Adding my user account as Guest user in Azure Active Directory

story2022 1

Hi,

When trying to add Teams add-on to Google calendar, I receive the following error message:

AADSTS50020: User account * Email address is removed for privacy *' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application '7969c887-ba98-48bb-8832-6c9239929d7c'(Microsoft Teams meeting add-on for Google Workspace) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account.

From the following post, it suggests "To check this: Go to Azure Active Directory portal > Users > Check you are added as a guest user or if you are not there, ask them to added your user account as Guest user and then check the result."

https://answers.microsoft.com/en-us/msteams/forum/all/message-aadsts50020/318bc3ec-23e0-4298-887f-11fa244573b8

Could anyone help with this? Add "new guest user" option is not available in my Azure Active Directory. And it does not allow me to create a new support request in Azure website either. Thanks in advance.

2 answers

AmanpreetSingh-MSFT 56,691 Reputation points

2022-01-18T11:35:15.317+00:00
Hi @story2022 • Thank you for reaching out.

The add "new guest user" option might be unavailable due to:

1) The "Guest invite restrictions" setting under Azure AD > User Settings > External users > Manage external collaboration settings is configured with either 3rd or 4th option, as highlighted below:

2) If it is set to 3rd option, make sure that any of the admin roles mentioned below are assigned to your user account.

Guest Inviter

User Administrator

Global Administrator

If it is set to 4th option, you need to contact the global administrator of your tenant to change this setting.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Please sign in to rate this answer.
story2022 1 Reputation point

2022-01-18T20:12:56.257+00:00

Thank you for your answer. When I click on User Settings, it has an error message saying "Unable to complete due to service connection error. Please try again later."

I used Chrome and I have refreshed it and restarted it, but no luck. I tried it on Edge as well as suggested by this link, but luck either.
https://learn.microsoft.com/en-us/answers/questions/230332/unable-to-complete-due-to-service-connection-error-2.html

When I click on my own profile in Azure, it says "You don't have access to this data."

AmanpreetSingh-MSFT 56,691 Reputation points

2022-01-19T12:15:24.16+00:00

@story2022 · Did you create the Azure account using the same Gmail ID? Do you get an option to add New User? You can try creating a new member user and during creation, you can select Global Administrator role for the user under the Groups and roles section.

If you are able to create a member user, you can try logging in with the new user and check the above settings.

If you are unable to create a member user account as well, check which email ID was used to create the Azure Account and sign in to Azure portal using that email address.

Note: The service connection error can be a temporary error or could be due to the firewall/proxy device in your network blocking access to required endpoints. You can try from a different machine in a different network e.g., Azure VM.

story2022 1 Reputation point

2022-01-19T20:15:44.567+00:00

Yes, I created the Azure account using the same Gmail ID. The option to add New User is greyed out.

when I click on "All Groups", it says "Insufficient privileges to complete the operation".

AmanpreetSingh-MSFT 56,691 Reputation points

2022-01-21T07:52:27.28+00:00

@story2022 The creator of Azure Account by default gets global admin access. Could you please check if you are connected to the right directory by clicking on the settings icon, highlighted below:

If you are connected to a different directory, click on the switch directory button next to the correct directory.

story2022 1 Reputation point

2022-01-21T08:09:56.42+00:00

No directories found

AmanpreetSingh-MSFT 56,691 Reputation points

2022-02-25T08:57:55.257+00:00

@story2022 Looks like you don't have access to any tenant and you are by default getting connected to the Microsoft Services tenant. Can you confirm if you navigate to Azure Portal > Azure Active Directory > Overview page and check if the tenant ID is f8cdef31-a31e-4b4a-93e4-5f571e91255a. If that is the case, it is expected and you need to either create a free Azure account via https://azure.microsoft.com/en-us/free/ or ask someone to first add your Gmail account as a guest user to their tenant.

AmanpreetSingh-MSFT 56,691 Reputation points

2022-03-07T04:26:43.573+00:00

@story2022 Just checking if you had a chance to test it out.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Rafael da Rocha 5,171 Reputation points

2022-01-18T11:38:32.603+00:00

Make sure your user has a role that allows invitation of guests, and that guest users are enabled tenant wide
Please sign in to rate this answer.
JimmyYang-MSFT 54,406 Reputation points Microsoft Vendor

2022-01-19T08:07:14.803+00:00

Hi @story2022

Do you you have access to change these settings?

Please make sure you are log in to new Azure Portal by using the account with Global Administrator permission for Azure AD. In this forum, it shows two ways for your reference.

Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.

story2022 1 Reputation point

2022-01-19T08:48:54.397+00:00

Hi Jimmy, thanks for your comment. I used the Gmail account (the one I want to add Microsoft Teams to its calendar) to register Azure AD yesterday. It is the only account I have for Azure AD. That Gmail account does not belong to any organization or domains. It is a newly registered account for Azure AD. So, how to make sure that the account can have Global Administrator permission? Thanks.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.