Azure Subscription -- Issues creating a Support Ticket

Question

Azure Subscription -- Issues creating a Support Ticket

Carlo Lodola 11

I tried creating a Support Ticket , I am setup as a Support Request Contributor in the Azure Subscription

Issue Type: Technical

Subscription: Company Azure Enterprise subscription

You don't have permission to create a support request
To get permission, ask your subscription administrator or owner to assign you ‘Support Request Contributor’ role for the selected subscription. Learn more about role assignments in the portal.

subscription administrator has me assigned as ‘Support Request Contributor’, I have verified under Access Control (IAM)

As soon as I get to the 3.Additonal Details , this screen is appears

KarishmaTiwari-MSFT 20,772 Reputation points Microsoft Employee Moderator

2021-06-24T00:47:30.357+00:00
Can you try with the "Service Support Administrator" Role assigned, either directly or using PIM, and share the results?

The error you are getting is referring to an RBAC role under the Subscription 'Support Request Contributor'

I think this might be related with ‘Access to Azure Active Directory’ type of subscriptions, which are subscription where RBAC roles can’t be assigned as those are legacy subscriptions, used in the past to link 0365 with Azure AD and have access to Azure.

If this is what is happening, when creating the request, can you select another type of Subscription and share the results with me?

Please let me know and I can further look into it.
DominiqueCt-1065 0 Reputation points

2023-04-20T09:37:26.6366667+00:00

Glad I found this thread. Your description precisely matches my issue as well: I have an "Access to Azure Active Directory" Subscription which I am unable to cancel (the cancel button is greyed out) and every attempt I made to gain access to the subscription has always been met with obscure errors and no access violations. Also, I am unable to open a support ticket as I get the very same error described by @Anonymous I am global admin for the tenant, but have also assigned myself the Service Support Admin role too, just in case - but that didn't seem to make a difference. Lastly, Access management for Azure resources is ON as well. Any Ideas what I can do next? btw my end-goal is to delete the entire tenant. So whatever we do can be destructive.

4 answers

Your answer

KarishmaTiwari-MSFT 20,772 Reputation points Microsoft Employee Moderator

2021-06-24T00:47:30.357+00:00

Can you try with the "Service Support Administrator" Role assigned, either directly or using PIM, and share the results?

The error you are getting is referring to an RBAC role under the Subscription 'Support Request Contributor'

I think this might be related with ‘Access to Azure Active Directory’ type of subscriptions, which are subscription where RBAC roles can’t be assigned as those are legacy subscriptions, used in the past to link 0365 with Azure AD and have access to Azure.

If this is what is happening, when creating the request, can you select another type of Subscription and share the results with me?

Please let me know and I can further look into it.
DominiqueCt-1065 0 Reputation points

2023-04-20T09:37:26.6366667+00:00

Glad I found this thread. Your description precisely matches my issue as well: I have an "Access to Azure Active Directory" Subscription which I am unable to cancel (the cancel button is greyed out) and every attempt I made to gain access to the subscription has always been met with obscure errors and no access violations. Also, I am unable to open a support ticket as I get the very same error described by @Anonymous I am global admin for the tenant, but have also assigned myself the Service Support Admin role too, just in case - but that didn't seem to make a difference. Lastly, Access management for Azure resources is ON as well. Any Ideas what I can do next? btw my end-goal is to delete the entire tenant. So whatever we do can be destructive.

Answer 1

Andreas Baumgarten 123.4K MVP Volunteer Moderator

Hi @Anonymous ,

have you logged off and login again after the Support Request Contributor role was assigned?

Are assigned to the role by your user? Or by a group you are now member of.

Did the answer work for you? Are there any additional questions to this topic?

If you found the answer helpful, it would be great if you please mark it "Accept as answer". This will help others to find answers in Q&A

Regards
Andreas Baumgarten

Answer 2

Carlo Lodola 11

Yes , I tried logged off and login again after the Support Request Contributor role was assigned

role was assigned by Admin

Answer 3

You must have the "Support Request Contributor" role assigned at the scope of the Subscription. Per above screenshot you have it assigned at the scope of a Resource group. Browse to Azure Portal -> Subscriptions blade -> Select an Azure subscription -> Access Control menu -> Assign "Support Request Contributor" role to the user at this scope.

See From https://learn.microsoft.com/en-us/azure/azure-portal/supportability/how-to-create-azure-support-request#azure-role-based-access-control the mention of this requirement:

"To create a support request, you must have the Owner, Contributor, Support Request Contributor role, or a custom role with Microsoft.Support/*, at the subscription level. "

Answer 4

Stéphane LELEU 1

Scope is "Ressource group" (Inherited)" so.. ok at subscription level

Share via

Azure Subscription -- Issues creating a Support Ticket

4 answers

Your answer