I can login to my Azure Account but I keep getting an error message and it's preventing me to do anything further

Em 0 Reputation points
2026-07-08T01:49:16.67+00:00

I tried to login several times using the only account we've registered in Azure, but I cant proceed further after logging in and in homepage. I keep getting this error:

{   "sessionId": "894ba57165cd42dc9dc80636c014390c",   "errors": [     {       "errorMessage": "interaction_required: AADSTS16000: User account '{EUII Hidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application 'c44b4083-3bb0-49c1-b47d-974e53cbdf3c'(Azure Portal) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: c2d516ea-1198-4e2e-89c3-6b4de91b0200 Correlation ID: 7f9cd69d-3bfb-4dc7-b93c-b03d6581b94c Timestamp: 2026-07-01 08:23:28Z",       "clientId": "c44b4083-3bb0-49c1-b47d-974e53cbdf3c",       "scopes": [         "2086cb78-e8e8-4df3-9f9d-a03079825584/.default"       ]     }   ] }

what's the best next step from here as I can't also create a ticket using my account. I also dont have any other user account other than the one I've used to log in.

Azure | Azure ISV (Independent Software Vendor)

1 answer

Sort by: Newest
  1. Christos Panagiotidis 3,551 Reputation points
    2026-07-17T09:14:42.5266667+00:00

    This error indicates a tenant mismatch, not an incorrect password. The portal is requesting access in the “Microsoft Services” tenant, while the account is authenticating as a personal live.com identity that has no user object there.

    Start with a clean session: sign out of all Microsoft accounts or use an InPrivate window. Sign in with the business work/school account that owns the Azure subscription, rather than a personal Microsoft account with a similar address. In the portal, open Settings > Directories + subscriptions > All directories, switch to the organization tenant containing the subscription, and set it as the startup directory. Check that subscription filters are not hiding the subscription.

    If the personal Microsoft account is the intended identity, an administrator in the target tenant must invite that exact address as an external user in Microsoft Entra ID. The user must redeem the invitation, and the administrator must then assign the required Azure RBAC role. An invitation alone does not grant access to resources.

    If the correct tenant is absent and no other administrator exists, clearing browser data will not restore access. This is a tenant/admin-access recovery case. Contact Microsoft support from a separate working Azure account and provide the tenant domain or ID, subscription ID, affected sign-in, timestamp, correlation ID, and trace ID. Avoid posting those identifiers publicly.

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.