I cannot create an azure account since apparently my union has taken it hostage at some point.

Hi Chiugo, thanks for the reply.

It's not a cache issue, it happens on a new browser or incognito tab.

I do not have an "organizations" tab anywhere on account.microsoft.com.

I can't login through the tenant tab. I tried, and got hopeful at one step where I could pick another form of authentication instead of the authenticator code, but it still asked me for that afterwards.

I successfully logged in to azure cli. There was only one subscription. I can force the tenant of my union, then I get back to the issue I was having. But I seem to be able to log in using az login successfully. Can I do anything with this? I tried logging in manually to the default directory using aad.portal.azure.com, but no luck.

Thanks for the detailed update. Let us explore what actions you might be able to take using Azure CLI:

What You Can Do with Azure CLI Access

Since you can authenticate and log in, even if it’s limited, here are some potential steps to investigate further or work around the issues:

1. Confirm the Tenant and Directory Details

Run this to check the current tenant and its details:

az account show --output table

• Verify the "homeTenantId" and "tenantId" to ensure they match your expectations. If your union's tenant is listed as default, that’s likely causing the redirect issues.

2. Switch the Active Tenant

If you want to confirm access to another tenant or directory, explicitly switch tenants:

az account set --tenant <tenant-ID>

• Replace <tenant-ID> with the ID of the directory you believe should be your default. If successful, this sets the tenant you can manage.

3. List Users in the Directory

If you have sufficient permissions, try listing the users in your union’s tenant:

az ad user list --output table

• Look for your private Gmail address in the output. This can help you confirm your association and whether you were added as a guest or user.

4. Verify Your Role Assignments

Roles might determine what you can do within the tenant. Run this to see what permissions you have:

az role assignment list --all --output table

If your role is restrictive (e.g., "Guest"), this might explain some of the limitations you’re facing.

5. Manage Authentication Methods

• If the problem lies in authentication, run this to inspect and potentially reset your methods (if permissions allow):

az ad user get --id <your-email-address>

• Check for details or flags that might explain why authentication is blocked.

6. Submit a Support Request Directly

Since you’re able to authenticate with Azure CLI, you can attempt to create a support request:

az support ticket create --description "Account linked to incorrect tenant" --problem-classification-id <classification-id>

• Unfortunately, without admin access, this step may still require assistance from Microsoft Support.

If These Don't Work

If your CLI actions are limited due to permissions or tenant restrictions, your union's IT department will likely need to resolve this by:

• Confirming your account’s association with their tenant.
• Removing or unlinking your private Gmail account from their directory.

A Couple More Suggestions

1. Export Logs for Evidence: Use --debug with your CLI commands to gather detailed logs. This can help in conversations with your union’s IT team or Microsoft Support.
2. Contact Microsoft Support (Directly):

• Even without portal access, you can call or email Microsoft Support and explain your Azure CLI access. Provide any tenant or subscription IDs you’ve gathered for better context.

I hope these helps. Let me know if you have any further questions or need additional assistance.

Also if these answers your query, do click the "Upvote" and click "Accept the answer" of which might be beneficial to other community members reading this thread.

thanks again for the steps. It helps a lot since I'm not familiar with azure. As far as the CLI is concerned, I seem to be using default directory.

az account show --output table
# returns one line, TenantDisplayName is Default Directory

az ad user list --output table
# one line. My name and my email

az role assignment list --all --output table
# Two identical lines, where I'm the owner of my email. Same Scope UUID.

Hello @Felix Gravila,

Thank you for your response.

Please review the Private Message and provide the requested details over the Private Message if you have any further queries.

Please let us know if the information provided by @Chiugo Okpala is helpful. Please let us know if you have any additional queries. We will be happy in answering to your queries.

Hello @Felix Gravila,

Since we didn't receive your response on my above comment, I am following up to please review the Private Message and provide the requested details over the Private Message if you have any further queries.

Please let us know if the above information provided by @Chiugo Okpala is helpful. Please let us know if you have any additional queries. We will be happy in answering to your queries.