Adding an external user as MCAS administrator

Question

Hi,&nbsp;My client added my account as guest in their Azure AD (I can access other Azure resources using it) and also added it as an MCAS&nbsp; admin following the instructions described in&nbsp;https://docs.microsoft.com/en-us/cloud-app-security/manage-admins. However, when I login into our MCAS, I don't see their tenant an option to select under my account (as it was supposed to be).&nbsp;I did log out and logged in again, tried different browsers, etc. Are there any additional steps to enable external admins in MCAS? Maybe it takes a while for the permission to apply (this was done several hours ago)? We had no problems adding my account as admin for Defender ATP and Azure ATP (though those work differently from that perspective).&nbsp;Thanks,Adrian

adigrio · Answer

Not yet, I guess there are some additional requirements that are not documented. We will open a ticket with Microsoft. We have no issue with others like Azure ATP, Defender ATP, Security Center etc. but then they are totally different products.

adigrio · Answer

PeterRising&nbsp;Sure, will do. I've also sent you pm if you want to try it with our test environment.

adigrio · Answer

For those interested, after going and back and forth with Peter on this issue, we identified that one can access the customer MCAS portal by using;&nbsp;https://&lt;organization name&gt;.portal.cloudappsecurity.com/&nbsp;even when the customer organization doesn't show up as option in our own MCAS Portal when accessed through&nbsp;https://portal.cloudappsecurity.com/.&nbsp;&nbsp;The trick is to find the actual organization name, as it is not always obvious. Is not clear why some tenants do show in the main portal while other are not, we suspect that it could be a licensing limitation as there are so many possible combinations. The permissions of the MSSP account don't seem to be the problem. If anyone has additional info, it would be great if they can share it.

peterrising · Answer

AdiGrio&nbsp;&nbsp;Curious to know if this ever started working for you?

peterrising · Answer

AdiGrio&nbsp;&nbsp;Interesting. &nbsp;Might try this myself and see what results I get. &nbsp;Please will you post back if you get a resolution in the meantime?&nbsp;

Forum Discussion

Adding an external user as MCAS administrator

8 Replies

Resources