My permissions seemed to have changed, how do I fix them?

Question

Until this week, I've been able to log into and use Microsoft Azure just fine. However, this week, I had some difficulty logging into the Azure portal for one of our Directories, always being kicked out the moment I logged in. This part was resolved, however, now I cannot access the storage Quota that is normally found under Web App >> App Service Plans.

I work for a small company, so there aren't many people who can alter my permissions and all of them have told me they didn't change anything. I also checked and I still have Contributor access to the App Service Plan. The only thing we did recently was change my login type from "Guest" to "Member", could that have altered anything?

Anyway, I know this hasn't moved because others can see it just fine, but how can I get back access for myself?

Answer 1

Hello ZP@Gyrus,

Thank you for reaching out to Microsoft Q&A platform.

I wanted to address the possible impact on your permissions after changing your login type from Guest to Member in Microsoft Entra ID (formerly known as Azure AD). Even though your Contributor role remains unchanged, this switch could have caused some issues.

 

Here are a few reasons why this might have happened:

When you switch from Guest to Member, it may take some time for the role changes to fully propagate. You might need to sign out and back in or wait a few hours for the changes to take effect.

Even though you have the Contributor role, it's possible that your permissions were assigned at a different level, such as Subscription, Resource Group, or Specific Resource. If your role was granted at the Resource Group level and something changed in the directory structure, it could impact what you can access.
Your company might have Conditional Access Policies that apply differently to Guest and Member users. This could be affecting your access.

 

To help resolve this issue, please follow these steps:

In the Azure Portal, navigate to App Service Plans, select the relevant plan, go to Access Control (IAM) > Role Assignments, and confirm that your Contributor role is assigned at the correct level (Subscription, Resource Group, or Resource).

Ask an Owner or Administrator to remove and re-add your Contributor role at the same level as before, then sign out and back in to refresh your access.

Try using Incognito mode or a different browser, and if you have access, run az login in Azure CLI to verify your roles with az role assignment list --assignee <your-email>.

Ask your IT admin to review Conditional Access policies that may have restricted your access after the role switch.

 
Please do let us know if still issue persists, would be happy to assist you.
If you found this information helpful, please do not forget to accept this answer.