How to fix "Selected user account does not exist in tenant 'Microsoft Services'" when using Microsoft Entra to access Azure SQL Server?

Hello Ryan, Welcome to MS Q&A

To resolve the error 'Selected user account does not exist in tenant' when accessing Azure SQL Server using Microsoft Entra, ensure that the user account you are trying to use is correctly configured in the Azure Active Directory (AAD) tenant associated with your Azure SQL Server.

Here are some steps you can follow:

1. Verify User Existence: Confirm that the user account exists in the Azure AD tenant. You can check this in the Azure portal under Azure Active Directory > Users.
2. Check Tenant Configuration: Ensure that the Azure SQL Server is associated with the correct Azure AD tenant where the user account is registered.
3. Service Principal Authentication: If you are using a service principal, ensure that it is correctly set up and has the necessary permissions to access the Azure SQL Database.
4. Conditional Access Policies: Review any Conditional Access policies that may be preventing the user from authenticating. Adjust these policies if necessary to allow access.
5. Role Assignments: Make sure that the user has been assigned the appropriate roles in Azure SQL Database to perform the actions you are attempting.

If you continue to face issues, consider looking into the specific error messages returned by Azure SQL, as they can provide further insights into what might be wrong.

References:

• Microsoft Entra service principals with Azure SQL
• Configure and manage Microsoft Entra authentication with Azure SQL

Kindly check and let us know if any further questions

Thanks

Deepanshu

Following up to see if the provided answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Hi Deepanshu, thank you for your reply.

The tenant in question, called "Microsoft Services', is not a tenant under my control. I'm not sure what it is. I only see one tenant in my Microsoft Entra and that is the Default Directory. My user account does exist in this tenant, but that's not the tenant it's looking in for some reason.

I have no conditional access policies in the database, and as far as role assignments go, I am the owner.

I've been unable to find instructions on how you can associate an SQL server with a specific tenant. Can you help me with that? Thank you!

Hello @Ryan M,

Thank you for posting your query on Microsoft Q&A.

Typically, "Microsoft Services" appears when you're using a personal account (such as Gmail, Hotmail, or MSN) to authenticate to Azure resources, where your users may have been added as guest accounts in the tenant.

Could you please confirm whether you're using a personal account or a work/school account to authenticate with Azure SQL Server?

If you're using a personal account, try directing the authentication to your tenant by modifying the token URL in your Python script to: https://login.microsoftonline.com/<Replace your tenant_ID>.

Please check these steps, and let me know if the issue persists.

Additionally, if the affected users try to log into the Azure Portal or Office portal, do they encounter the same error message?

Thanks,
Raja Pothuraju.