How to clear a "Restricted Tenant" flag

David Zona 6 Reputation points
2022-05-01T10:47:40.497+00:00

I have no problems logging to login.microsoft.com using my personal account. However if I attempt to login to admin.microsoft.com while logged into login.microsoft.com I will not accept my username and password and ultimately get to "only your admin can reset your password". I've discovered that I can login to portal.azure.com but my account says "Restricted Tenant" and I am unable to see or view any details. It also is advising me to login with a different account. This restricted tenant problems seems related to my inability to login to admin.microsoft.com. Anyone have any thoughts on either?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,457 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Marilee Turscak-MSFT 33,801 Reputation points Microsoft Employee
    2022-05-11T23:14:26.447+00:00

    Hi @David Zona ,

    The "Restricted Tenant" setting usually means that on your organization's side that tenant is not a permitted tenant. In your home tenant, the setting needs to be updated to allow the other tenant.

    If the configuration of tenant restrictions was done on the corporate proxy infrastructure, admins can access the tenant restrictions reports in the Azure portal directly under Azure Active Directory admin center > Azure Active Directory > Tenant Restrictions.

    The instructions in Use tenant restrictions to manage access to SaaS cloud applications show how to set up a permitted tenant list using the Restrict-Access-To-Tenants HTTP header.

    That said, there is another reason why you might receive the "Restricted Tenant" message even if the tenant is not restricted. If the user account does not exist in the tenant but is able to access the tenant through an access weblink in the admin portal, the user will be able to "hit" the tenant but all actions will be restricted. If this is the case, you will also see the error message you described and you will need to make sure that account is added as an invited guest to the "restricted" tenant.

    Let me know if you have further questions!

    Marilee

    -

    If the information provided was helpful to you, please remember to "mark as answer" so that others in the community with similar questions can more easily find a solution.

    0 comments