https://logit.io/docs/_next/static/chunks/pages/account-administra…/access-denied-azure-ad-aa4bd6395d58c0ec.js

1(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[48656],{83155:function(e,t,n){(window.__NEXT_P=window.__NEXT_P||[]).push(["/account-administration/account-access-users-teams/troubleshooting/access-denied-azure-ad",function(){return n(30622)}])},30622:function(e,t,n){"use strict";n.r(t),n.d(t,{__toc:function(){return d},default:function(){return l}});var s=n(85893),i=n(31379),r=n(9575),o={src:"/docs/_next/static/media/admin-approval.e0b01d6e.png",height:251,width:336,blurDataURL:"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAGCAMAAADJ2y/JAAAAD1BMVEXm5ubz+Pvv7+/+/v7u9foTj+v1AAAACXBIWXMAABYlAAAWJQFJUiTwAAAAI0lEQVR4nCXIwREAMBCCQNT0X3NGb/kBpQQ7g7dwK6ET9EYfB4gAU5lx1IcAAAAASUVORK5CYII=",blurWidth:8,blurHeight:6},a={src:"/docs/_next/static/media/enterprise-applications.fab1b94a.png",height:145,width:961,blurDataURL:"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAABCAMAAADU3h9xAAAACVBMVEX5+vrz8/Ph7fd/+1nuAAAACXBIWXMAABYlAAAWJQFJUiTwAAAAEUlEQVR4nGNgZGRgYGBgYgAAABwABaCsWJAAAAAASUVORK5CYII=",blurWidth:8,blurHeight:1},A={src:"/docs/_next/static/media/access-denied.32fb28ce.png",height:279,width:1143,blurDataURL:"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAACCAMAAABSSm3fAAAACVBMVEX2+Pj9/f3v8vPQtM/EAAAACXBIWXMAABYlAAAWJQFJUiTwAAAAFElEQVR4nGNgYmJiYmBkZGSAAkYAALAADQbBi70AAAAASUVORK5CYII=",blurWidth:8,blurHeight:2},c={src:"/docs/_next/static/media/user-assignment-required.f60ef8d7.png",height:70,width:547,blurDataURL:"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAABCAMAAADU3h9xAAAADFBMVEXx8vL5+Pfa6POrz+p+lxH1AAAACXBIWXMAABYlAAAWJQFJUiTwAAAAEUlEQVR4nGNgZGBgZGJmYAQAACgACWQCsMwAAAAASUVORK5CYII=",blurWidth:8,blurHeight:1};let d=[{depth:3,value:"Instructions for the Account Administrator",id:"instructions-for-the-account-administrator"},{depth:3,value:"Error 1- Generic Access denied",id:"error-1--generic-access-denied"},{depth:3,value:"​Error 2 -The user is not assigned to a role for the application",id:"error-2--the-user-is-not-assigned-to-a-role-for-the-application"}];function h(e){let t=Object.assign({h1:"h1",p:"p",h3:"h3",img:"img"},(0,r.a)(),e.components);return(0,s.jsxs)(s.Fragment,{children:[(0,s.jsx)(t.h1,{children:"I'm getting access denied errors when logging in with Azure AD"}),"\n",(0,s.jsx)(t.p,{children:"If you experience 'access denied' errors when logging in to Logit.io via your Azure AD credentials, there could be a number of reasons why this error message is displayed. However, it is likely that this needs to be resolved by the Administrator of the Azure account you are the user of. Advice on how to resolve two common errors are outlined below."}),"\n",(0,s.jsx)(t.h3,{id:"instructions-for-the-account-administrator",children:"Instructions for the Account Administrator"}),"\n",(0,s.jsx)(t.h3,{id:"error-1--generic-access-denied",children:"Error 1- Generic Access denied"}),"\n",(0,s.jsx)(t.p,{children:"The user will see the 'Need admin approval' message and also receive an 'Access denied' message when trying to return to the application without granting consent."}),"\n",(0,s.jsx)(t.p,{children:(0,s.jsx)(t.img,{alt:"Admin Approval",placeholder:"blur",src:o})}),"\n",(0,s.jsx)(t.p,{children:"To resolve this problem, the Azure AD administrator needs to update the User settings, they can do this by clicking on 'Enterprise Applications' in the left-hand side Manage menu, and then clicking on 'User settings.'"}),"\n",(0,s.jsx)(t.p,{children:"Under the Enterprise applications section, the 'Users can consent to apps accessing company data on their behalf' option needs to be set to Yes."}),"\n",(0,s.jsx)(t.p,{children:(0,s.jsx)(t.img,{alt:"Enterprise Applications",placeholder:"blur",src:a})}),"\n",(0,s.jsx)(t.p,{children:"Once this has been saved the users should then be able to log into the Logit.io application using their Azure AD credentials without any errors."}),"\n",(0,s.jsx)(t.h3,{id:"error-2--the-user-is-not-assigned-to-a-role-for-the-application",children:"​Error 2 -The user is not assigned to a role for the application"}),"\n",(0,s.jsx)(t.p,{children:"The user will see the following 'Access denied' error message."}),"\n",(0,s.jsx)(t.p,{children:(0,s.jsx)(t.img,{alt:"Access Denied",placeholder:"blur",src:A})}),"\n",(0,s.jsx)(t.p,{children:"To resolve this problem, the Azure AD Administrator needs to update the User assignment settings, they can do this by clicking on the 'Enterprise Applications' section on the left-hand side Manage menu, and then clicking on the Logit.io application. The current settings can be seen by clicking on 'Properties'\nThe 'User assignment required?' option needs to be set to Yes."}),"\n",(0,s.jsx)(t.p,{children:(0,s.jsx)(t.img,{alt:"User Assignment Required",placeholder:"blur",src:c})}

1),"\n",(0,s.jsx)(t.p,{children:"Then on the left-hand Manage menu click on 'Users and groups' and then 'Add User.' By selecting the relevant user and clicking on 'Assign' the user should appear in the users and group list."}),"\n",(0,s.jsx)(t.p,{children:"Once the user account has been added they should be able to log into the Logit.io application with their Azure AD credentials without error."})]})}var l=(0,i.j)({MDXContent:function(e={}){let{wrapper:t}=Object.assign({},(0,r.a)(),e.components);return t?(0,s.jsx)(t,{...e,children:(0,s.jsx)(h,{...e})}):h(e)},pageOpts:{filePath:"src/pages/account-administration/account-access-users-teams/troubleshooting/access-denied-azure-ad.mdx",route:"/account-administration/account-access-users-teams/troubleshooting/access-denied-azure-ad",frontMatter:{title:"Access Denied Errors Azure AD Login",metaTitle:"Learn How to Resolve Azure AD Access Errors",description:"Discover the steps you need to take to resolve Azure AD access errors in this help article from Logit.io."},title:"Access Denied Errors Azure AD Login",headings:d},pageNextRoute:"/account-administration/account-access-users-teams/troubleshooting/access-denied-azure-ad"})}},function(e){e.O(0,[31379,92888,49774,40179],function(){return e(e.s=83155)}),_N_E=e.O()}]);