Azure Access error

James Murphy 0 Reputation points
2025-07-23T15:24:27.4866667+00:00

Error Code: 53003

Request Id: xxxxxxxx-xxxx-xxxx-xxxx-0f1xx...

Correlation Id: xxxxxxxx-xxxx-xxxx-xxxx-114xx...

Timestamp: 2025-07-22T13:59:40.180Z

App name: Microsoft App Access Panel

App id: 000...

IP address: 95.xx...

Device identifier: Not available

Device platform: Windows 10

Device state: Unregistered

I am having trouble with this error. I am being granted access to another Azure environment as a Guest user, so its difficult to poke around and figure out the cause. The Azure administrator who granted me access is unable to check Conditional Access policies or sign in logs (the options are greyed out). What is the likely reason here, and can anyone point me in the right direction or let me know what I should instruct the administrator to do? Thanks so much.

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Jose Benjamin Solis Nolasco 4,986 Reputation points
    2025-08-11T16:28:37.6733333+00:00

    @James Murphy I hope you are doing well,

    You are a guest User in another tenant.

    1. The admin you're working with does not have the right Azure AD role to view or modify Conditional Access policies.
      • They might be a Global Reader, User Administrator, or a role with no Conditional Access permissions.
    2. Error 53003 is triggered when:
      • The policy blocks your device (e.g., because it’s Unregistered, as your log shows).
      • The policy blocks non-compliant devices or untrusted locations.
      • The policy requires MFA or hybrid join, and you don’t meet the requirement. In Azure AD, Conditional Access and Sign-in logs require specific roles:

    Conditional Access policies → Need Security Administrator, Conditional Access Administrator, or Global Administrator.

    Sign-in logs → Need Reports Reader, Security Reader, or Global Administrator.

    If they don’t have one of these, the blades will be greyed out.

    Please review and make sure the admin has required specific roles

    😊 If my answer helped you resolve your issue, please consider marking it as the correct answer. This helps others in the community find solutions more easily. Thanks!

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.