Not getting Admin Access on Defender for Sentinel

Guneet Sehgal 0

{"sessionId":"2c67d037623542f7af6d8f5b9f510754","subscriptionId":"","resourceGroup":"","errorCode":"403","resourceName":"","details":"No access"}

Shubham Sharma 3,430 Reputation points Microsoft External Staff Moderator

2025-12-05T12:11:24.69+00:00
Hello Guneet Sehgal

This error (403) typically means the admin of the tenant has not given the permission to access the "Admin Portal" with a non-administrator account.

Refer to this article - https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/users-default-permissions which talks about the kind of permissions a user has, and type of restrictions admin can apply within the Azure AD to restrict access.

Below are the steps: -

Requires someone with Owner on the scope to assign roles.

In Azure portal → go to Log Analytics workspaces → select the workspace that hosts Sentinel.

Access control (IAM) → Add → Add role assignment.

Assign:

Microsoft Sentinel Contributor (for managing Sentinel), and

Log Analytics Reader (to read data). Alternatively, assign Contributor at the resource group if broader rights are acceptable.

For your reference: https://learn.microsoft.com/en-us/azure/sentinel/roles

Please let us know if you need any further assistance.

Thanks

Your answer