User not able to connect to to Azure VM thro Bastion

Question

Hi,

Me and my counterpart are able to connect to Azure VMs thro Bastion Basic plan. We do this on daily basis with no issues

However there is another third user who is required to connect to VMs once in a month. His account has the required RBAC assignments for the bastion service and the VMs. But when he tries to connect thro Bastion, he is getting the error Unauthorized Data Error: data set DataCache:2:2.

I set up temporary account and tried it from my laptop. It was a same with the temporary account as well.

I checked if there are any sessions in Bastion but there are none

Is bastion access based on named users?. I read it as being similar to concurrent licensing

What can I do to get the third user to access VMs thro Bastion Basic.

Regards,

Rama

Answer 1

The user probably doesn't have the correct permissions to access the Bastion host. Here's an article detailing the minimum permissions to access a VM using Bastion.

• Reader role on the target VM.
• Reader role on the network interface (NIC) with private IP of the VM.
• Reader role on the Azure Bastion resource.

https://wmatthyssen.com/2022/07/12/azure-bastion-set-the-minimum-required-roles-to-access-a-virtual-machine/

Answer 2

Hi Bryan,

You steps did the trick. Many thanks for that.

I have marked it as accepted answer.

Regards,

Rama