Can't access Azure

Question

Can't access Azure

Sidharth Ramesh 0

{
  "sessionId": "548be60545b44900ade075d0378ddea5",
  "errors": [
    {
      "errorMessage": "interaction_required: AADSTS16000: User account '{EUII Hidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application 'e6694c91-1590-4e35-9bb7-b865c638b9c1'(Microsoft_Azure_SupportPortalExtension) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: 7c6a2c7d-7d2f-4db1-9213-47e29cb93300 Correlation ID: 7d9a5a27-b8f6-4920-8a79-4bfbfa96939f Timestamp: 2025-08-01 15:17:56Z",
      "clientId": "e6694c91-1590-4e35-9bb7-b865c638b9c1",
      "scopes": [
        "959678cf-d004-4c22-82a6-d2ce549a58b8/.default"
      ]
    }
  ]
}

I keep getting this error when I log into Azure. How can I get back in?

I'm the owner of medblocks.com - however, there's some issue with the tenancy.

2 answers

Your answer

Answer 1

Divyesh Govaerdhanan 8,340

Hello,

Welcome to Microsoft Q&A,

Error AADSTS16000 is thrown when the user is not found in the tenant used for authentication. In your case, this error typically occurs when you sign in to the Azure Portal using your personal account, which is not added as an external/guest user to an Azure AD tenant. As a result, you are automatically connected to the Microsoft Services tenant.

Since you are connected to the Microsoft Services tenant as a standard user with restricted access, you cannot perform actions.

In some cases, the user might already have an active session that uses a different personal account than the one that's intended to be used. Or they have a session that uses their organization account, although they intended to use a personal guest account (or vice versa).

In that scenario, try signing in to the Azure Portal trough a tenant-specific URL using the following format:

https://portal.azure.com/<tenant domain name>

Eg.

https://portal.azure.com/constoso.onmicrosoft.com

Also, please try to clear the cache or incognito window to see if there's no issue.

Please Upvote and accept the answer if it helps!!

Rupesh Asati 0 Reputation points Microsoft External Staff Moderator

2025-08-06T14:36:54.38+00:00
Hello Sidharth Ramesh

Thanks for reaching out to Microsoft Q&A

Your Microsoft personal account (from live.com, e.g., @outlook.com or @hotmail.com) does not exist as a user in the Azure Active Directory (AAD) tenant ("Microsoft Services") that owns the application or resources you're trying to access

Microsoft Entra ID (Azure AD) treats AAD and personal Microsoft accounts as completely separate identities.

Unless your personal account has been invited as a "guest user" to the right tenant, you cannot access resources in that tenant.

Step-by-Step Solution -
Identify and switch to the correct tenant

In the Azure portal, click your account avatar (top-right) → Switch directory → select the directory named for your organization (medblocks.com).

If you don’t see it, you’re not yet a member of that tenant.

Invite your MSA into the medblocks.com tenant

Ask an existing Azure AD Global Administrator for medblocks.com to add your personal account as a guest: – In that tenant’s Azure AD blade → Users → + New guest user → enter your MSA email → Invite. – Once invited, accept the email invitation and then you’ll appear in Switch directory.

Use a work or managed identity instead

For day-to-day Azure management, create a real work account (e.g. ******@medblocks.com) in your Azure AD tenant.

Assign it Owner or Contributor roles on the subscription.

Sign in with that account rather than your personal MSA.

Clear cached sign-in data

Sign out of all Microsoft/Office/Azure sessions in your browser.

Clear cookies/cache for *.microsoftonline.com and *.azure.com.

Close and reopen the browser before signing in again.

Directly target your tenant in CLI or PowerShell

Connect-AzAccount -TenantId "<your-tenant-ID>"

Replace <your-tenant-ID> with your medblocks.com directory’s GUID.
Divyesh Govaerdhanan 8,340 Reputation points

2025-08-06T23:53:27.45+00:00

Hi Sidharth Ramesh,

Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Answer 2

Hello Sidharth Ramesh,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

The AADSTS16000 error typically appears when attempting to sign in to the Microsoft Entra admin center using a personal Microsoft account that isn’t associated with an Azure Active Directory (AAD) tenant.

When you log in with a personal Microsoft account, you're automatically connected to the Microsoft Services tenant, which is a default tenant without a dedicated directory. Since this tenant doesn't allow directory-level administrative actions like creating users, groups, or enterprise apps, you'll be limited in what you can do unless you're part of a valid Azure AD tenant.

Solution: To manage users and access full directory capabilities, you’ll need to work within an Azure tenant where you have administrative rights. Here’s how to proceed:

Option 1: Create your own tenant Use an incognito/private browser session to avoid automatic sign-ins via SSO. Then head to https://azure.microsoft.com/en-us/free/ to set up a free Azure account. Once done, create a new tenant, this will make you the Global Administrator of that tenant, giving you full control.
Option 2: Use your personal Microsoft account as a guest If you prefer to keep using your personal account, ask an admin from an existing tenant to invite your account as a guest user and assign you the Global Administrator role. Detailed steps are available here: https://learn.microsoft.com/en-us/entra/external-id/add-users-administrator#add-guest-users-to-the-directory After accepting the invitation, you can also visit https://portal.azure.com/#create/Microsoft.AzureActiveDirectory to create your own tenant if needed.

Let us know if you need any further clarification.

If this response helped, please click Accept Answer and select Yes under "Was this answer helpful?"

Regards,

Monalisha

Share via

Can't access Azure

2 answers

Your answer