Bac Hoang [MSFT]

Problem:

A tenant admin may receive the error “AADSTS50105: The signed in user ‘{EmailHidden}’ is not assigned to a role for the application…” when clicking on the “Grant Admin Consent” button in Azure AD’s App Registration portal as shown in the screen shot below:

Why is this happening?

This error typically happens when the Enterprise Application portion (or Service Principal) of the registered application has the setting ‘User Assignment Required’ set to Yes

So how do I resolve this issue?

You can follow the steps below to work around this issue:

  1. Change the ‘User assignment required’ to No and save the change
  2. Go back to the App Registration portal and perform Granting Admin consent to the application. It should work this time
  3. Set the ‘User assignment required’ back to Yes again

4 Thoughts to “receiving error AADSTS50105: The signed in user ‘{EmailHidden}’ is not assigned to a role for the application”

  1. Parker
    January 13, 2020 at 7:01 pm

    Thank you! I was really struggling to resolve error AADSTS50105. Your suggestion worked perfectly.

    Reply
  2. anthong
    December 25, 2020 at 11:15 am

    having trouble getting back in

    Reply
    1. Bac Hoang [MSFT]
      December 28, 2020 at 5:42 pm

      What error message are you getting?

      Reply
  3. Małgorzata Mrugała
    July 22, 2021 at 12:05 pm

    User assignment required : No.
    Back to you (my God). Yes. Again.
    

    Reply

Leave a Comment