I donot have Admin access to "add user" to the Enterprise application

87200005 0 Reputation points
2026-03-27T12:53:41.7866667+00:00

Few of the users are not able to access the enterprise application, receiving Error Code: AADSTS50105.

We dont have admin rights to add users to the application. How to proceed here?

Microsoft Security | Microsoft Entra | Other
0 comments No comments

1 answer

Sort by: Newest
  1. AI answer

    2026-03-27T12:54:00.0633333+00:00

    Error AADSTS50105 means the user isn’t assigned to a role on the enterprise application, or the app is configured to require assignment and the user doesn’t meet that requirement.

    Because there’s no admin access to add users or groups to the app, the next steps are:

    1. Identify who can manage the app
      • The application must be managed by someone with at least the Cloud Application Administrator (or similar) role in Microsoft Entra ID.
      • Contact the organization’s Microsoft 365/Entra administrator or helpdesk and share the full error, including AADSTS50105 and the app name.
    2. Ask the admin to assign the affected users/groups The admin should:
      1. Sign in to the Microsoft Entra admin center with appropriate admin rights.
      2. Go to Entra ID > Enterprise apps > All applications.
      3. Select the enterprise application showing AADSTS50105.
      4. Select Users and groups > Add user/group.
      5. Select the required Users and groups and then Select a role (or use Default Access if no custom roles exist).
      6. Click Assign.
    3. If the app is configured as “assignment required”
      • If the app has user assignment required enabled, only assigned users can sign in. The admin must either:
        • Assign each affected user or a group containing them, or
        • Turn off “assignment required” if appropriate for the organization’s access policy.
    4. If this is Azure Files / SMB scenario
      • For Azure Files identity-based auth, the admin should not enable “Assignment required for Microsoft Entra application” on the storage account’s enterprise application, because entitlements are not included in the Kerberos ticket and this can also cause AADSTS50105.

    Without admin rights, the only way to resolve AADSTS50105 is to have an appropriate Entra administrator adjust assignments or app settings on your behalf.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.