Can't access azure atp

%3CLINGO-SUB%20id%3D%22lingo-sub-2059936%22%20slang%3D%22en-US%22%3ECan't%20access%20azure%20atp%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2059936%22%20slang%3D%22en-US%22%3E%3CP%3ECould%20using%20the%20contoso%20demo%20account%20blocked%20the%20user%20from%20accessing%20the%20azure%20atp%20portal%20despite%20the%20user%20role%20is%20global%20admin.%20I%20assgined%20security%20admin%20role%20to%20this%20user%20additional%20to%20global%20admin%20role%2C%20but%20the%20problem%20still%20remains.%20I%20created%20this%20tenant%20on%26nbsp%3B%3CSPAN%3EMicrosoft%20Customer%20Digital%20Experience%20site%20and%20it's%26nbsp%3BM365%20Enterprise%20MDATP%20Lite%20content%20pocket.%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E(%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fcdx.transform.microsoft.com%2F).Thank%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fcdx.transform.microsoft.com%2F).%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2059936%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Eazure%20atp%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2059997%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20access%20azure%20atp%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2059997%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F928753%22%20target%3D%22_blank%22%3E%40Elifarslan%3C%2FA%3E%26nbsp%3BAre%20you%20trying%20to%20access%20MDATP%20portal%20for%20the%20first%20time%20and%20what%26nbsp%3Bis%20the%20exact%20error%20you're%20getting%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2060085%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20access%20azure%20atp%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2060085%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F879527%22%20target%3D%22_blank%22%3E%40AnuragSrivastava%3C%2FA%3E%26nbsp%3BYes%2C%20I%20am%20trying%20to%20access%20microsoft%20defender%20for%20identity%20portal%20for%20the%20first%20time%20to%20enable%20it%20for%20casb%20and%20getting%20an%20error%20such%20%22%3CSPAN%3Eadmin%40M365x****onmicrosoft.com%20does%20not%20have%20permission%20to%20access%20this%20page%22%20but%20the%20user%20is%20global%20and%20security%20admin.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2060106%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20access%20azure%20atp%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2060106%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F928753%22%20target%3D%22_blank%22%3E%40Elifarslan%3C%2FA%3E%26nbsp%3BHave%20you%20checked%20if%20this%20user%20has%20the%20appropriate%20(EMS%20E5)%20license%20assigned%20to.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2060159%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20access%20azure%20atp%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2060159%22%20slang%3D%22en-US%22%3EYes%2C%20Enterprise%20Mobility%26amp%3BSecurity%20E5%20license%20seems%20assgined%20to%20the%20user.I%20suppose%20contoso%20does%20not%20support%20to%20access%20that%20portal%2C%20a%20real%20subscripton%20is%20required.I%20can%20access%20Microsoft%20Defender%20Security%20center%20though.%3C%2FLINGO-BODY%3E
Occasional Contributor

Could using the contoso demo account blocked the user from accessing the azure atp portal despite the user role is global admin. I assgined security admin role to this user additional to global admin role, but the problem still remains. I created this tenant on Microsoft Customer Digital Experience site and it's M365 Enterprise MDATP Lite content pocket.  (https://cdx.transform.microsoft.com/).

6 Replies

@Elifarslan Are you trying to access MDATP portal for the first time and what is the exact error you're getting?

@AnuragSrivastava Yes, I am trying to access microsoft defender for identity portal for the first time to enable it for casb and getting an error such "admin@M365x****onmicrosoft.com does not have permission to access this page" but the user is global and security admin.

@Elifarslan Have you checked if this user has the appropriate (EMS E5) license assigned to.

 

Yes, Enterprise Mobility&Security E5 license seems assgined to the user.I suppose contoso does not support to access that portal, a real subscripton is required.I can access Microsoft Defender Security center though.

@Elifarslan Yes then it seems that the demo account is not authorized to access Identity Portal.

Someone from Microsoft should be able to answer on this.

@AnuragSrivastava Hi there,

Currently, all M365x accounts created for demo purposes are automatically redirected and granted read access only to the contoso demo tenant for MDI (when you browse to portal.atp.azure.com) but only once you added the MDI pack to the demo tenant.