Permissions to view own resources in Azure Portal

Andrew Bruce 1 Reputation point
2021-03-17T19:18:06.467+00:00

I just got granted "Manager" access to my company's Azure account - and I'm the first one to use it! And I'm no Azure expert.

So I have my ARM templates and I logged-in with the az CLI and deployed my template and Everything Works! I can SSH into my linux vms, get work done, all is great!

But - I finally thought to go use the Azure Portal (I'm a CLI kind-of-guy so this didn't occur to me for a while :)

And - none of my resources show up.

I have another Azure personal account where I'm the owner / admin and all the resources I create using the CLI show up fine for that personal account.

So - there must be some secret Azure portal permission that permits a resource owner...actually to view their own resources in the Azure Portal. Which - obviously - the role my company assigned to me doesn't grant me that capability.

Any help is appreciated. Thank you!

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,266 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Marilee Turscak-MSFT 36,336 Reputation points Microsoft Employee
    2021-03-17T21:11:31.987+00:00

    Hi @Andrew Bruce ,

    When did you test this? There was a global outage yesterday that was preventing people from being able to see their own resources. If you are still having this problem you can try logging in from canary.portal.azure.com

    I'm not sure what scope of permission you need, but if you just want to be able to have full read access to the directory then you need the Directory Reader role.

    There are many built-in roles that can be used to grant permissions to resources, and you can request the one that is appropriate for your needs. https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

    The admin can assign access to you as needed. https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal

    https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments-external-users

    0 comments No comments

  2. Andrew Bruce 1 Reputation point
    2021-03-17T22:01:14.967+00:00

    This was my fault completely. The company has 2 Azure subscriptions - both named "Subscription 1". But - one is disabled and one is not. And the Azure Portal always is defaulting to the disabled subscription.

    Once I (duh) realized that the Subscription is a pull-down and I pulled on it - voila! and my problem is solved. I select the second (non-disabled) subscription (reminder: they have the same subscription name!) and my resources show up.

    Thanks for the security perms resources - that will be coming very very soon in my life.

    0 comments No comments