Sudden Access Denied error shown to all admins and applications trying to access IPAM API about ipam HOT 4 CLOSED

Good morning @thelumlaa, I'm so sorry you're having issues with your environment.

A quick note on how Users & Admins work in Azure IPAM....

When (non-admin) users login, their existing Azure AuthZ/AuthN are used, and their token is passed to the Engine and used as-is to query resources in Azure. When an admin user logs in, the engine uses the credentials assigned to the Engine App Registration to provide broader access to Networking constructs within your Tenant.

I explained the above to say that this would seem to be an issue with the App Registration/Service Principal for the Azure IPAM Engine. I would start by checking to see if the SP still has "Reader" at the Tenant Root Group (in Management Groups). If it has lost that permission, it won't be able to read Azure Resource Graph (hence Access Denied).

As I tell everyone, we are more than happy to meet 1:1 live to help you through some troubleshooting, so if you'd prefer that path drop me an email at [email protected] and we can schedule some time.

++ @hbendana for visibility

from ipam.