My account is the subscription owner but the portal treats it as a low-privilege guest and I get token/interaction errors (e.g. AADSTS50020 / "No subscriptions found"). How can I restore admin/owner access?

Question

My account is the subscription owner but the portal treats it as a low-privilege guest and I get token/interaction errors (e.g. AADSTS50020 / "No subscriptions found"). How can I restore admin/owner access?

Michael Vickers 0

I am the subscription owner but when I sign in the portal treats my account as a low-privilege guest and shows token/interaction errors (examples: AADSTS50020, "Interaction required", "No subscriptions found"). Because of this I cannot perform owner actions such as role assignments. How can I fix this and regain full admin/owner access?

VEMULA SRISAI 14,065 Reputation points Microsoft External Staff Moderator

2025-10-03T02:49:48.46+00:00
Hello Michael Vickers,

Thank you for posting your question in the Microsoft Q&A Forum.

The reason you're seeing errors like AADSTS50020, “Interaction required”, and “No subscriptions found” even though you're the subscription owner is because your account is being treated as a guest user in the tenant where the subscription exists. This means your identity is not fully recognized as a member of that tenant, and therefore lacks the necessary permissions to view or manage resources.

This happens when:

Your account is not properly invited or accepted as a guest in the resource tenant.

You're signing in from your home tenant, which doesn't have visibility into the subscription.

The guest user object in the resource tenant is missing required attributes or role assignments.

To restore full access and perform owner-level actions, follow these steps:

Switch to the Correct Directory

In the Azure portal, click your profile (top-right) → Switch Directory.

Select the tenant where the subscription resides.

Ensure Your Guest Account Exists and Is Active

Go to Microsoft Entra Admin Center → Users → External Users.

Confirm your guest account is listed and in Accepted state.

If not, ask someone with access to re-invite your account to the tenant.

Assign the Owner Role to Your Guest Account

Go to Azure Portal → Subscriptions → Select the subscription → Access Control (IAM).

Add a Role Assignment for your guest account with the Owner role.

Sign In Using the Correct Tenant : https://portal.azure.com/?tenant=<TenantID>

5.Clear Cached Tokens

Sign out from all Microsoft sessions.

Use an Incognito/InPrivate browser window to sign in again. For your reference: https://learn.microsoft.com/en-us/troubleshoot/entra/entra-id/app-integration/error-code-AADSTS50020-user-account-identity-provider-does-not-exist

Once these steps are completed, your account will be properly recognized in the tenant and you’ll regain full access to manage the subscription and perform owner-level actions.

Let me know if you need additional Information or further assistance.

Michael Vickers 0

{
  "sessionId": "e9f80427968045ecb090494e3c2d134b",
  "errors": [
    {
      "errorMessage": "interaction_required: AADSTS16000: User account &#39;{EUII Hidden}&#39; from identity provider &#39;live.com&#39; does not exist in tenant &#39;Microsoft Services&#39; and cannot access the application &#39;e6694c91-1590-4e35-9bb7-b865c638b9c1&#39;(Microsoft_Azure_SupportPortalExtension) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: c228a318-e968-4b44-85d3-0e0e3dbc7f00 Correlation ID: 112299c6-5886-410d-b3e8-978afe239617 Timestamp: 2025-10-03 13:06:31Z",
      "clientId": "e6694c91-1590-4e35-9bb7-b865c638b9c1",
      "scopes": [
        "959678cf-d004-4c22-82a6-d2ce549a58b8/.default"
      ]
    }
  ]
}

error i get when logging into the azure portal and no other option for the owner tenant

I cant also so mny owners directory or subscription

Your answer

Michael Vickers 0 Reputation points

2025-10-03T13:13:40.73+00:00

{ "sessionId": "e9f80427968045ecb090494e3c2d134b", "errors": [ { "errorMessage": "interaction_required: AADSTS16000: User account '{EUII Hidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application 'e6694c91-1590-4e35-9bb7-b865c638b9c1'(Microsoft_Azure_SupportPortalExtension) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: c228a318-e968-4b44-85d3-0e0e3dbc7f00 Correlation ID: 112299c6-5886-410d-b3e8-978afe239617 Timestamp: 2025-10-03 13:06:31Z", "clientId": "e6694c91-1590-4e35-9bb7-b865c638b9c1", "scopes": [ "959678cf-d004-4c22-82a6-d2ce549a58b8/.default" ] } ] }

error i get when logging into the azure portal and no other option for the owner tenant

I cant also so mny owners directory or subscription