Error "Access denied" when you try to open the Intune blade in the Azure portal

Applies to: Microsoft Intune

Symptoms


After you set up a new Intune tenant to use with Intune or a third-party MDM solutions, you experience the following issues:

  • When you try to open the Intune blade, you receive the following error message:

    Access denied

  • When you try to open the App protection policies blade, you receive the following error message:

    Bad request

Cause


This issue occurs if the Intune Azure AD application is disabled.
 
To verify, follow these steps:
  1. Sign in to the Azure portal as a global administrator.
  2. Go to Azure Active Directory > Enterprise Applications > Microsoft Intune > Properties.
  3. Check whether the Enabled for users to sign-in? option is set to No.

    Intune properties
 
 

Resolution


To fix the issue, follow these steps:

  1. Sign in to the Azure portal as a global administrator.
  2. Go to Azure Active Directory > Enterprise Applications > Microsoft Intune > Properties.
  3. Set Enabled for users to sign-in? to Yes, then select Save.
  4. Wait 1–24 hours for the tenant to re-onboard and complete activation before you retry.