SOLVED

Generic authorization exception inviting Azure AD gests

%3CLINGO-SUB%20id%3D%22lingo-sub-274742%22%20slang%3D%22en-US%22%3EGeneric%20authorization%20exception%20inviting%20Azure%20AD%20gests%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-274742%22%20slang%3D%22en-US%22%3E%3CP%3ERecently%20I%20have%20been%20unable%20to%20invite%20guests%20to%20my%20Azure%20AD.%26nbsp%3B%20This%20had%20been%20working%20great%20for%20over%20a%20year%20but%20now%20I%20get%20the%20error%20%22Generic%20authorization%20exception%22%20when%20trying%20from%20Powershell%20or%20the%20Azure%20Portal.%26nbsp%3B%20Inviting%20still%20works%20with%20both%20methods%20for%20those%20already%20in%20the%20Azure%20AD%20(well%2C%20the%20invitee%20gets%20the%20invitation%20email%20but%20not%20much%20use%20since%20they%20are%20already%20in%20the%20Azure%20AD).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-274742%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EGeneral%20Comment%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-275229%22%20slang%3D%22en-US%22%3ERe%3A%20Generic%20authorization%20exception%20inviting%20Azure%20AD%20gests%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-275229%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Todd%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETo%20my%20understanding%20%22Generic%20Authorization%20error%22%20means%20you%20don%60t%20have%20the%20permission%20to%20invite.%3C%2FP%3E%3CP%3EI%20believe%20you%20are%20the%20Global%20Admin.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Echange%20the%20User%20settings%20option%20in%20the%20Azure%20AD%20Portal.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E-ERR%3AREF-NOT-FOUND-User%20settings%3D%26gt%3B%3CA%20target%3D%22_blank%22%3EExternal%20collaboration%20settings%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3EAdmins%20and%20users%20in%20Guest%20user%20role%20can%20invite.%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Etoggle%20this%20to%20yes.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fusers-groups-roles%2Fdirectory-assign-admin-roles%23guest-inviter%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fusers-groups-roles%2Fdirectory-assign-admin-roles%23guest-inviter%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMark%20like%20if%20it%20helps%20you.%20%3A)%3C%2Fimg%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-275267%22%20slang%3D%22en-US%22%3ERe%3A%20Generic%20authorization%20exception%20inviting%20Azure%20AD%20gests%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-275267%22%20slang%3D%22en-US%22%3EWhat%20you%20suggested%20worked%20so%20thanks.%20All%20I%20can%20figure%20is%20that%20Azure%20must%20have%20made%20a%20recent%20change%20in%20user%20invitation%20authorization%20because%20this%20was%20working%20for%20over%20a%20year%20as%20it%20was%20until%20maybe%20last%20week%20(i.e.%2C%20the%20global%20administrator%20didn't%20need%20this%20authorization)%3B%20I%20may%20have%20missed%20an%20Azure%20change%20notice%20or%20perhaps%20I%20mistakenly%20flipped%20this%20switch%20off%20somehow.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-275342%22%20slang%3D%22en-US%22%3ERe%3A%20Generic%20authorization%20exception%20inviting%20Azure%20AD%20gests%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-275342%22%20slang%3D%22en-US%22%3E%3CP%3Eyes%2C%20That%20should%20be%20the%20reason%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Recently I have been unable to invite guests to my Azure AD.  This had been working great for over a year but now I get the error "Generic authorization exception" when trying from Powershell or the Azure Portal.  Inviting still works with both methods for those already in the Azure AD (well, the invitee gets the invitation email but not much use since they are already in the Azure AD).

 

AzureADIssue.JPG

3 Replies
Highlighted
Solution

Hi Todd,

 

To my understanding "Generic Authorization error" means you don`t have the permission to invite.

I believe you are the Global Admin.

 

change the User settings option in the Azure AD Portal.

 

 User settings=>External collaboration settings

 

Admins and users in Guest user role can invite.

 

toggle this to yes.

 

https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-ro...

 

 

Mark like if it helps you. :) 

 

 

 

 

Highlighted
What you suggested worked so thanks. All I can figure is that Azure must have made a recent change in user invitation authorization because this was working for over a year as it was until maybe last week (i.e., the global administrator didn't need this authorization); I may have missed an Azure change notice or perhaps I mistakenly flipped this switch off somehow.
Highlighted

yes, That should be the reason