Azure Active Directory-新门户中的访问被拒绝 [英] Azure Active Directory - Access Denied in New Portal

问题描述

使用旧的Azure门户，我可以导航到Azure Active Directory.但是在新的门户网站"Portal.Azure.com"中，我看到了访问被拒绝"错误消息.

Using old azure portal, I am able to navigate to Azure Active Directory. But with the new portal 'Portal.Azure.com', I am seeing 'Access Denied' error message.

这是我在门户网站中看到的以下确切消息.

This is the below exact message I am seeing in the portal.

"访问被拒绝. 您没有访问权限 您似乎无权访问此内容.要获取访问权限，请与所有者联系."

"Access denied. You do not have access Looks like you don't have access to this content. To get access, please contact the owner."

推荐答案

如果使用外部帐户访问Azure AD，例如MSA帐户(例如Outlook.com，hotmail.com)以及来自其他Azure AD的帐户租户.您可能会遇到以下错误消息.

If you use the external account to access Azure AD, such as MSA account(e.g. outlook.com, hotmail.com), and the account from other Azure AD tenant. You may experience the error message as below.

有两种方法可以解决此问题.

There are two methods to resolve this issue.

方法1

使用具有Azure AD全局管理员权限的帐户登录到新的Azure Portal.导航到 Azure Active Directory 扩展名，从用户设置标签中，将来宾用户权限受限设置切换为否.

Log in to new Azure Portal by using the account with Global Administrator permission for Azure AD. Navigate to the Azure Active Directory extension, from the User settings tab, toggle the setting Guest users permissions are limited to No.

方法2

使用具有Azure AD全局管理员权限的帐户登录到新的Azure门户.从用户和组选项卡导航到 Azure Active Directory 扩展名，搜索外部帐户，然后将目录角色更改为 Global Administrator

Log in to new Azure Portal by using the account with Global Administrator permission for Azure AD. Navigate to the Azure Active Directory extension, from the Users and Groups tab, search for the external account, and change the Directory Role to Global Administrator.

这篇关于Azure Active Directory-新门户中的访问被拒绝的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！