SOLVED
Home

Generic authorization exception inviting Azure AD gests

%3CLINGO-SUB%20id%3D%22lingo-sub-274742%22%20slang%3D%22en-US%22%3EGeneric%20authorization%20exception%20inviting%20Azure%20AD%20gests%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-274742%22%20slang%3D%22en-US%22%3E%3CP%3ERecently%20I%20have%20been%20unable%20to%20invite%20guests%20to%20my%20Azure%20AD.%26nbsp%3B%20This%20had%20been%20working%20great%20for%20over%20a%20year%20but%20now%20I%20get%20the%20error%20%22Generic%20authorization%20exception%22%20when%20trying%20from%20Powershell%20or%20the%20Azure%20Portal.%26nbsp%3B%20Inviting%20still%20works%20with%20both%20methods%20for%20those%20already%20in%20the%20Azure%20AD%20(well%2C%20the%20invitee%20gets%20the%20invitation%20email%20but%20not%20much%20use%20since%20they%20are%20already%20in%20the%20Azure%20AD).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20828px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F57638i46F83140E70F6705%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22AzureADIssue.JPG%22%20title%3D%22AzureADIssue.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-274742%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EGeneral%20Comment%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-275342%22%20slang%3D%22en-US%22%3ERe%3A%20Generic%20authorization%20exception%20inviting%20Azure%20AD%20gests%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-275342%22%20slang%3D%22en-US%22%3E%3CP%3Eyes%2C%20That%20should%20be%20the%20reason%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-275267%22%20slang%3D%22en-US%22%3ERe%3A%20Generic%20authorization%20exception%20inviting%20Azure%20AD%20gests%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-275267%22%20slang%3D%22en-US%22%3EWhat%20you%20suggested%20worked%20so%20thanks.%20All%20I%20can%20figure%20is%20that%20Azure%20must%20have%20made%20a%20recent%20change%20in%20user%20invitation%20authorization%20because%20this%20was%20working%20for%20over%20a%20year%20as%20it%20was%20until%20maybe%20last%20week%20(i.e.%2C%20the%20global%20administrator%20didn't%20need%20this%20authorization)%3B%20I%20may%20have%20missed%20an%20Azure%20change%20notice%20or%20perhaps%20I%20mistakenly%20flipped%20this%20switch%20off%20somehow.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-275229%22%20slang%3D%22en-US%22%3ERe%3A%20Generic%20authorization%20exception%20inviting%20Azure%20AD%20gests%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-275229%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Todd%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETo%20my%20understanding%20%22Generic%20Authorization%20error%22%20means%20you%20don%60t%20have%20the%20permission%20to%20invite.%3C%2FP%3E%3CP%3EI%20believe%20you%20are%20the%20Global%20Admin.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Echange%20the%20User%20settings%20option%20in%20the%20Azure%20AD%20Portal.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fportal.azure.com%2F%23%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3EUser%20settings%3C%2FA%3E%3D%26gt%3B%3CA%20target%3D%22_blank%22%3EExternal%20collaboration%20settings%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3EAdmins%20and%20users%20in%20Guest%20user%20role%20can%20invite.%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Etoggle%20this%20to%20yes.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fusers-groups-roles%2Fdirectory-assign-admin-roles%23guest-inviter%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fusers-groups-roles%2Fdirectory-assign-admin-roles%23guest-inviter%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMark%20like%20if%20it%20helps%20you.%20%3A)%3C%2Fimg%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Todd Schultz
New Contributor

Recently I have been unable to invite guests to my Azure AD.  This had been working great for over a year but now I get the error "Generic authorization exception" when trying from Powershell or the Azure Portal.  Inviting still works with both methods for those already in the Azure AD (well, the invitee gets the invitation email but not much use since they are already in the Azure AD).

 

AzureADIssue.JPG

3 Replies
Solution

Hi Todd,

 

To my understanding "Generic Authorization error" means you don`t have the permission to invite.

I believe you are the Global Admin.

 

change the User settings option in the Azure AD Portal.

 

 User settings=>External collaboration settings

 

Admins and users in Guest user role can invite.

 

toggle this to yes.

 

https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-ro...

 

 

Mark like if it helps you. :) 

 

 

 

 

What you suggested worked so thanks. All I can figure is that Azure must have made a recent change in user invitation authorization because this was working for over a year as it was until maybe last week (i.e., the global administrator didn't need this authorization); I may have missed an Azure change notice or perhaps I mistakenly flipped this switch off somehow.

yes, That should be the reason

Related Conversations
Extentions Synchronization
Deleted in Discussions on
3 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
36 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
9 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies