Lab Sandbox Not Allowing Access to Azure AD

SecHax 61

I've been working in the learn sandbox for two weeks now with no problems. However, today is completely different. I am trying to complete this Exercise - Assign users to Azure Active Directory groups. I activated the sandbox and went through the permissions part, but it denies me access when I login and try to get to Azure AD. I've signed out and back in again and cleared cache in browsers but nothing seems to work. Any ideas?

Shashi Shailaj 7,581 Reputation points Microsoft Employee

2020-05-07T17:46:48.093+00:00

Are you trying to logon using a Microsoft Account (outlook.com , hotmail.com , live ID) or you are trying using a work account ? I tried the tutorial that you referenced https://learn.microsoft.com/en-us/learn/modules/create-users-and-groups-in-azure-active-directory/5-exercise-assign-users-azure-ad-groups using my work account which was used to signup for MS learn and yes I am unable to get the sandbox working. I have reached out to the internal team and we will update you as soon as we have information on this.

Thank you.
Andrew Winn 1 Reputation point

2020-08-28T18:03:36.273+00:00

I am seeing the same error message despite repeated attempts.
Doug-8349 1 Reputation point

2021-03-03T03:31:26.237+00:00

03/02/2021 Issue still persists.
Cary White 1 Reputation point

2021-03-17T03:37:39.86+00:00

Issue persists
Omer Shareef 16 Reputation points

2021-03-31T23:07:39.537+00:00

Has this issue been fixed ?
Connor Stubbs 1 Reputation point

2021-04-29T19:26:37.637+00:00

I am also having this problem.
Harsh Gulati 1 Reputation point

2021-05-10T15:32:42.263+00:00

Same issue am getting while trying to practice using MS learn. Please let us Microsoft Team by when we can get this issues fix. Thanks
Jonathan Griffiths 96 Reputation points

2021-05-14T09:13:33.253+00:00

My experience of this issue is that it is not specific to a particular tutorial. It is intermittent, and may affect any tutorial. In tutorials where the instructions do not required the user to navigate to Azure AD, the initial symptom is elsewhere - "The client 'live.com#[my email]' with object id '[my object id]' does not have authorization to perform action [etc.] over scope [etc.]". However, when I try to fix that problem by going to Azure AD, access to AAD, in the sandbox, is denied as reported here. (Access to AAD in my normal, personal, non-sandbox directory is not affected).

The only clue I have found is that it is more likely to happen when I switch to a new sandbox soon after the old sandbox has expired. Therefore, I suspect that the problem has to do with the cleanup and provisioning of sandboxes.
Vanden Eynde Pascal 1 Reputation point

2021-06-14T13:24:57.17+00:00

Same problem here. Trying to learn Azure AD in order to teach it to my students so hopefully this gets fixed soon. Thanks.
Karen Glynn 1 Reputation point

2021-08-02T12:50:50.983+00:00

Same for me, I cannot create a new Azure Active Directory as per the instructions as I don't have permission to do that in the Sandbox and I do not have access to the existing Azure Active Directory in the Sandbox. Highly frustrating as this is waht we are supposed to be learning - how can we learn anything when it doesn't work at all?
Daniel Schwendeman 1 Reputation point

2021-09-22T12:47:36.42+00:00

This is an old topic but a Google search led me here and I have at least a partial answer.

If your experience was like mine, you didn't get all the way through this module in one go and came back hours or a day later to finish up. Some internal timer/expiration causes these resources to become unavailable so the workaround is this:

Go back to the earlier lab where you first create the AAD tenant "Contoso Marketing Company". Create a new one with a new unique identifier "contosomarketingXXXX". Reactivate the Azure AD Premium 2 trial license and then run through creating the Chris Green user, Developer Group and then move on to adding a Guest user, Docusign Application and B2B trust. This should work without throwing the 403 access error that you are getting with the tenant you were trying to resume the activity with.
Christopher Illgen | Cloudfreunde 1 Reputation point

2023-01-03T14:27:04.297+00:00

Ich kann in der Sandbox keine AD erstellen. Bin nach MS-Learn vorgegangen.

Fehlerbeschreibung:

{ "shellProps": { "sessionId": "af44827064f447eaa1ab444f7eb6c193", "extName": "Microsoft_AAD_IAM", "contentName": "ActiveDirectoryMenuBlade", "code": 403 }, "error": { "message": "Kein Zugriff", "code": 403 }}
Elizabete Šterna 0 Reputation points

2023-01-30T11:48:30.9566667+00:00

2023 - I am having the same issue with https://learn.microsoft.com/en-us/training/modules/create-users-and-groups-in-azure-active-directory/3-exercise-add-delete-users-azure-ad.

I get the "You do not have access" error when trying to create Azure AD resource (as per task instructions):

{ "shellProps": { "sessionId": "ffffa179cc0f44f08904ab53eb029222", "extName": "Microsoft_AAD_IAM", "contentName": "CreateDirectoryBlade", "code": 403 }, "error": { "message": "No access", "code": 403 }}

Any idea when this issue will be solved or some workarounds?
OLADOJA NIYI SAMAD 20 Reputation points

2023-02-16T09:54:31+00:00

Problem persists even now.
OLADOJA NIYI SAMAD 20 Reputation points

2023-02-16T09:54:35.3633333+00:00

Problem persists even now.
Mateus Alves 5 Reputation points

2023-02-21T09:28:54.2266667+00:00

2023-02-21 - Error still persists.
Silvio Danilo Felipe de Souza 0 Reputation points

2023-03-09T12:02:50.7566667+00:00

Bom dia,

O problema continua, Já tem uns 4 dias que busco resposta para este erro. Essa semana criei uma nova conta microsoft para tentar resolver o problema e nada.

https://learn.microsoft.com/pt-br/training/modules/create-users-and-groups-in-azure-active-directory/3-exercise-add-delete-users-azure-ad