Dynamic Membership rules are inaccessible using Global Administrator account

Question

Hi community.

My tenant for my organisation is in Australia, and has two global admins, plus several user accounts with User Administrator and Groups Administrator. We have many groups configured to use Dynamic Membership Rules, to automate administration based on Job Title and Department.

Starting this afternoon (possibly earlier), we have lost all access to edit existing Dynamic Rules on groups, using either of the Global Admin accounts, or any of the Group Admin accounts - every attempt is just getting a '401 - no access' response.

We've also lost access to raise a support ticket with any of those above-mentioned accounts, so I also can't ask for help

We've changed nothing in our tenant (as far as I know) which should cause this. Is anyone else having a similar experience at the moment?

Thanks

Answer 1

Also, I've checked Service Health, and it says that Microsoft Entra is OK.

Answer 2

It seems that you are experiencing access issues with editing Dynamic Membership Rules in your Azure tenant, receiving a '401 - no access' error. This could be due to several reasons, including potential changes in permissions or roles assigned to your accounts, or a temporary issue with Azure services.

Here are a few steps you can take to troubleshoot this issue:

1. Check Role Assignments: Ensure that the Global Administrator and Groups Administrator roles are still correctly assigned to your accounts. Sometimes, roles may be inadvertently altered.
2. Review Azure Service Health: Check the Azure Service Health dashboard to see if there are any ongoing issues or outages affecting your region or services.
3. Clear Cache and Cookies: Sometimes, browser cache or cookies can cause access issues. Try clearing them or using a different browser.
4. Use PowerShell: If you have access to PowerShell, you might still be able to manage groups and dynamic membership rules through command-line commands.
5. Contact Support: Since you mentioned losing access to raise a support ticket, you may need to reach out through another Global Admin account or check if there’s an alternative support channel available.

If the issue persists, it may be beneficial to wait for a while and see if it resolves itself, as it could be a temporary glitch in the Azure platform.