Entra Private Network Connector requiring GA account to install?

Question

when installing the Microsoft Entra Private Network Connector with an account that has the "Application Manager" role applied, the connector install fails with the error:

Connector Registration failed: Make sure you are a Global Administrator of your Active Directory to register the Connector. Error: "the registration request was denied. details: User is unauthorized"

the GA role has to be applied to the account in order to have the connector register properly. currently the documentation states that only Application Administrator is needed.

Answer 1

Hello @Cam Fisher,

Thank you for posting your query on Microsoft Q&A.

Based on the error message, it appears that the user account used during the installation does not have the required active role assignment in Entra.

In my testing, and as confirmed by the documentation, the minimum role required is Application Administrator. I successfully installed the Microsoft Entra Private Network Connector using a user account with an active Application Administrator role assignment (not an eligible assignment). However, when I attempted the installation with a non-privileged user account, I encountered the same error message you described.

I recommend verifying the user's role assignment in Entra once again. Ensure that the Application Administrator role assignment is active, as this is crucial for successful installation.

Please refer to the screenshot below for clarity.

https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-configure-connectors

I hope this information is helpful. Please feel free to reach out if you have any further questions.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Thanks,
Raja Pothuraju.