This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(12.8, 3%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
In 2021, I created a Microsoft account (personal account, not an organization account) and was able to access the "Azure Active Directory".
But now, when I try to access "Azure Active Directory", I get a "You do not have access" message.
This is happening not only with my account, but also with the accounts of people I know.
Is it possible that my personal account no longer has access to the "Azure Active Directory"?
Can you please tell me why I can no longer access it and how I can get it back?
(I am an iOS app developer. I am using the OneDrive API from my iOS app and need access to "Azure Active Directory" to configure it.)
----------
The portal is having issues getting an authentication token. The experience rendered may be degraded.
Additional information from the call to get a token:
Extension: Microsoft_AAD_IAM
Resource: self
Details: The logged in user is not authorized to fetch tokens for extension 'Microsoft_AAD_IAM' because the user account is not a member of tenant 'XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX'. Error details: AADSTS50020: User account '{EmailHidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application 'XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX'(Azure Portal) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account.
I probably found the cause and the solution.
I needed to create an Azure account.
https://azure.microsoft.com/free/
Previously, with just a Microsoft account I had access to Azure Active Directory. But now it seems that I cannot access Azure Active Directory without an Azure account.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 81%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMT%3C/text%3E%3C/svg%3E)
Hi @ay ,
You should be able to access the Azure Active Directory tenant with a personal Microsoft email if you are a member of that tenant, but you are correct that you do need to have an Azure account with an active subscription to create a tenant. Ref: the Work and school accounts and Prerequisites sections of the tenant creation Quickstart.
I'm glad that you were able to get your issue resolved and let us know if you have further questions!
It sounds like you might have an active session that uses a personal account. So, open a new in-private browser session (in cognito window)and try again.
----------
--please don't forget to upvote and Accept as answer if the reply is helpful--
Thank you for your response. However, when I try in a private browser session, the result is still the same: no access.
Hi @ay
Thank you for asking this question on the **Microsoft Q&A Platform. **
It looks like some Azure AD Administrator change the configurations for your Azure AD.
They must allow external users on your Azure AD
More Info: Configure external collaboration settings
Hope this helps,
Carlos Solís Salazar
----------
Accept Answer and Upvote, if any of the above helped, this thread can help others in the community looking for remediation for similar issues.
NOTE: To answer you as quickly as possible, please mention me in your reply.
@Carlos Solís Salazar Thank you for your answer.
I believe I am using a personal account, not an organizational account. who is the Azure AD administrator? Is it not me?
(I belong to an organization and I created a Microsoft account with the organization domain email address, however I believe the Microsoft account I created is not an organization account)
I looked at the web page you provided. In the instructions there is a section to access "Azure Active Directory", but I can't access it with my account. I get the same error as the original question.
Hi @ay it looks like you are trying to access a different tenant.
Try to access https://aad.portal.azure.com/ from an incognito window.
Let me know the result.
@Carlos Solís Salazar Thank you for the reply.
Accessing https://aad.portal.azure.com/ from the incognito window does not seem to solve the problem.
Because I have never created a tenant and do not seem to have a tenant.
However, your answer was a great clue and helped me solve the problem. I have just answered myself.
Hi @ay , glad the above response helped in answering your query. Accept Answer and Upvote, so others visiting the forum with the same query might get help.
NOTE: To answer you as quickly as possible, please mention me in your reply.
For future reference for other users, you must have an Azure account with a subscription in order to create a tenant. Different subscription types offer different features, as referenced here.