Manage Microsoft Support access requests (preview)

You can use the Microsoft Entra admin center and the Azure portal to manage Microsoft Support access requests (preview). Microsoft Support access requests enable you to give Microsoft Support engineers access to identity diagnostic data in your identity service to help solve support requests you submitted to Microsoft.

Prerequisites

Only certain Microsoft Entra roles are authorized to manage Microsoft Support access requests. To manage Microsoft Support access requests, a role must have the permission microsoft.azure.supportTickets/allEntities/allTasks. To see which Microsoft Entra roles have this permission, search the Microsoft Entra built-in roles for the required permission.

View support access requests

  1. Sign in to the Microsoft Entra admin center as at least a Service Support Administrator.

  2. Browse to Learn & support > Diagnose and solve problems.

  3. Scroll to the bottom of the page and select Approved access from the Microsoft Support Access Requests section.

    Screenshot of the Diagnose and solve problems page with the Manage pending requests link highlighted.

  4. Select the Support request ID link for the request you need to approve.

    Screenshot of the pending request with links to view details highlighted.

Revoke access to an approved support access request

Closing a support request automatically revokes the support engineer's access to your identity diagnostic data. You can manually revoke Microsoft Support's access to identity diagnostic data for the support request before your support request is closed.

Select the Remove access button to revoke access to an approved support access request.

Screenshot of the Support access requests history with the Revoke button highlighted.

When your support request is closed, the status of an approved Microsoft Support access request is automatically set to Completed. Microsoft Support access requests remain in the Approved access list for 30 days.

Next steps