TF400813: The user '' is not authorized to access this resource

问题

I have my own private organization and repositories. I also have multiple directories and all of them work except for the "Microsoft account" directory.

I am able to log into Azure Devops no problem using the Microsoft account directory.

I see my organization and I can go through my repositories, agents, pipelines, everything. However, I can't change anything. All I get is the error or screens that don't load fully. Its like its in read only mode.

I went into user settings to check permissions and it lets me in but only so far. It stops loading user lists after selecting groups. It shows me groups and permissions for everything, however.

When I try and generate a PAT, the screen sits there and says "Loading Tokens..."

The error I see everywhere and in the network responses is:

$id: "1"
innerException: null
message: "TF400813: The user '' is not authorized to access this resource."
typeName: "Microsoft.TeamFoundation.Framework.Server.UnauthorizedRequestException, Microsoft.TeamFoundation.Framework.Server"
typeKey: "UnauthorizedRequestException"
errorCode: 0
eventId: 3000

Exactly like that, nothing there between the quotes.

It also shows up in Red text with just this message: TF400813: The user '' is not authorized to access this resource.

To resolve this I have done the following: Logged out of devops entirely, which seems to log me out of several services. Switched between my AD accounts while logged in. I've rebooted my machine(I first started seeing this in VS so I updated and rebooted as part of that)

Anything I'm missing here?

回答1:

message: "TF400813: The user '' is not authorized to access this resource.

This looks more like the anonymous access error as you said that there's nothing between the quotes.

In azure devops, e.g PAT generated, most services have themselves security module. When user want to make use of them, it must pass the firstly identity check. If for system, your visit and operate are identified as anonymous, it will look like read-only.

We ever handled such issue and found it due to the proxy blocking the traffic, which also lead him to get the same error when accessing azure devops with vscode.(Similar with yours)

You need confirm is there any proxy configured in your side.

If there's no proxy set but still has this issue. Since Stackflow is a open forum but this is a identity issue. I strongly suggest you contact here and then attach below info also:

• Activity id: You could see this from the Headers of Network. For our backend, we could use this id to check the exactly stack trace.
• Org name and account name.
• Fiddler trace. The mostly useful info we need is fiddler trace.

回答2:

I tried a few options like setting the PAT in interactive screen or via environment variable or by storing it in a file and echoing that file content to the az devops login or az pipeline create command as mentioned in https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/use-personal-access-tokens-to-authenticate?view=azure-devops&viewFallbackFrom=vsts&tabs=preview-page#create-personal-access-tokens-to-authenticate-access

However none of them worked. Finally it worked after I changed the token (PAT) in the file /home//.azure/azuredevops/personalaccesstoken.

来源：https://stackoverflow.com/questions/60021558/tf400813-the-user-is-not-authorized-to-access-this-resource