Access issue for portal

Sign out of all Microsoft sessions, open a private browser window, sign in with the account type that owns the subscription, and switch the Azure portal to the directory containing that subscription.

Restore the correct account and directory

1. Sign out of both Azure DevOps and the Azure portal, then close all Microsoft sign-in tabs.
2. Open an InPrivate/Incognito window and sign in to the Azure portal.
3. If prompted to choose between identically named accounts, select the identity originally used for the subscription:
   • Work or school account for an organizational Microsoft Entra identity.
   • Personal account if the subscription was created with a personal Microsoft account.
   Personal and work/school identities are separate and cannot be merged.^1^
4. In the Azure portal, select Settings in the upper-right corner → Directories + subscriptions → All Directories.
5. Switch through the available directories until the affected subscription appears. Then set that directory as the Startup directory if appropriate.^2^
6. In the same Directories + subscriptions page, activate the Default subscription filter or include the affected subscription. A portal filter can hide a subscription throughout the portal even when access still exists.^2^

Switching the active directory in Azure DevOps does not by itself establish that the Azure subscription was transferred. The directory-transfer recovery steps below apply only if someone used Azure portal → Subscriptions → the subscription → Change directory.

If the subscription appears but returns 401

A recent RBAC assignment change can take up to 10 minutes to become effective. Sign out and sign back in to refresh the access token.^3^

If your Owner or User Access Administrator role is eligible through Microsoft Entra Privileged Identity Management (PIM):

1. Open Microsoft Entra PIM and activate the eligible Owner or User Access Administrator assignment.
2. Wait for activation, then sign out and back in.
3. Retry the subscription.

If no eligible assignment exists, ask an existing subscription Owner or Role Based Access Control Administrator to open:

Subscriptions → affected subscription → Access control (IAM) → Add → Add role assignment

They should assign your identity an appropriate role, such as Reader, Contributor, or Owner, based on the access required. Role assignment requires permission such as Microsoft.Authorization/roleAssignments/write.^3^

Only if the subscription directory was actually changed

Changing a subscription’s Microsoft Entra directory permanently removes the prior directory’s Azure RBAC assignments; those assignments do not migrate and must be recreated in the target directory.^4^

Use one of these recovery paths:

• Ask an Owner or RBAC administrator who still has access in the new directory to recreate your role assignment.
• If you are a Global Administrator in that new directory, open Microsoft Entra ID → Manage → Properties, set Access management for Azure resources to Yes, and save. Sign out and back in, assign the necessary subscription role, then return the toggle to No to remove the temporary root-scope elevation.^5^

If no administrator can restore access

Create an Azure support request under Subscription management → Sign-in or subscription access. A subscription-based request normally requires Owner, Contributor, Support Request Contributor, or equivalent support permissions; a Microsoft Entra administrator can create a request for an Entra scenario without a subscription.^6^

Provide Microsoft Support with:

• The affected subscription ID
• Expected tenant name and tenant ID
• Sign-in account type
• Full 401 message, timestamp, correlation ID, and request ID
• Whether Change directory was used on the Azure subscription itself

Tenant, correlation, and request IDs are diagnostic identifiers, not passwords, but account-specific diagnostics should be shared through the private support case rather than posted publicly. The subscription ID included in the question should also be redacted from the public post.

References

1. What's the difference between a Microsoft account and a work or school account? | Microsoft Support
2. Manage Azure portal settings and preferences
3. Troubleshoot Azure RBAC
4. Associate or add an Azure subscription to your Microsoft Entra tenant
5. Elevate access to manage all Azure subscriptions and management groups
6. Create an Azure support request