Windows Admin Center

Question

I try build windows admin center on portal azure to manage azure local but always got this error. Anyone know why?

Answer 1

Hello @Handian Sudianto ,

This error indicates an access or permission issue when launching Windows Admin Center from the Azure portal.

Please check the following:

1. Access permissions Your account (or a group you belong to) must have the required Azure RBAC permissions assigned on the Azure Local cluster or its resource group. If permissions were added recently, allow a few minutes for access to fully propagate before retrying.
2. Subscription configuration Ensure the Azure subscription used for the Azure Local cluster has all required resource providers registered. Missing registrations can prevent portal‑based management tools from starting.

If the issue continues after validating permissions and waiting for propagation, please let me know and we can check with you further with more details.

References:

• https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/support/troubleshooting
• https://learn.microsoft.com/en-us/previous-versions/azure/azure-local/deploy/register-with-azure?tabs=windows-admin-center#assign-azure-permissions-from-the-azure-portal
• https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/manage-hci-clusters#requirements

Answer 2

The error in the screenshot indicates an authorization problem, not an installation or connectivity failure. Windows Admin Center in the Azure portal is running, but the signed‑in account is not allowed to use the tool.

For Azure Local clusters managed through Windows Admin Center in Azure, ensure the following:

1. The Azure Local cluster is properly connected to Azure using Azure Arc and is running a supported Arc agent version (1.13.21320.014 or later, and not the broken 1.35/1.36 versions).
2. The Windows Admin Center extension is successfully installed on all nodes of the Azure Local cluster from the cluster blade (Settings → Windows Admin Center → Install) and not per‑node in a conflicting way.
3. The signed‑in Microsoft Entra ID account has sufficient permissions on the Azure resource (for example, appropriate role assignments on the Azure Local cluster) and, where required, local administrator rights on the cluster nodes for operations that still need local admin.
4. If the environment uses guest accounts in Microsoft Entra ID, be aware that Windows Admin Center does not support authenticating guest users of Microsoft Entra ID tenants; such accounts cannot connect their Windows Admin Center instance to Azure or use Azure services through it.
5. If access was just granted, wait a few minutes and then refresh the page, as propagation delay can cause temporary “not authorized” messages.

If authorization and roles are correct but the portal still shows the same message, collect logs from the extension (Azure portal → cluster → Settings → Extensions → AdminCenter → View Detailed Status) and from each node (azcmagent logs) and open a support request.

---

References:

• Manage Azure Local clusters using Windows Admin Center in Azure (preview)
• Manage Azure Arc-enabled servers by using Windows Admin Center in Azure