User not able to connect to to Azure VM thro Bastion

Rama Raghavendran 45 Reputation points
2024-07-29T07:18:31.77+00:00

Hi,

Me and my counterpart are able to connect to Azure VMs thro Bastion Basic plan. We do this on daily basis with no issues

However there is another third user who is required to connect to VMs once in a month. His account has the required RBAC assignments for the bastion service and the VMs. But when he tries to connect thro Bastion, he is getting the error Unauthorized Data Error: data set DataCache:2:2.

I set up temporary account and tried it from my laptop. It was a same with the temporary account as well.

I checked if there are any sessions in Bastion but there are none

Is bastion access based on named users?. I read it as being similar to concurrent licensing

What can I do to get the third user to access VMs thro Bastion Basic.

Regards,

Rama

Azure Bastion
Azure Bastion
An Azure service that provides private and fully managed Remote Desktop Protocol (RDP) and Secure Shell (SSH) access to virtual machines.
264 questions
{count} vote

Accepted answer
  1. Bryan Thomas 85 Reputation points
    2024-08-02T14:21:52.1733333+00:00

    The user probably doesn't have the correct permissions to access the Bastion host. Here's an article detailing the minimum permissions to access a VM using Bastion.

    • Reader role on the target VM.
    • Reader role on the network interface (NIC) with private IP of the VM.
    • Reader role on the Azure Bastion resource.

    https://wmatthyssen.com/2022/07/12/azure-bastion-set-the-minimum-required-roles-to-access-a-virtual-machine/

    2 people found this answer helpful.

1 additional answer

Sort by: Most helpful
  1. Rama Raghavendran 45 Reputation points
    2024-09-04T07:47:45.6+00:00

    Hi Bryan,

    You steps did the trick. Many thanks for that.

    I have marked it as accepted answer.

    Regards,

    Rama

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.