Additional Microsoft Entra services and features related to identity, access, and network security
Error AADSTS50105 means the user isn’t assigned to a role on the enterprise application, or the app is configured to require assignment and the user doesn’t meet that requirement.
Because there’s no admin access to add users or groups to the app, the next steps are:
- Identify who can manage the app
- The application must be managed by someone with at least the Cloud Application Administrator (or similar) role in Microsoft Entra ID.
- Contact the organization’s Microsoft 365/Entra administrator or helpdesk and share the full error, including
AADSTS50105and the app name.
- Ask the admin to assign the affected users/groups
The admin should:
- Sign in to the Microsoft Entra admin center with appropriate admin rights.
- Go to Entra ID > Enterprise apps > All applications.
- Select the enterprise application showing AADSTS50105.
- Select Users and groups > Add user/group.
- Select the required Users and groups and then Select a role (or use Default Access if no custom roles exist).
- Click Assign.
- If the app is configured as “assignment required”
- If the app has user assignment required enabled, only assigned users can sign in. The admin must either:
- Assign each affected user or a group containing them, or
- Turn off “assignment required” if appropriate for the organization’s access policy.
- If the app has user assignment required enabled, only assigned users can sign in. The admin must either:
- If this is Azure Files / SMB scenario
- For Azure Files identity-based auth, the admin should not enable “Assignment required for Microsoft Entra application” on the storage account’s enterprise application, because entitlements are not included in the Kerberos ticket and this can also cause AADSTS50105.
Without admin rights, the only way to resolve AADSTS50105 is to have an appropriate Entra administrator adjust assignments or app settings on your behalf.
References: