question

SecHax-5650 avatar image
1 Vote"
SecHax-5650 asked SudarshanRamakrishnan-9039 edited

Lab Sandbox Not Allowing Access to Azure AD

I've been working in the learn sandbox for two weeks now with no problems. However, today is completely different. I am trying to complete this Exercise - Assign users to Azure Active Directory groups. I activated the sandbox and went through the permissions part, but it denies me access when I login and try to get to Azure AD. I've signed out and back in again and cleared cache in browsers but nothing seems to work. Any ideas?

azure-active-directory
· 11
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Has this issue been fixed ?

83289-image.png


1 Vote 1 ·
image.png (29.5 KiB)

Are you trying to logon using a Microsoft Account (outlook.com , hotmail.com , live ID) or you are trying using a work account ? I tried the tutorial that you referenced https://docs.microsoft.com/en-us/learn/modules/create-users-and-groups-in-azure-active-directory/5-exercise-assign-users-azure-ad-groups using my work account which was used to signup for MS learn and yes I am unable to get the sandbox working. I have reached out to the internal team and we will update you as soon as we have information on this.

Thank you.

0 Votes 0 ·

I am seeing the same error message despite repeated attempts.

0 Votes 0 ·

03/02/2021 Issue still persists.

0 Votes 0 ·

Issue persists

0 Votes 0 ·
Show more comments
IgorSuchilov-5549 avatar image
0 Votes"
IgorSuchilov-5549 answered

Getting the same error for the same exercise
https://docs.microsoft.com/en-us/learn/modules/secure-app-with-oidc-and-azure-ad/4-exercise-create-aad-register-app


I tried this myself and it is working without any issue.

Brilliant answer, it's classic!
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ChuksAguocha-6570 avatar image
0 Votes"
ChuksAguocha-6570 answered

I need to activate the sandbox to proceed beyond this stage. please help

https://docs.microsoft.com/en-gb/learn/modules/azure-architecture-fundamentals/exercise-create-website

I am getting the access denied error.72202-learning-module-login-access-denied.png



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RyanPadilla-4863 avatar image
0 Votes"
RyanPadilla-4863 answered

I'm getting the same issue when doing the "Assign users to Azure Active Directory groups" exercise. Haaaalp!


73080-image.png



image.png (62.9 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

andresg avatar image
1 Vote"
andresg answered
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SylvainM-0272 avatar image
0 Votes"
SylvainM-0272 answered SylvainM-0272 edited

Hi, i'm also blocked on "Exercise - Add and delete users in Azure Active Directory". I activate the Sandbox and when trying to create a ressources "Azure Active Directory" i have this error message : "Failed to create Contoso Marketing Company tenant. Error detail: Unable to complete due to service connection error. Please try again later."...
Any ideas ?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LuisFernandoOchoaRobles-1662 avatar image
0 Votes"
LuisFernandoOchoaRobles-1662 answered

Here still the error, moving forward but no clue why is failing even with different sandbox and different day.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Alex-2850 avatar image
0 Votes"
Alex-2850 answered

Hi Everyone, I have just had same issue as well 1/7/2021. Attempted to do exercise after opening up sandbox as per Exercise - Add and delete users in Azure Active Directory. Not able to open the Azure. { "shellProps": { "sessionId": "f68e437852914f3c89ef12bca136e22d", "extName": "Microsoft_AAD_IAM", "contentName": "ActiveDirectoryMenuBlade", "code": 403 }, "error": { "message": "No access", "code": 403 }}. I sent on my screendumps to the Microsoft team. cant really complete the exercise.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SusmithaVemala-9336 avatar image
0 Votes"
SusmithaVemala-9336 answered

Even i am facing the same issue when trying to do Azure AD exercise .113362-sandbox.png



sandbox.png (24.8 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

patrikhorn avatar image
0 Votes"
patrikhorn answered

Same error

Error Details:
{ "shellProps": { "sessionId": "b7382ae0db534ed6adb5ebff765b98eb", "extName": "Microsoft_AAD_IAM", "contentName": "ActiveDirectoryMenuBlade", "code": 403 }, "error": { "message": "Kein Zugriff", "code": 403 }}

Exercise:
https://docs.microsoft.com/de-de/learn/modules/create-users-and-groups-in-azure-active-directory/5-exercise-assign-users-azure-ad-groups

Account:
Outlook.com

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LILYWANG-6082 avatar image
2 Votes"
LILYWANG-6082 answered SivaRamakrishnan-1041 commented

Hi all

I found out how to resolve this issue.

First at portal.azure.com, open azure shell

then input command :

az account list

it would return as below and including tenantId

xxx@Azure:~$ az account list
[
{
"cloudName": "AzureCloud",
"homeTenantId": "XXX",
"id": "XXX",
"isDefault": true,
"managedByTenants": [],
"name": "Concierge Subscription",
"state": "Enabled",
"tenantId": "XXX",
"user": {
"cloudShellID": true,
"name": "live.com#xxx@hotmail.com",
"type": "user"
}
}

login with your tenantId

.\azcopy.exe login --tenant-id xxx


at the browser open the link and sign in your microsoft email, now you will able to login.

Thanks!

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Please elaborate your solution.

When you say "First at portal.azure.com, open azure shell" are you talking about login in with the sandbox account, in which case, Azure doesn't allow you to create a storage account to access the shell.( The client XXX does not have authorization to perform action).

Sorry If I don't get the solution but honestly I feel it is not possible to access Active Directory from SANDBOX.

I am not sure if Microsoft managed to find a solution for this in some other thread but I am disappointed they still haven't got a feedback for us here.

0 Votes 0 ·