Unable to access Azure tenant

Damien 0 Reputation points
2025-08-10T05:16:07.1+00:00

When attempting to access my azure instance, I receive the following error.

This occurred after converting the only user in entra from an external user to an internal user.

I cannot raise a support request as I cannot access the tenant. What other options do I have for support?

Thanks for any help.

{
  "sessionId": "xxx",
  "errors": [
    {
      "errorMessage": "interaction_required: AADSTS16000: User account '{EUII Hidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application xxx;(Microsoft_AAD_UsersAndTenants) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: d510bf1d-839e-42f3-b5b8-a6978107ea00 Correlation ID: 8295fa7a-249f-4569-9363-634784977a6d Timestamp: 2025-08-10 05:03:39Z",
      "clientId": "xxx",
      "scopes": [
        "https://graph.microsoft.com//.default"
      ]
    }
  ]
}
Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes

1 answer

Sort by: Most helpful
  1. Raja Pothuraju 29,560 Reputation points Microsoft External Staff Moderator
    2025-08-13T09:34:06.1333333+00:00

    Hello Damien,

    You were unable to log in to the Azure Portal due to changes made to your user account’s internal/external status in Azure. You originally signed up for the Azure tenant using your personal Microsoft account email address (******@domain.com), which created an account in the format user123_domain#EXT#@user123domain.onmicrosoft.com. However, when you changed the account to an internal user, it was converted to @user123domain.onmicrosoft.com. As a result, whenever you tried to sign in using your original Personal Microsoft account email address (@domain.com), you received the AADSTS16000 error because no tenant could be found for that account.

    I have shared the user details over the private message and try to login with that account and You will be able to log in again using your updated internal account email address by signing in with your password and setting up Azure MFA.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.