You don't have access to this Your sign-in was successful but does not meet the criteria to access this resource.

Question

You don't have access to this Your sign-in was successful but does not meet the criteria to access this resource.

Raul Alvarez 0 Microsoft Employee

alvarezraul@microsoft.com

You don't have access to this

Your sign-in was successful but does not meet the criteria to access this resource. For example, you might be signing in from a browser, app, location, or an authentication flow that is restricted by your admin.

Error Code: 53003

Request Id: b52bd7f4-90cf-42fd-89b5-f3aae8084300

Correlation Id: 3ceac3c8-c2fd-4fad-98c6-20e440a68cc5

Timestamp: 2026-05-11T14:12:34.989Z

App name: Microsoft Azure CLI

App id: 04b07795-8ddb-461a-bbee-02f9e1bf7b46

IP address: 4.151.48.133

Device identifier: acae0760-1db7-42ab-9550-4243bd86a30e

Device platform: Windows 10

Device state: Compliant

Ajas Saif 165 Reputation points

2026-05-11T14:16:07.44+00:00
Hi Raul,

Error Code 53003 usually indicates a Conditional Access policy block in Microsoft Entra ID. Your sign-in succeeded, but access to the resource was denied because one of the access conditions was not met.

Most common causes:

Restricted network/location

Unsupported browser or authentication flow

Device not fully compliant in Intune

Azure CLI blocked by Conditional Access

Missing MFA or required sign-in strength

Recommended checks:

Review the sign-in logs in Entra ID: https://entra.microsoft.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/SignIns

Check Conditional Access policies targeting:

Microsoft Azure CLI

User/group assignments

Location restrictions

Device compliance requirements

Try:

Re-authenticating with MFA

Using an InPrivate browser session

Updating Azure CLI

Signing in from a compliant corporate network/VPN

Validate device compliance in Intune: https://intune.microsoft.com

Microsoft documentation for 53003: https://learn.microsoft.com/entra/identity/conditional-access/troubleshoot-conditional-access

The Sign-in Logs “Conditional Access” tab will normally show the exact policy causing the block.
VEMULA SRISAI 13,900 Reputation points Microsoft External Staff Moderator

2026-05-11T14:37:37.1133333+00:00

Hello Raul Alvarez,

The error 53003 indicates that your sign‑in to Microsoft Azure CLI was successful, but access was blocked by a Conditional Access policy in the tenant. This usually happens when the policy restricts certain authentication methods, client apps (like CLI/public clients), locations, or requires MFA in a way that the current CLI sign‑in flow does not satisfy.

Please review the Conditional Access policies applied to your account—specifically those targeting Microsoft Azure CLI or All Cloud Apps—and check the sign‑in logs to identify the exact policy causing the block. This is a policy‑level restriction and would need to be adjusted by the tenant administrator.

Your answer

Ajas Saif 165 Reputation points

2026-05-11T14:16:07.44+00:00

Hi Raul,

Error Code 53003 usually indicates a Conditional Access policy block in Microsoft Entra ID. Your sign-in succeeded, but access to the resource was denied because one of the access conditions was not met.

Most common causes:

Restricted network/location

Unsupported browser or authentication flow

Device not fully compliant in Intune

Azure CLI blocked by Conditional Access

Missing MFA or required sign-in strength

Recommended checks:

Review the sign-in logs in Entra ID: https://entra.microsoft.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/SignIns

Check Conditional Access policies targeting:

Microsoft Azure CLI

User/group assignments

Location restrictions

Device compliance requirements

Try:

Re-authenticating with MFA

Using an InPrivate browser session

Updating Azure CLI

Signing in from a compliant corporate network/VPN

Validate device compliance in Intune: https://intune.microsoft.com

Microsoft documentation for 53003: https://learn.microsoft.com/entra/identity/conditional-access/troubleshoot-conditional-access

The Sign-in Logs “Conditional Access” tab will normally show the exact policy causing the block.
VEMULA SRISAI 13,900 Reputation points Microsoft External Staff Moderator

2026-05-11T14:37:37.1133333+00:00

Hello Raul Alvarez,

The error 53003 indicates that your sign‑in to Microsoft Azure CLI was successful, but access was blocked by a Conditional Access policy in the tenant. This usually happens when the policy restricts certain authentication methods, client apps (like CLI/public clients), locations, or requires MFA in a way that the current CLI sign‑in flow does not satisfy.

Please review the Conditional Access policies applied to your account—specifically those targeting Microsoft Azure CLI or All Cloud Apps—and check the sign‑in logs to identify the exact policy causing the block. This is a policy‑level restriction and would need to be adjusted by the tenant administrator.