Skip to content

az network bastion rdp - Command ignores current tenant  #26451

@SlavisaBakicOB

Description

@SlavisaBakicOB

Related command

az network bastion rdp --name bastion-name --resource-group rg-name --target-resource-id /subscriptions/subid/resourceGroups/vm-aad-bakic/providers/Microsoft.Compute/virtualMachines/vm-aad-test --enable-mfa true

Describe the bug
When login is attempted following error is displayed.
image

To Reproduce
Create resources as instructed in:

  1. https://learn.microsoft.com/en-us/azure/bastion/connect-native-client-windows
  2. Assign VM User Login and/or VM Admin Login IAM roles to user invited to tenant
  3. az login --tenant "tenantid-where-vm-and-bastion-are"
  4. az account set --subscription "sunscriptionid-where-vm-and-bastion-are"
  5. Run az network bastion rdp as instructed above
  6. In login screen select email account which was added to VM tenant

Expected behavior
Being able to login to VM using AAD authentication.

Environment summary
Windows 11 21H2

"azure-cli": "2.48.1",
"azure-cli-core": "2.48.1",
"azure-cli-telemetry": "1.0.8",
"extensions": {
"account": "0.2.5",
"bastion": "0.2.4"

Metadata

Metadata

Assignees

No one assigned

    Labels

    Auto-AssignAuto assign by botAzure CLI TeamThe command of the issue is owned by Azure CLI teamNetworkaz network vnet/lb/nic/dns/etc...Network - Bastionact-quality-productivity-squadcustomer-reportedIssues that are reported by GitHub users external to the Azure organization.questionThe issue doesn't require a change to the product in order to be resolved. Most issues start as that

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions