Share via

Unable to Manage or Leave 'Microsoft Services' Tenant – Request for Assistance-Azure Active Directory

Satwik G 0 Reputation points
2025-03-11T18:38:55.6033333+00:00 
{
  "sessionId": "031aba5f18db4520b28062ff70361d44",
  "errors": [
    {
      "errorMessage": "interaction_required: AADSTS16000: User account '{EUII Hidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application '0a2057a8-149c-40ca-859e-98de032535fb'(Microsoft Azure Marketplace) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: a6ba42df-d874-4450-b895-15faf17ca400 Correlation ID: b5ada41e-2a2c-4745-b0bc-b3f3bb874143 Timestamp: 2025-03-11 18:25:49Z",
      "clientId": "0a2057a8-149c-40ca-859e-98de032535fb",
      "scopes": [
        "a0e1e353-1a3e-42cf-a8ea-3a9746eec58c/.default"
      ]
    }
  ]
}
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,630 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Harshitha Eligeti 1,930 Reputation points Microsoft External Staff
    2025-03-13T09:07:34.2333333+00:00

    Hello @Satwik G
    When you are trying to login to Azure portal using your personal Microsoft Account (Outlook, Hotmail.) you are getting AADSTS16000 error.

    Error AADSTS16000 is thrown when the user not found in the tenant used for authentication. In your case, this error usually occurs when you sign in to Azure Portal using your personal account which is not the part of the tenant or not added as an external/guest user to an Azure AD tenant. Due to this, you by default get connected to the Microsoft Services tenant.

    Reason: Whenever you sign in Azure portal using Microsoft Personal Account you by default get connected to the Microsoft Services tenant.

    If you are connected to the Microsoft Services tenant as a standard user with restricted access, you cannot perform actions such as creating new users, groups, enterprise applications, and installing Kubernetes. To perform administrative actions, you must have administrative access to the tenant.

    Solution: You need to create your own tenant rather than using the Microsoft Services tenant. You get one with an Azure free trial When you create a new tenant, you by default become the Global Administrator of the new tenant and have full access to all the options in that tenant.

    In some cases, the user might already have an active session that uses a different personal account than the one that's intended to be used. Or they have a session that uses their organization account although they intended to use a personal guest account (or vice versa). In that scenario, try signing in to the Azure Portal trough a tenant-specific URL using the following format:

    https://portal.azure.com/<tenant domain name>

    E.g.

    https://portal.azure.com/constoso.onmicrosoft.com

    Hope this helps. Do let us know if you any further queries by responding in the comments section.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.