groups using my work account which was used to signup for MS learn and yes I am unable to get the sandbox working. I have reached out to the internal team and we will update you as soon as we have information on this.

Thank you.
Andrew Winn 1 Reputation point

2020-08-28T18:03:36.273+00:00

I am seeing the same error message despite repeated attempts.
Doug-8349 1 Reputation point

2021-03-03T03:31:26.237+00:00

03/02/2021 Issue still persists.
Cary White 1 Reputation point

2021-03-17T03:37:39.86+00:00

Issue persists
Omer Shareef 16 Reputation points

2021-03-31T23:07:39.537+00:00

Has this issue been fixed ?
Connor Stubbs 1 Reputation point

2021-04-29T19:26:37.637+00:00

I am also having this problem.
Harsh Gulati 1 Reputation point

2021-05-10T15:32:42.263+00:00

Same issue am getting while trying to practice using MS learn. Please let us Microsoft Team by when we can get this issues fix. Thanks
Jonathan Griffiths 96 Reputation points

2021-05-14T09:13:33.253+00:00

My experience of this issue is that it is not specific to a particular tutorial. It is intermittent, and may affect any tutorial. In tutorials where the instructions do not required the user to navigate to Azure AD, the initial symptom is elsewhere - "The client 'live.com#[my email]' with object id '[my object id]' does not have authorization to perform action [etc.] over scope [etc.]". However, when I try to fix that problem by going to Azure AD, access to AAD, in the sandbox, is denied as reported here. (Access to AAD in my normal, personal, non-sandbox directory is not affected).

The only clue I have found is that it is more likely to happen when I switch to a new sandbox soon after the old sandbox has expired. Therefore, I suspect that the problem has to do with the cleanup and provisioning of sandboxes.
Vanden Eynde Pascal 1 Reputation point

2021-06-14T13:24:57.17+00:00

Same problem here. Trying to learn Azure AD in order to teach it to my students so hopefully this gets fixed soon. Thanks.
Karen Glynn 1 Reputation point

2021-08-02T12:50:50.983+00:00

Same for me, I cannot create a new Azure Active Directory as per the instructions as I don't have permission to do that in the Sandbox and I do not have access to the existing Azure Active Directory in the Sandbox. Highly frustrating as this is waht we are supposed to be learning - how can we learn anything when it doesn't work at all?
Daniel Schwendeman 1 Reputation point

2021-09-22T12:47:36.42+00:00

This is an old topic but a Google search led me here and I have at least a partial answer.

If your experience was like mine, you didn't get all the way through this module in one go and came back hours or a day later to finish up. Some internal timer/expiration causes these resources to become unavailable so the workaround is this:

Go back to the earlier lab where you first create the AAD tenant "Contoso Marketing Company". Create a new one with a new unique identifier "contosomarketingXXXX". Reactivate the Azure AD Premium 2 trial license and then run through creating the Chris Green user, Developer Group and then move on to adding a Guest user, Docusign Application and B2B trust. This should work without throwing the 403 access error that you are getting with the tenant you were trying to resume the activity with.
Christopher Illgen | Cloudfreunde 1 Reputation point

2023-01-03T14:27:04.297+00:00

Ich kann in der Sandbox keine AD erstellen. Bin nach MS-Learn vorgegangen.

Fehlerbeschreibung:

{ "shellProps": { "sessionId": "af44827064f447eaa1ab444f7eb6c193", "extName": "Microsoft_AAD_IAM", "contentName": "ActiveDirectoryMenuBlade", "code": 403 }, "error": { "message": "Kein Zugriff", "code": 403 }}
Elizabete Šterna 0 Reputation points

2023-01-30T11:48:30.9566667+00:00

2023 - I am having the same issue with https://learn.microsoft.com/en-us/training/modules/create-users-and-groups-in-azure-active-directory/3-exercise-add-delete-users-azure-ad.

I get the "You do not have access" error when trying to create Azure AD resource (as per task instructions):

{ "shellProps": { "sessionId": "ffffa179cc0f44f08904ab53eb029222", "extName": "Microsoft_AAD_IAM", "contentName": "CreateDirectoryBlade", "code": 403 }, "error": { "message": "No access", "code": 403 }}

Any idea when this issue will be solved or some workarounds?
OLADOJA NIYI SAMAD 20 Reputation points

2023-02-16T09:54:31+00:00

Problem persists even now.
OLADOJA NIYI SAMAD 20 Reputation points

2023-02-16T09:54:35.3633333+00:00

Problem persists even now.
Mateus Alves 5 Reputation points

2023-02-21T09:28:54.2266667+00:00

2023-02-21 - Error still persists.
Silvio Danilo Felipe de Souza 0 Reputation points

2023-03-09T12:02:50.7566667+00:00

Bom dia,

O problema continua, Já tem uns 4 dias que busco resposta para este erro. Essa semana criei uma nova conta microsoft para tentar resolver o problema e nada.

https://learn.microsoft.com/pt-br/training/modules/create-users-and-groups-in-azure-active-directory/3-exercise-add-delete-users-azure-ad

33 answers

cdm 36 Reputation points

2020-09-21T09:12:40.033+00:00

Hi,

Today I tried following this learn content:
'Create Azure users and groups in Azure Active Directory' >> 'Exercise - Assign users to Azure Active Directory groups'
and I'm experiencing the exact same issue as described by others in this question (i.e. "No Access" when going to 'Azure Active Directory' blade for the Microsoft Learn Sandbox automatically created during the exercise). Any idea when this can be fixed? Or a workaround this issue?

Thanks.
Please sign in to rate this answer.

7 people found this answer helpful.

0 comments No comments
Sign in to comment
Vishal Mehta 16 Reputation points

2020-10-06T13:52:14.403+00:00

Getting the same error when trying to do exercise for Azure Active Directory related learn modules:
https://learn.microsoft.com/en-us/learn/modules/create-users-and-groups-in-azure-active-directory/3-exercise-add-delete-users-azure-ad
Please sign in to rate this answer.

3 people found this answer helpful.

0 comments No comments
Sign in to comment
Shashi Shailaj 7,581 Reputation points Microsoft Employee

2020-05-08T12:42:53.203+00:00

Hello @SecHax ,

We have found that this was an issue within the learn system internally and have been now fixed. You must be able to go ahead and continue your learning without any issue. I tried this myself and it is working without any issue. If you are still facing any error when you are following the tutorial https://learn.microsoft.com/en-us/learn/modules/create-users-and-groups-in-azure-active-directory/5-exercise-assign-users-azure-ad-groups , please provide more details and a screenshot and we will help you further.

Thank you.
Please sign in to rate this answer.

2 people found this answer helpful.
Mohammed M. Saeed 66 Reputation points

2021-02-03T06:01:48.367+00:00

The problem still persists.

Maarten Kloppenburg 6 Reputation points

2023-01-10T14:51:30.6+00:00

Issue still persists (or has been reintroduced?), could not start the excersise at: https://learn.microsoft.com/en-us/training/modules/create-users-and-groups-in-azure-active-directory/3-exercise-add-delete-users-azure-ad

Error when clicking on create AAD: { "shellProps": { "sessionId": "384a94eb28274e38990275d9c23bc607", "extName": "Microsoft_AAD_IAM", "contentName": "CreateDirectoryBlade", "code": 403 }, "error": { "message": "No access", "code": 403 }}

Mustapha-0573 5 Reputation points

2023-02-11T11:55:16.2533333+00:00

I've had the same issue with about 3 sandboxes now. Tried everything to no avail but I just checked my permissions now and it shows that I am being assigned a contributor role which I believe stops me from performing this exercise at: https://learn.microsoft.com/en-us/training/modules/allow-users-reset-their-password/4-exercise-set-up-self-service-password-reset. Pls look into it soon, thank you.

SELENGUENDE DZONGO Yannick 5 Reputation points

2023-02-17T19:30:35.11+00:00

Hello.

I've got the same error at the same course.

thanks

https://learn.microsoft.com/fr-fr/training/modules/create-users-and-groups-in-azure-active-directory/3-exercise-add-delete-users-azure-ad
Sign in to comment
LILY WANG 11 Reputation points

2021-11-22T06:44:42.657+00:00

Hi all

I found out how to resolve this issue.

First at portal.azure.com, open azure shell

then input command :

az account list

it would return as below and including tenantId

xxx@Azure:~$ az account list
[
{
"cloudName": "AzureCloud",
"homeTenantId": "XXX",
"id": "XXX",
"isDefault": true,
"managedByTenants": [],
"name": "Concierge Subscription",
"state": "Enabled",
"tenantId": "XXX",
"user": {
"cloudShellID": true,
"name": "live.com#xxx@Karima ben .com",
"type": "user"
}
}

login with your tenantId

.\azcopy.exe login --tenant-id xxx

at the browser open the link and sign in your microsoft email, now you will able to login.

Thanks!
Please sign in to rate this answer.

2 people found this answer helpful.
Siva Ramakrishnan 71 Reputation points

2022-01-19T18:40:55.6+00:00

Please elaborate your solution.

When you say "First at portal.azure.com, open azure shell" are you talking about login in with the sandbox account, in which case, Azure doesn't allow you to create a storage account to access the shell.( The client XXX does not have authorization to perform action).

Sorry If I don't get the solution but honestly I feel it is not possible to access Active Directory from SANDBOX.

I am not sure if Microsoft managed to find a solution for this in some other thread but I am disappointed they still haven't got a feedback for us here.
Sign in to comment
Marisol Redondo Garcia 6 Reputation points

2020-10-03T08:54:49.927+00:00

I'm having the same error when trying to do the exercise in "Add and delete users in Azure Active Directory" (https://learn.microsoft.com/en-us/learn/modules/create-users-and-groups-in-azure-active-directory/3-exercise-add-delete-users-azure-ad?source=learn)
Please sign in to rate this answer.

1 person found this answer helpful.

0 comments No comments
Sign in to comment

Lab Sandbox Not Allowing Access to Azure AD

33 answers

login with your tenantId