Create an organization and a project using a Microsoft account
Invite another Microsoft account to the project
An email goes to the invitee with a link to join the project
When the invitee tries to join, the following error is displayed:
401 - Uh-oh, you do not have access.
Your account, <invitee_email_id> is not authorized to view this page.
Make sure the URL is correct and your account has access.
View a list of your organizations here.
You may request access by contacting the admin.
What am I missing? I know this question has been asked before but those answers don't help. Also, my scenario is as simple as has been described.
Related
I asked this question on the github community support forum, but I'll ask this here too since no reply there...
I am trying to setup a Github App to give some scripts limited Admin rights to some repos in an Organisation. The Organisation is (I believe) under an Enterprise account - we are using this currently instead of having an Enterprise server. I have created the App, transferred it to the Organisation, and one of the Organisation Admins (which I an not) has set me as the manager. So far so good. However, although I can see the App in the Organisation Settings, there is no “Install App” button. Also trying to use it in scripting gives 401 (A JSON web token could not be decoded) errors trying to get hold of a “PAT” for the app - even though the Admin has installed it into the app.
There is obviously something wrong but I’m at a loss. Does anybody know of some extra logs that can be looked at or have a suggestion on how to approach this. We’ve tried deleting the app and retrying - no different. I should say this is the third app I’ve created for transferring into the organisation this way - so far it has just worked.
We raised a support ticket on this so got a formal answer. I thought it might be useful to replicate the key part of the answer here. Essentially the issue is the fact this App has Admin rights. I am an Administrator on some of the repos, and am "App Manager" for this App, but I am not an Owner of the Organisation.
I quote:
"""GitHub App permission requests [control] access to a number of organization REST API endpoints... As these endpoints are outside the individual repository scope, only the organization owner can approve requests to add or change them. If this wasn't the case, App Managers who aren't organization owners would be able to grant an application the ability to view organization members and teams - which is private organization information that can otherwise only be granted by organization owners via inviting new organization members."""
Basically that is it. The original idea was to allow a central place to set some things that only an Administrator could set in a repo - c.f. branch rules. Seems that this can't be done as is with an App - the system just isn't flexible enough.
The alternative, which I know works, is to use the PAT of a user with Admin rights. That just feels less secure.
I have a problem and apparently it happens because before I had my business account registered as a personal account in microsoft. I have already deleted that account to keep the business account only but now when I want to add the account to my organization in DevOps it does not allow me to add it, it tells me that there is an error and already, it does not add it to the organization.
I realized that DevOps tries to add the personal Microsoft account again and not the new one I have (Microsoft 365), I don't know how I can solve that, if they could help me.
The question is also in Developer Community in Microsoft: https://developercommunity.visualstudio.com/content/problem/1096647/no-puedo-unirme-a-una-organizacion-en-devops.html
Solved the issue with these steps below:
Sign out the account and close the browser.
Please ask your Project Collection Admins (PCA) to delete and re-add the account in the organization.
Don't click the email link or use the normal browser window to access the organization.
Firstly, please open an InPrivate/incognito browser window. Then, you could access to "https://dev.azure.com/TCI-Software" directly in the InPrivate/incognito browser window.
Our Azure DevOps account is connected to our Azure AD.
If a new developer from a contractor is starting in a project I would
Go to the correct project
Click Invite and enter the persons email
People invited like this never get the invitation email
We now have to go into Organization settings and manually resend the invite
Is this some setting in our Azure Ad or is it bug?
Looks like for now you need to use Add User button in Organization settings or Resent Invite button to make sure the email can be sent successfully to specific user.
Here's the report about the behavior you met in our User Voice forum, the team there would help to check that. You can follow that to get notifications if there's any update.
Best Regards
Lance
I have just started trying to use Azure DevOps. Whenever I invite a new Team Member to join my project they do not get an email asking them to join. When they log into DevOps, they cannot see my project. I have a suspicion this is somehow related to Active Directory but I have no clue.
I have tried inviting work emails and gmails. I have check that the permissions allow notifications and project collaboration. The project shows the invited emails as part of the project.
Is it supposed to be this difficult to synch up your team?
Thanks!
You can go to Project settings, click Permissions under General, click Users tab and select the new team member you added to your project. Make the View project-level information permission is set to allow for the new member.
I cannot reproduce the email not sending out issue. You can click the 3dots at the most right of the User of the Users section in Organziation setting, and try resending invite a couple of more times.
You can check the Microsoft documents to Add users to your organization or project and Add users to a project or team
I just wanted to update this to say that 'Resend invite' under Organization Settings > Users successfully sent the email to my users. Thank you for the great suggestion. No clue why they didn't send in the first place.
Trying to add users to the organization space.
Despite being listed as a manager, not able to view any link to invite users.
Appreciate any suggestions.
Go to manage organization page (not space page), and you should see something like this:
Then, use Invite a New User link.
Also, in same page, double check your user id has a tick on MANAGER column.
Hope this helps.
Are you trying to add users to your own organization (or) an organization are you invited to ?
From Bluemix documentation here :
Users
The basic role in organizations and spaces. You must be assigned to an organization before you can be granted permissions to the spaces within the organization.
In Bluemix, you can be either a member or a collaborator of an organization:
You are a collaborator of an organization if you already have a Bluemix account, and someone else invites you to the organization.
You are a member of an organization if you don't have a Bluemix account, but then someone invites you to the organization and you sign up for Bluemix from the invitation.
Note: You cannot invite users to your organization if you are a collaborator of the organization, even if you were assigned as an organization manager. Therefore, if you previously registered for a Bluemix account before you were invited to this organization, you cannot invite users, regardless of your role. See Unable to add users to an organization for information about how to work around this problem.
Only the owner of the organization can invite any new users.
You can try inviting users from your own organization. (the one which come by default with the name as your Bluemix Id).