Set only user account in tenant to internal

Question

Set only user account in tenant to internal

Patrick Saunders 0

Hello, I was playing around with Azure cloud services and set the only external account (my own) to internal and now I can't log back in (stupid I know):

Troubleshooting details

If you contact your administrator, send this info to them.

Copy info to clipboard

Request Id: 8aaf4dcf-88db-4772-bbda-cd05674f0600

Correlation Id: dc16052e-4d5d-41f1-9761-124c62d946b8

Timestamp: 2025-12-19T10:10:49Z

Message: AADSTS50020: User account '******@outlook.com' from identity provider 'live.com' does not exist in tenant 'Default Directory' and cannot access the application PII removed in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account.

Flag sign-in errors for review: Enable flagging

If you plan on getting help for this problem, enable flagging and try to reproduce the error within 20 minutes. Flagged events make diagnostics available and are raised to admin attention.

Lesson learnt but I have some resources that are actively billing me, what are my options?

Also, now whenever I try and log back in, even into the azure support link, I get this error:

Interaction required

The portal encountered an issue while attempting to retrieve access tokens. We suggest attempting to sign in again, or alternatively, continuing without access tokens, although this may result in a suboptimal user experience. Additional details: interaction_required: AADSTS160021: Application requested a user session which does not exist. Trace ID: d32bebe3-1d80-477e-803a-e4fe333e1a00 Correlation ID: a1684020-e530-41c5-b950-493c972c08c2 Timestamp: 2025-12-19 11:07:07Z.

Click here to copy details

Shubham Sharma 5,205 Reputation points Microsoft External Staff Moderator

2025-12-19T14:13:15.1533333+00:00
Hey Patrick! It sounds like you've accidentally locked yourself out of your Azure tenant by changing your only external account to internal. Don't worry; there are ways to address this issue even though it can be frustrating.

Here's what you can try:

Emergency Access Accounts: It's a good practice to have emergency access accounts set up so they remain unaffected by policy changes. If you have any emergency access accounts configured, you could log in using one of those accounts.

Request an Admin to Add Your Account: Since your account now needs to be added back as an external user, if you have any colleagues or anyone else in your organization with administrative privileges, you can contact them and provide them with the Request ID and Correlation ID you shared. They should be able to add your account as an external user to the tenant again.

Recover Your Account: If no admin is available, you might need to go through the account recovery process. When trying to sign in, select “Forgot my password?” and see if you can verify your identity using a different method, like email or phone, if you set those up previously.

Check for Active Services: Since you mentioned that resources are actively billing you, once you regain access, check your Azure billing dashboard to understand what resources are still active and whether you need to take action to prevent future charges.

Interaction Required Error: If you encounter the "Interaction required" error while trying to sign in again, it generally indicates issues with session tokens. Make sure to clear your browser cache or try accessing Azure from an incognito window to rule out any browser-related issues.

Hope this helps get you back into your Azure account! If you're unable to reach an admin or recover your account by these methods, it may be necessary to contact Azure support directly.

Follow-Up Questions:

Do you have access to any emergency admin accounts?

Are there other administrators in your organization who can assist with adding your account back?

Have you set any recovery options (like email or phone verification) on your account that could help in the recovery process?

Reference Links:

Manage emergency access accounts in Microsoft Entra ID

Microsoft Entra tenant lockout resolution

Recover your account form guidance

Good luck, and let me know if you have any more questions!

Note: This content was drafted with the help of an AI system. Please verify the information before relying on it for decision-making.
Patrick Saunders 0 Reputation points

2025-12-19T15:00:14.6033333+00:00

wrong edit
Patrick Saunders 0 Reputation points

2025-12-19T15:01:17.04+00:00

Hi Shubham, thanks so much for the help, I appreciate immensely.

Unfortunately I don't have access to any emergency accounts, I was the only user in the tenant (it's really more of a testing ground). When I try to login to azure services, I am sometimes met with: Selected user account does not exist in tenant 'Microsoft Services' and cannot access the application 'c44b4083-3bb0-49c1-b47d-974e53cbdf3c' in that tenant. The account needs to be added as an external user in the tenant first. Please use a different account.

Or, sometimes when I do get through, I see no subscriptions, and when I try and click on storage accounts (for example) I get: Token validation failed. A passthrough token was detected without proper resource provider context - request correlation identifier '8d56c6b5-82c0-4599-ac15-b8ccfecbdf2c' Try refreshing the page. Your resources aren't affected by the issue, we're just having trouble showing this view right now. To see a list of resources, select Simplified View.

I am using Firefox, but even when switching to Edge InPrivate window, I get exactly the same issue
Patrick Saunders 0 Reputation points

2025-12-19T15:04:29.18+00:00

But even when trying to access support I get an error when choosing my account:
Selected user account does not exist in tenant 'Microsoft Services' and cannot access the application 'e6694c91-1590-4e35-9bb7-b865c638b9c1' in that tenant. The account needs to be added as an external user in the tenant first. Please use a different account.

Your answer

Patrick Saunders 0 Reputation points

2025-12-19T15:00:14.6033333+00:00

wrong edit
Patrick Saunders 0 Reputation points

2025-12-19T15:01:17.04+00:00

Hi Shubham, thanks so much for the help, I appreciate immensely.

Unfortunately I don't have access to any emergency accounts, I was the only user in the tenant (it's really more of a testing ground). When I try to login to azure services, I am sometimes met with: Selected user account does not exist in tenant 'Microsoft Services' and cannot access the application 'c44b4083-3bb0-49c1-b47d-974e53cbdf3c' in that tenant. The account needs to be added as an external user in the tenant first. Please use a different account.

Or, sometimes when I do get through, I see no subscriptions, and when I try and click on storage accounts (for example) I get: Token validation failed. A passthrough token was detected without proper resource provider context - request correlation identifier '8d56c6b5-82c0-4599-ac15-b8ccfecbdf2c' Try refreshing the page. Your resources aren't affected by the issue, we're just having trouble showing this view right now. To see a list of resources, select Simplified View.

I am using Firefox, but even when switching to Edge InPrivate window, I get exactly the same issue
Patrick Saunders 0 Reputation points

2025-12-19T15:04:29.18+00:00

But even when trying to access support I get an error when choosing my account:
Selected user account does not exist in tenant 'Microsoft Services' and cannot access the application 'e6694c91-1590-4e35-9bb7-b865c638b9c1' in that tenant. The account needs to be added as an external user in the tenant first. Please use a different account.

Share via

Set only user account in tenant to internal

Your answer