Comments (4)
Good morning @thelumlaa, I'm so sorry you're having issues with your environment.
A quick note on how Users & Admins work in Azure IPAM....
When (non-admin) users login, their existing Azure AuthZ/AuthN are used, and their token is passed to the Engine and used as-is to query resources in Azure. When an admin user logs in, the engine uses the credentials assigned to the Engine App Registration to provide broader access to Networking constructs within your Tenant.
I explained the above to say that this would seem to be an issue with the App Registration/Service Principal for the Azure IPAM Engine. I would start by checking to see if the SP still has "Reader" at the Tenant Root Group (in Management Groups). If it has lost that permission, it won't be able to read Azure Resource Graph (hence Access Denied).
As I tell everyone, we are more than happy to meet 1:1 live to help you through some troubleshooting, so if you'd prefer that path drop me an email at [email protected] and we can schedule some time.
++ @hbendana for visibility
from ipam.
Related Issues (20)
- Restrict access to a group within a Azure AD tenant. HOT 6
- Code version release management HOT 2
- Two part deployment - Deploying part two from parameters file with privateacr set to true not working HOT 6
- Alert when low in IP addresses and make block field optional HOT 4
- Bulk import of space and blocks HOT 2
- Access Control for the IP Reservation Mamangement HOT 2
- Use Azure storage tables as backend instead of CosmosDB HOT 2
- Deployment script produces poor logs when failing on Function only deployment HOT 4
- Error in peering analysis, white screen HOT 2
- Change the tag recognition to allow more than 1 tag to be used on a Vnet - allowing address ranges from two blocks to be reserved and consumed by the deployed vnet HOT 10
- Subscription page is returned blank HOT 5
- Error accessing the analysis-visualize screen HOT 2
- Allow to add additional tags in reservation HOT 6
- Document the terraform provider available to automate reservations. HOT 2
- Subscription Name in visualize and peering tooltips HOT 3
- Insufficient privileges New-MgOauth2PermissionGrant_CreateExpanded error HOT 8
- Terraform example doesn't work as expected HOT 2
- method to get an access token with only curl and jq (without az cli) for remote pipelines HOT 10
- IP reservation from Swagger API UI errors with "Authorization header missing" HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ipam.