A Microsoft desktop and app virtualization service that runs on Azure. Previously known as Windows Virtual Desktop.
Hello Miguel Smith,
The issue was caused by missing VM sign-in permission for users on the Microsoft Entra joined AVD session hosts.
We can resolve it using these steps:
- Open the Azure portal and go to the resource group containing the AVD session-host VMs.
- Select Access control (IAM).
- Select Add > Add role assignment.
- Select the Virtual Machine User Login role.
- Assign the role to the security group containing all authorised AVD users, or add the required users individually.
- Keep the assignment at the resource-group scope so that it applies to all AVD session-host VMs in that resource group.
- Sign out of the AVD web client or Windows App, sign back in, and test the connection again.
The Desktop Virtualisation User role makes the desktop or RemoteApp visible to the user. The Virtual Machine User Login role allows the user to sign in to the Microsoft Entra joined Windows session host where the desktop or application runs. Microsoft documents this VM login role as a requirement for users connecting to Microsoft Entra joined AVD session hosts.