Azure Bot services

Question

Hi,

I cannot create the Azure Bot because I do not have AAD permissions. this is for a class grade and I really need access. What can I do? I've contacted the IT team on my campus, CSU global, and its a runaround.

Answer 1

Creating an Azure Bot requires specific directory and Azure permissions that only the tenant/admin can grant. For a class assignment, the only options are to work with whoever administers the Microsoft Entra ID tenant and the Azure subscription being used for the course.

Key requirements and what to ask your IT team or instructor to do:

1. Verify account type in Microsoft Entra ID
   • In the Microsoft Entra ID blade, under Users, the User type for the student account must not be Guest if the tenant policy restricts guests from creating apps/bots.
   • If the account is a guest, the admin must either:
     • Change the policy to allow guests to register apps/bots, or
     • Provide a non-guest account for the course.
2. Enable app registration in the tenant
   • In the Microsoft Entra ID admin center → Users and groups → User settings:
     • Under App registrations, set Users can register applications to Yes so users can create bot-related app registrations.
     • Under External users, if students are guests, set Guest users permissions are limited to No to allow them to create bot services.
   • Without these settings, students will see errors such as Authorization_RequestDenied when trying to create a bot.
3. Ensure sufficient Azure RBAC permissions
   • To create and deploy a bot in Azure, the student account must have at least the Contributor role either:
     • On the subscription used for the class, or
     • On a specific resource group created for the class.
   • Ask IT or the course owner to:
     • Create a dedicated resource group for the class, and
     • Assign each student Contributor on their own resource group.
4. If IT will not grant those rights
   • Ask the instructor whether the assignment can be completed using:
     • A pre-created Azure Bot resource and app registration that IT owns, with only code/deployment tasks for students, or
     • An alternative lab environment the school provides.
   • For personal work (outside institutional constraints), a personal Azure subscription with full control over Microsoft Entra ID and RBAC would also work, but for a graded class the instructor must confirm this is acceptable.

When contacting campus IT or the course owner, provide them explicitly with:

• The need for: App registration enabled and Contributor access to a subscription or resource group.
• The error context: cannot create Azure AI Bot Service due to AAD/Entra permissions.

Without an administrator adjusting these tenant and RBAC settings or provisioning resources on students’ behalf, students cannot self-unblock this.

---

References:

• General troubleshooting for Azure AI Bot Service bots
• Bot Framework Security and Privacy Frequently Asked Questions