'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Fix Azure VM Creation Error AADSTS16000 (Interaction Required)
Question details
The user is unable to create an Azure virtual machine due to a tenant access error preventing application access.
- Product
- Microsoft Azure
- Device & OS
- not provided
- Scenario
- Attempting to create an Azure virtual machine in the Azure portal.
- Observed behavior
- An AADSTS16000 interaction_required error is displayed, indicating the logged-in live.com account is not present in the Microsoft Services tenant.
Verify whether you are currently logged into the Azure portal using a personal Microsoft account (such as @live.com or @outlook.com) instead of your official corporate Azure Active Directory account.
Switch to an Appropriate Azure Active Directory Account
Resolve the error by signing out of your personal account and logging in with an account that belongs to the target Azure tenant.
The AADSTS16000 error typically occurs when your browser automatically signs you in with a personal Microsoft account instead of the organizational account required for accessing specific Azure resources.
Click on your profile picture or initials in the top right corner of the Azure Portal and select 'Sign out'.
Open a new Incognito or InPrivate browsing window to prevent automatic sign-in using cached credentials.
Navigate back to the Azure Portal and sign in using your corporate Azure Active Directory (Azure AD) email and password.
Request Guest Access from the Tenant Administrator
If you must use your live.com account, it needs to be added as a guest user in the target Microsoft Services tenant.
Submit an Azure Support Request
Use the official Microsoft Azure support channels if you have proper directory access but the error persists.
Keep Your Work Flowing with WPS Office
While resolving complex Azure Active Directory tenant issues, don't let your documentation and reporting slow down. WPS Office provides a free, seamless, and lightweight solution to manage all your work documents without the hassle of account conflicts.
- 1. Download and Install: Visit the official WPS website to download the lightweight installer and set up the suite in minutes.
- 2. Open Your Files: Instantly open, edit, and save your existing Microsoft Word, Excel, or PowerPoint documents with full format compatibility.
- 3. Draft Technical Documents: Use WPS Writer to document your Azure deployment steps or WPS Spreadsheet to plan your VM configurations without relying on cloud access.
Frequently Asked Questions
What exactly does the AADSTS16000 error mean?
The AADSTS16000 error indicates an authentication issue where the current user session (such as a live.com account) requires additional interaction, or the account is not recognized as a valid member of the target Microsoft Services tenant trying to be accessed.
Can I manage Azure virtual machines with a personal live.com account?
Yes, but only if that personal account has been formally invited as a Guest user to an organization's Azure Active Directory tenant, and assigned the proper Role-Based Access Control (RBAC) permissions to create or manage resources.
How do I switch directories in the Azure portal?
Click the 'Directories + subscriptions' icon in the top toolbar of the Azure portal. In the panel that opens, select the correct directory (tenant) where you have the permissions to create virtual machines.
Why does my browser keep signing me into the wrong Microsoft account?
Browsers cache login credentials and session cookies. If you frequently use personal Microsoft services like Outlook or Xbox, the browser may default to that account. Using Private/Incognito windows or dedicated browser profiles can prevent this.
