How to authorize Entra ID apps as “apps” instead of “service principals
I registered my app through “Entra ID” for integration with New Relic. I granted the apps registered with the subscriptions to be viewed. Then, in the access control list, it was registered as a “service principal” instead of an “app”. How can I register…
Set up as Workspace Owner and Data Scientist role, but cannot create notebooks/write files
I just set up a Workspace under my Subscription, and am the Owner on both. I'm trying to work in Azure ML in this Workspace, where I have a Azure ML Data Scientist role for myself as well, and keep getting this message when I try to create a new…
Role to manage auto-shutdown of VM
We are encountering an issue where a user with appropriate roles and permissions is unable to manage the auto-shutdown feature for Azure Virtual Machines (VMs). Despite assigning the built-in DevTest Labs User role and attempting several combinations of…
What Azure role assignments would i need to allow a dba permissions to manage Azure SQL resources including storage accounts?
I am looking at assigning role assignments to a DBA to manage Azure SQL resources from the Azure Portal including managing a specific storage account. Currently, the permissions are set as follows: Contributor Reader SQL Security Manager …
What is the API needed permission in order to assign a role to a user (in entraId)
I'm doing a call to this endpoint (@POST): https://graph.microsoft.com/v1.0/roleManagement/directory/roleAssignments with this payload: { "@odata.type": "#microsoft.graph.unifiedRoleAssignment", "roleDefinitionId":…
How to give full Azure admin access to my CTO
Hi, I am having trouble giving my CTO full access to everything in Azure, which results in random situations where I am personally required to sign in just to change a setting. We have already tried giving ownership permissions everywhere we find them,…
Accepting Recommendations on Access Review for Entra ID Access Packages Throws an Error
I am an Entra ID Access Package Reviewer. Usually, I just accept recommendations but recently, I have been getting this error message: Error: Exception of type…
Im trying to configure a Azure connector on LCS but its failing
Im trying to configure a Azure connector on LCS but its failing. When I try to add "DD Dynamics Deployment Services [wsfed-enabled] (pme)" in the role assignment its not showing.
Unable to get email alert for PIM role activation
Hello, we used to receive emails from Microsoft Azure for the PIM roles activation but It just stopped. Nothing changed just we are no longer receiving emails for role activation. Can you please help me with this? Thanks!
What API permission do I need in order to assign role to a user
I'm doing a (@POST) request the role assignment endpoint https://graph.microsoft.com/v1.0/roleManagement/directory/roleAssignments with this payload: { "@odata.type": "#microsoft.graph.unifiedRoleAssignment", …
Infiinte Loop MFA
I just got a new iPhone, and my authenticator app does not have my previous accounts stored. I am receiving a request to sign in with the Auth App, but when I click "I can't use my Microsoft Authenticator app right now," it just keeps looping…
How to Grant Precise Access Control Rights for viewing Azure Front Door Reports?
It appears that enabling a user with precise Access Control permissions, specifically tailored to viewing Reports and Security Reports for Azure Front Door, may not be achievable or, at the very least, is not well-documented. Even after granting them the…
Unable to Access Log Analytics Demo (aka.ms/lademo)
Hello, I have been using the log analytics demo environment to help train for the last month for KQL. Recently, I have no idea what changed, but I have lost access the the public and free environment at "aka.ms/lademo". I have tried all…
I need to reactivate an account that was disabled on August 15 to recover documents...
We are a company with enough subscriptions and a domain. I need to reactivate an account that was disabled on August 15th to recover documents.
What does the "Microsoft.Authorization/elevateAccess/action" role actually do? A sub permission of the User Access Administistrator Azure resource role
I've got some questions relating to the User Access Administrator Azure resource role. Because it grants Microsoft.Authorization/*, it means that Microsoft.Authorization/elevateAccess/action is a part of that permission set. That permission is defined…
Exporting Management Groups with Role Assignment(IAM)
Is it possible to generate a report via PowerShell on all Management Groups and Subscriptions with all role assignment permissions details.
PIM: How to set approvers in Role Management Policy approval rule for "Require approval to activate" possibility in PIM role settings by Powershell using Update-AzRoleManagementPolicy command?
Hello everyone, I need to configure "RoleManagementPolicyApprovalRule" rule for updating role management policy on resource group scope for Contributor role in PIM settings automatically from Powershell code. I'm following this documentation…
Why does "Key Vault Certificate User" role have permissions to read keys and secrets as well?
Key Vault Built-In Role Assignment "Key Vault Certificate User" has permissions to read keys and secrets as well. Note that the more privileged role "Key Vault Certificates Officer" on the other hand doesn't have permissions to read…
Access error 403 for Synapse Analytics
When navigating to my Synapse Analytics workspace I see a popup indicating a 403 error like below. When checking my access I have both Contributor and Owner to the Resource Group. Failed to load one or more resources due to no access, error code 403. …
What Admin Role Allows Releasing Quarantined Emails?
I am looking to add permissions to an admin account that allows this admin to release quarantined emails. I do not want to give them global admin, but I have not found a admin role that allows someone to release these emails. As a global reader this user…