Forum Discussion
Error: User is not authorized to query the management service
I was able to work around this issue. Here is what I noted:
1. Regardless of account, you don't seem to be able to delete existing tenant groups once their created using the Remove-RdsTenant account. I always get the "user is not authorized to query the management service" error no matter what I do.
2. Also, one of the steps I may have missed the first time is that the tenant group name you create via PowerShell has to match to what you create via the Azure portal. After creating a new tenant group in Powershell separate from the default one, it worked when I referenced the new tenant group name in the Azure portal. Hopefully at some point, Microsoft will have an end-to-end solution for creating the tenant, tenant group name, and host pool all within the portal.
Christopher Anderson : Just to clarify, the "tenant group" name should always be "Default Tenant Group". Only in very few circumstances does this change. But yes, you always need to provide the same "tenant" name everywhere you go.
- Masoud515Nov 19, 2019Copper Contributor
Christian_Montoya I am having the same issue. I am using the default name for the group. I am using admin account with global enterprise right.
- Christian_MontoyaNov 19, 2019
Microsoft
Masoud515 : Does that user have a valid role assignment? Can you run Get-RdsRoleAssignment ?