Return
-
Title
Error: Access denied when trying to access Azure Security Group -
Description
Active Roles User may experience access denied error when accessing Azure Security Group trough Web Interface.
"Error: Access is denied.
Object: CN=Security Groups,CN=tenant.onmicrosoft.com,CN=Azure,CN=Configuration"
-
Cause
Built-in Access Template 'Azure - Full Control' missing permissions as the following classes.
EDS-Azure-Security-Group-ContainerEDS-Azure-SecurityGroup -
Resolution
WORKAROUND
Make a copy of the access template - Built-in 'Azure - Full Control' access template and add the missing permissions.
1) Launch the Active Roles Server MMC console2) Navigate to the following: Configuration | Access Templates | Azure3) Right-click on the Access Templates Azure - Full Control and select Copy...4) Provide a name for the access template such as, "Azure - Full Access"5) Click Add, select 'Only the following classes' and check off the following missing classes above, click Next.6) Select 'Full Access' click Next and Finish7) Apply the new Access Template created for the user;STATUSThe following bug ID 302029 has been created to address this issue. It will be fixed in a feature release version. Please refer to this article for updates or contact support referencing the Product defect ID: 302029 -
Change Request
302029