What autorisation do I need to see all support requests of my organisation
Pls advice what autorisation I need to see all support requests that are posted on behalf of my company. At this moment I can only see my own support requests and not the ones posted by my colleagues. Thnxz.
Getting error while creating a resource group in Azure for Students account
I am facing an error while creating an azure app service or creating a resource group. I am using a student account. Below is the screenshot of the error that I am getting while creating a resource group (Some of the details are hidden because I…
Problem: Azure Backup with Disk Encryption and Key Vault Permissions (RBAC)
I’m trying to back up a virtual machine with disk encryption (both OS and data disks) using Recovery Services Vault in Azure. The key used for disk encryption is stored in Azure Key Vault, and I'm using RBAC (Role-Based Access Control) for access…
Role to manage auto-shutdown of VM
We are encountering an issue where a user with appropriate roles and permissions is unable to manage the auto-shutdown feature for Azure Virtual Machines (VMs). Despite assigning the built-in DevTest Labs User role and attempting several combinations of…
How to delete all Azure Active Directory or Microsoft Entra ID
Hello I`m newbie in microsoft administration so I got one test account related with my workplace and other accounts directly related with me. I dont need that account so to avoid a dead end I want to delete it. Could you delete my Azure Active Directory…
Set up as Workspace Owner and Data Scientist role, but cannot create notebooks/write files
I just set up a Workspace under my Subscription, and am the Owner on both. I'm trying to work in Azure ML in this Workspace, where I have a Azure ML Data Scientist role for myself as well, and keep getting this message when I try to create a new…
Unable to get email alert for PIM role activation
Hello, we used to receive emails from Microsoft Azure for the PIM roles activation but It just stopped. Nothing changed just we are no longer receiving emails for role activation. Can you please help me with this? Thanks!
What is the API needed permission in order to assign a role to a user (in entraId)
I'm doing a call to this endpoint (@POST): https://graph.microsoft.com/v1.0/roleManagement/directory/roleAssignments with this payload: { "@odata.type": "#microsoft.graph.unifiedRoleAssignment", "roleDefinitionId":…
What API permission do I need in order to assign role to a user
I'm doing a (@POST) request the role assignment endpoint https://graph.microsoft.com/v1.0/roleManagement/directory/roleAssignments with this payload: { "@odata.type": "#microsoft.graph.unifiedRoleAssignment", …
Accepting Recommendations on Access Review for Entra ID Access Packages Throws an Error
I am an Entra ID Access Package Reviewer. Usually, I just accept recommendations but recently, I have been getting this error message: Error: Exception of type…
How to authorize Entra ID apps as “apps” instead of “service principals
I registered my app through “Entra ID” for integration with New Relic. I granted the apps registered with the subscriptions to be viewed. Then, in the access control list, it was registered as a “service principal” instead of an “app”. How can I register…
What Azure role assignments would i need to allow a dba permissions to manage Azure SQL resources including storage accounts?
I am looking at assigning role assignments to a DBA to manage Azure SQL resources from the Azure Portal including managing a specific storage account. Currently, the permissions are set as follows: Contributor Reader SQL Security Manager …
How to give full Azure admin access to my CTO
Hi, I am having trouble giving my CTO full access to everything in Azure, which results in random situations where I am personally required to sign in just to change a setting. We have already tried giving ownership permissions everywhere we find them,…
Infiinte Loop MFA
I just got a new iPhone, and my authenticator app does not have my previous accounts stored. I am receiving a request to sign in with the Auth App, but when I click "I can't use my Microsoft Authenticator app right now," it just keeps looping…
How to Grant Precise Access Control Rights for viewing Azure Front Door Reports?
It appears that enabling a user with precise Access Control permissions, specifically tailored to viewing Reports and Security Reports for Azure Front Door, may not be achievable or, at the very least, is not well-documented. Even after granting them the…
I need to reactivate an account that was disabled on August 15 to recover documents...
We are a company with enough subscriptions and a domain. I need to reactivate an account that was disabled on August 15th to recover documents.
What does the "Microsoft.Authorization/elevateAccess/action" role actually do? A sub permission of the User Access Administistrator Azure resource role
I've got some questions relating to the User Access Administrator Azure resource role. Because it grants Microsoft.Authorization/*, it means that Microsoft.Authorization/elevateAccess/action is a part of that permission set. That permission is defined…
Exporting Management Groups with Role Assignment(IAM)
Is it possible to generate a report via PowerShell on all Management Groups and Subscriptions with all role assignment permissions details.
PIM: How to set approvers in Role Management Policy approval rule for "Require approval to activate" possibility in PIM role settings by Powershell using Update-AzRoleManagementPolicy command?
Hello everyone, I need to configure "RoleManagementPolicyApprovalRule" rule for updating role management policy on resource group scope for Contributor role in PIM settings automatically from Powershell code. I'm following this documentation…
Why does "Key Vault Certificate User" role have permissions to read keys and secrets as well?
Key Vault Built-In Role Assignment "Key Vault Certificate User" has permissions to read keys and secrets as well. Note that the more privileged role "Key Vault Certificates Officer" on the other hand doesn't have permissions to read…