Trying to administer B2C tenant results in "User authorization failed. You must have access to "

Question

I originally created the tenant, but now it does not show up as a tenant for me to switch to, though it does show up under the subscription that it is assigned to in my primary tenant. The co-administrator of mine that does have access to the tenant has confirmed that I'm listed as a Global Administrator, but I still can't seem to access the B2C tenant to administer users. Why would this be?

Answer 1

@KellyH-3558 Thank you for your time on call today.

As discusses, the problematic user accounts were added as consumer accounts by signing up using federated Azure Active Directory. These accounts are not supposed to be used for Administration purpose. The signed-up accounts should be used only to provide access to the application federated with B2C directory.

For administration purpose, user accounts should be added as members directly using Azure AD > New User option or by adding them as guests using Azure AD > New Guest User option.

Issue resolved by removing the signed-up user accounts and adding them as guest accounts to the B2C directory.

---

Please do not forget to "Accept the answer" wherever the information provided helps you. This will help others in the community as well.

Answer 2

Hello @BasimKadhim-1280

Could you please confirm if you are able to access B2C directory using below method:

• Type portal.azure.com in in-private or incognito browser session, which will redirect you to https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id.....
• Now replace organizations in the URL with your B2C tenant name. E.g. https://login.microsoftonline.com/yourB2Ctenant.onicrosoft.com/oauth2/v2.0/authorize?client_id.....
• Now try to login with your account and see if you are able to access the directory or not.

Alternatively, you can try signing-in to B2C directory via powershell connect-azuread -TenantId yourB2Ctenant.onicrosoft.com

This will confirm if this is a UI issue or permissions issue.

Also make sure you are looking under all directories when you try to switch directory as highlighted below:

---

Please do not forget to "Accept the answer" wherever the information provided helps you. This will help others in the community as well.