Share via

Need access to resources in my Tenant

Segura, Leos 20 Reputation points
2026-02-02T20:04:51.13+00:00

I am trying to create Azure Policies for my tenant, Windows machines. It is indicating I do not have access to this, even though I am a global administrator. This is also happening with my ability to review and edit Virtual Networks.

Please advise.

Thanks

Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
Answer accepted by question author
  1. Q&A Assist
    2026-02-02T20:04:57.21+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    As a Global Administrator in Microsoft Entra ID, you might not automatically have access to all Azure resources, including the ability to create Azure Policies or manage Virtual Networks. This can occur if your role assignments do not include the necessary permissions for those specific resources.

    To resolve this issue, you can elevate your access to gain permissions for all Azure subscriptions and management groups in your tenant. When you elevate your access, you will be assigned the User Access Administrator role at the root scope, which allows you to view all resources and assign access in any subscription or management group. After making the necessary changes, it is recommended to remove this elevated access.

    If you continue to face issues, ensure that you have the appropriate role assignments that include write permissions for the resources you are trying to manage.

    References:

    0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Bharath Y P 4,135 Reputation points Microsoft External Staff Moderator
    2026-02-02T22:07:46.3166667+00:00

    Hello Segura, Leos, I see you're having trouble creating Azure Policies and managing Virtual Networks even as a global administrator. That can definitely be frustrating! Here's what you can consider to address these access issues:

    1. Check Permissions: Even as a global admin, you might need specific permissions to create or modify Azure Policies. Ensure you have the Owner or Policy Contributor role assigned for the resources you're trying to manage. If the task at hand requires viewing compliance details, you'll need the Reader role as well.
    2. Policy Constraints: It's possible that your operations are being blocked by existing Azure Policies. You can check the activity log for error messages related to denied actions, which will give you insights into why specific operations are failing. Look for the policy definition and assignment IDs in the log to see what restrictions are in place.
    3. Role Assignments: Make sure that your global admin role has adequate role assignments. You might want to verify that the account is not only a global administrator but also has the necessary permissions to the specific resources in question (e.g., the ability to create or edit policies).
    4. Utilize the Azure Portal: You can explore the Azure Policy assignments section via the Azure portal to see if any policies are blocking your operations. This will help you identify which policies may need reviewing or modifying.

    If this doesn't resolve your issue, here are a few follow-up questions to help us get more specific:

    1. Can you provide any error messages you're seeing when trying to create or manage these resources?
    2. Are there any existing Azure Policies applied to the tenant that might affect your ability to create new policies?
    3. Could you clarify if this issue is occurring in a specific subscription or in all subscriptions under your tenant?

    Hope this helps! Let me know if you need further assistance! If the provided answer was helpful, please click Accept the Answer and upvote if the above was helpful.

    Thanks

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.