Share via

Guest role in Azure sponsorship tenants has many restrictions

Shabir 0 Reputation points
2025-10-31T01:18:03.11+00:00

I am working under the microsoft startup founder hub sponsorship tenant. Whenever I create a resource such as open ai service, I participate as a guest, and thus cant administer the resource, add data to it and many more. How can I fix this? Can I be granted proper permissions?

Azure Advisor
Azure Advisor
An Azure personalized recommendation engine that helps users follow best practices to optimize Azure deployments.
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Divyesh Govaerdhanan 9,685 Reputation points
    2025-11-11T23:21:07.6366667+00:00

    Hello,

    Welcome to Microsoft Q&A,

    You’re running into B2B “Guest” limits in the Founders Hub Sponsorship tenant. Guests can be given RBAC on Azure resources, but tenant policies often block key admin actions, and some Azure AI tasks are awkward as a Guest. Fix it by making your working identity a Member of the sponsorship tenant and assigning the right RBAC roles.

    Make you a Member (not Guest) in that tenant Entra admin center → Entra ID → Users → your account → Convert to internal user. (Requires User Admin/GA.) Microsoft Learn

    Alternatively, create a new cloud-only Member user in that tenant and use that to manage the sponsorship subscription. Guest permission limits are documented here. Microsoft Learn

    Give you proper Azure RBAC on the subscription/resource group

    • For general administration: Owner (or Contributor + User Access Administrator) at the subscription or RG scope.

    Please Upvote and accept the answer if it helps!!

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.