Error: You are not authorized to call the service. Please contact the admin for authorization.

Question

Error: You are not authorized to call the service. Please contact the admin for authorization.

Hisashi Goto 116 Microsoft Employee

Access Control of Azure Farmbeats Accelerator displayed the error message "Error: You are not authorized to call the service. Please contact the admin for authorization." when an admin tried to give access to a different user.

Could you tell us how "admin" can suppress the error?

Sunayana Singh 91 Reputation points Microsoft Employee Moderator

2020-07-16T07:02:35.363+00:00

Hi @HisashiGoto-8203

Could you please help us with some more information? Is the error persistent? Does it go away if you do a Ctrl+F5 on your browser?

Are you able to view other pages in the Accelerator UI like Farms, Devices etc.?

Thanks,
-sunayana
Hisashi Goto 116 Reputation points Microsoft Employee

2020-07-16T08:54:47.927+00:00

Hi Sunayama san

>Does it go away if you do a Ctrl+F5 on your browser?

It did not work.

>Are you able to view other pages in the Accelerator UI like Farms, Devices etc.?

Yes, I could see other pages (Farms, Devices, etc).

Best Regards
Hisashi Goto
Sunayana Singh 91 Reputation points Microsoft Employee Moderator

2020-07-16T09:57:31.093+00:00

Thank you Hisashi San for the information.

I am going to raise an issue internally with our team to check why this might be happening. Will reach out to you in case we need more details.
Sunayana Singh 91 Reputation points Microsoft Employee Moderator

2020-07-20T09:46:34.333+00:00

Hi @HisashiGoto-8203 san,

Could you please help us with your subscription ID and the resource group name of FarmBeats deployment?

Thanks,
-sunayana
Sunayana Singh 91 Reputation points Microsoft Employee Moderator

2020-07-20T09:54:13.043+00:00

Also @HisashiGoto-8203 san,

What access does the user who is added by the Admin have in the Azure AD of the tenant? Is it a guest user?

Thanks.
Hisashi Goto 116 Reputation points Microsoft Employee

2020-07-20T10:12:24.813+00:00

I tried set both.
-- I assigned an account (set as admin role) by using farmbeats's accelerator...
-- then I assigned the account (as an owner) to the resource group that farmbeats was installed...
Sunayana Singh 91 Reputation points Microsoft Employee Moderator

2020-07-21T15:06:08.42+00:00

Thank you @Hisashi Goto san for the information.

However I wanted to know the access level in the Azure Active Directory?
Hisashi Goto 116 Reputation points Microsoft Employee

2020-07-21T16:26:53.307+00:00

Is it really the point how I should set AAD for farmbeats accelerator? I believe it should be controlled by farmbeats accelerator without configuring AAD...
Hisashi Goto 116 Reputation points Microsoft Employee

2020-07-21T16:28:04.927+00:00

In general, farmbeats accelerator should handle all the thing without opening Azure portal to set AAD for each person.
Sunayana Singh 91 Reputation points Microsoft Employee Moderator

2020-07-23T12:44:03.293+00:00

Hi @Hisashi Goto san,

FarmBeats accelerator can give access to a user who already exists in the same AAD tenant. If the user already exists in the AAD, then there is no need to go to the Azure portal - you can add it from the FarmBeats accelerator.

More information here.

Thanks,
-sunayana
Hisashi Goto 116 Reputation points Microsoft Employee

2020-07-28T23:27:40.983+00:00

If so, my problem shall be submitted as a BUG... Where should I submit the report?
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Accepted answer

1 additional answer

Your answer

Sunayana Singh 91 Reputation points Microsoft Employee Moderator

2020-07-16T07:02:35.363+00:00

Hi @HisashiGoto-8203

Could you please help us with some more information? Is the error persistent? Does it go away if you do a Ctrl+F5 on your browser?

Are you able to view other pages in the Accelerator UI like Farms, Devices etc.?

Thanks,
-sunayana
Hisashi Goto 116 Reputation points Microsoft Employee

2020-07-16T08:54:47.927+00:00

Hi Sunayama san

>Does it go away if you do a Ctrl+F5 on your browser?

It did not work.

>Are you able to view other pages in the Accelerator UI like Farms, Devices etc.?

Yes, I could see other pages (Farms, Devices, etc).

Best Regards
Hisashi Goto
Sunayana Singh 91 Reputation points Microsoft Employee Moderator

2020-07-16T09:57:31.093+00:00

Thank you Hisashi San for the information.

I am going to raise an issue internally with our team to check why this might be happening. Will reach out to you in case we need more details.
Sunayana Singh 91 Reputation points Microsoft Employee Moderator

2020-07-20T09:46:34.333+00:00

Hi @HisashiGoto-8203 san,

Could you please help us with your subscription ID and the resource group name of FarmBeats deployment?

Thanks,
-sunayana
Sunayana Singh 91 Reputation points Microsoft Employee Moderator

2020-07-20T09:54:13.043+00:00

Also @HisashiGoto-8203 san,

What access does the user who is added by the Admin have in the Azure AD of the tenant? Is it a guest user?

Thanks.
Hisashi Goto 116 Reputation points Microsoft Employee

2020-07-20T10:12:24.813+00:00

I tried set both.
-- I assigned an account (set as admin role) by using farmbeats's accelerator...
-- then I assigned the account (as an owner) to the resource group that farmbeats was installed...
Sunayana Singh 91 Reputation points Microsoft Employee Moderator

2020-07-21T15:06:08.42+00:00

Thank you @Hisashi Goto san for the information.

However I wanted to know the access level in the Azure Active Directory?
Hisashi Goto 116 Reputation points Microsoft Employee

2020-07-21T16:26:53.307+00:00

Is it really the point how I should set AAD for farmbeats accelerator? I believe it should be controlled by farmbeats accelerator without configuring AAD...
Hisashi Goto 116 Reputation points Microsoft Employee

2020-07-21T16:28:04.927+00:00

In general, farmbeats accelerator should handle all the thing without opening Azure portal to set AAD for each person.
Sunayana Singh 91 Reputation points Microsoft Employee Moderator

2020-07-23T12:44:03.293+00:00

Hi @Hisashi Goto san,

FarmBeats accelerator can give access to a user who already exists in the same AAD tenant. If the user already exists in the AAD, then there is no need to go to the Azure portal - you can add it from the FarmBeats accelerator.

More information here.

Thanks,
-sunayana
Hisashi Goto 116 Reputation points Microsoft Employee

2020-07-28T23:27:40.983+00:00

If so, my problem shall be submitted as a BUG... Where should I submit the report?
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Answer 1

Gulshan Budhwani 76

Hi @HisashiGoto-8203 san,

As discussed over Team chat, the user should be added as type member(not as guest). Also you need to have admin privileges to add user of type member to you AAD tenant.

Thanks,
Gulshan

Hisashi Goto 116 Reputation points Microsoft Employee

2020-08-03T22:30:10+00:00

Thank you so much for your investing the issue. I appreciate you for describing the report back to me.

Answer 2

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more

Share via

Error: You are not authorized to call the service. Please contact the admin for authorization.

1 additional answer

Your answer