Insufficient privilege to my FTE Visual Studio Enterprise Subscription after tenant re-authenticated

Yong Tan 40 Reputation points Microsoft Employee
2026-06-08T01:55:23.3666667+00:00

My personal tenant for my FTE Visual Studio Enterprise Subscription.

It was de-authed for a period and re-authed today, I'm able to login but NOT able to create any resource, even create support ticket

TenantId: 

Microsoft Security | Microsoft Entra | Microsoft Entra ID
Answer accepted by question author
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator
2026-06-08T08:53:01.13+00:00

Yong Tan

There are two separate permission systems involved:
Permission Type Scope What you currently have
Microsoft Entra ID role (Global Administrator) Tenant / Directory Yes
Azure RBAC role (Owner/Contributor on subscription) Azure Subscription Missing

Global Administrator alone does not automatically inherit subscription ownership unless:

  • the subscription was originally created by that account, OR
  • an RBAC role assignment still exists.

After re-authentication, the RBAC binding appears to have been lost.

Resolution:-

Step 1 — Elevate Global Admin to access Azure subscriptions

Since you are Global Administrator, you can restore access yourself using the “Access management for Azure resources” feature.

Do this:

Sign in to Azure portal

Go to: ``Microsoft Entra ID → Properties

Find:

Access management for Azure resources

Turn it to: Yes

This grants the Global Administrator temporary User Access Administrator rights at the root scope (/) in Azure RBAC.

Microsoft Docs:

https://learn.microsoft.com/en-us/azure/role-based-access-control/elevate-access-global-admin?tabs=azure-portal%2Centra-audit-logs

Was this answer helpful?

1 person found this answer helpful.
0 comments

0 additional answers

Sort by: Oldest
Most helpful Newest Oldest

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.