Azure Active Directory - 新门户中的访问被拒绝 [英] Azure Active Directory - Access Denied in New Portal

问题描述

使用旧的 azure 门户，我能够导航到 Azure Active Directory.但使用新门户Portal.Azure.com"时，我看到拒绝访问"错误消息.

Using old azure portal, I am able to navigate to Azure Active Directory. But with the new portal 'Portal.Azure.com', I am seeing 'Access Denied' error message.

这是我在门户中看到的以下确切消息.

This is the below exact message I am seeing in the portal.

"访问被拒绝.您无权访问您似乎无权访问此内容.要获得访问权限，请联系所有者."

推荐答案

如果使用外部账号访问Azure AD，如MSA账号(如outlook.com、hotmail.com)，以及来自其他Azure AD的账号租户.您可能会遇到如下错误消息.

If you use the external account to access Azure AD, such as MSA account(e.g. outlook.com, hotmail.com), and the account from other Azure AD tenant. You may experience the error message as below.

有两种方法可以解决此问题.

There are two methods to resolve this issue.

方法一

使用具有 Azure AD 全局管理员权限的帐户登录到新的 Azure 门户.导航到 Azure Active Directory 扩展，从 用户设置 选项卡，将设置 Guest users permissions are limited 切换为 No.

Log in to new Azure Portal by using the account with Global Administrator permission for Azure AD. Navigate to the Azure Active Directory extension, from the User settings tab, toggle the setting Guest users permissions are limited to No.

方法二

使用具有 Azure AD 全局管理员权限的帐户登录到新的 Azure 门户.从 用户和组 选项卡导航到 Azure Active Directory 扩展，搜索外部帐户，并将目录角色更改为 全局管理员.

Log in to new Azure Portal by using the account with Global Administrator permission for Azure AD. Navigate to the Azure Active Directory extension, from the Users and Groups tab, search for the external account, and change the Directory Role to Global Administrator.

这篇关于Azure Active Directory - 新门户中的访问被拒绝的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！