Create Entra External ID tenant via Azure REST API with managed identity

Question

Create Entra External ID tenant via Azure REST API with managed identity

Bartosz Łągwa 0

Hello. I'm trying to create external ID tenant in Microsoft Entra using REST API (https://learn.microsoft.com/en-us/rest/api/activedirectory/ciam-tenants/create?view=rest-activedirectory-2023-05-17-preview&tabs=HTTP). The endpoint works perfectly fine, when authorizing as an user with Owner role. But it should be a step of my CI/CD pipeline so I'm trying to achieve this with authorizing as managed identity. No success there even when I've assigned the Owner role to the identity. I can't get rid of "You do not have permission to view this directory or page" error (the GET endpoint for retrieving details about existing tenants works okay). Any help appreciated.

Gudivada Adi Navya Sri 21,100 Reputation points Moderator

2024-12-06T06:22:59.9666667+00:00

Hi @Bartosz Łągwa

Thank you for posting this in Microsoft Q&A.

I understand that you are trying to create an Entra External ID tenant via the Azure REST API using a managed identity, but you are encountering the error message: "You do not have permission to view this directory or page."

To better understand the issue, could you provide more details about the error message? Does this error occur while creating the external tenant, trying to log in to the external tenant, or when viewing any options in the external tenants? Please note that external tenants are customer tenants, and customers cannot view other options unless they have global administrator roles.

Thanks,

Navya.
Givary-MSFT 35,916 Reputation points Microsoft Employee Moderator

2024-12-10T03:51:15.01+00:00

@Bartosz Łągwa Just following up to see if you can share any additional information regarding this request. If you have any updates on the issue, please don't hesitate to share them.
Gudivada Adi Navya Sri 21,100 Reputation points Moderator

2024-12-11T20:25:42.26+00:00

Hi @Bartosz Łągwa

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Scott Laing AZC 0 Reputation points

2025-10-14T21:50:33.6766667+00:00

For anyone that comes here looking for an answer, no you can only do this as a user:

Your answer

Gudivada Adi Navya Sri 21,100 Reputation points Moderator

2024-12-06T06:22:59.9666667+00:00

Hi @Bartosz Łągwa

Thank you for posting this in Microsoft Q&A.

I understand that you are trying to create an Entra External ID tenant via the Azure REST API using a managed identity, but you are encountering the error message: "You do not have permission to view this directory or page."

To better understand the issue, could you provide more details about the error message? Does this error occur while creating the external tenant, trying to log in to the external tenant, or when viewing any options in the external tenants? Please note that external tenants are customer tenants, and customers cannot view other options unless they have global administrator roles.

Thanks,

Navya.
Givary-MSFT 35,916 Reputation points Microsoft Employee Moderator

2024-12-10T03:51:15.01+00:00

@Bartosz Łągwa Just following up to see if you can share any additional information regarding this request. If you have any updates on the issue, please don't hesitate to share them.
Gudivada Adi Navya Sri 21,100 Reputation points Moderator

2024-12-11T20:25:42.26+00:00

Hi @Bartosz Łągwa

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Scott Laing AZC 0 Reputation points

2025-10-14T21:50:33.6766667+00:00

For anyone that comes here looking for an answer, no you can only do this as a user: