Systems Management

Building a CM Lab – Cloud Management Gateway (CMG) – Azure Subscription [14]

I’m going to go over what I had to do in our Azure Portal to get things ready.  This was the biggest thing that tripped me up, mostly because I was using an account that didn’t work properly. So just a note, if you don’t log into your Azure Portal Directory with the Same “domain name” as the one you’re managing, you’ll run into issues.

Here is what happened to me. It’s no secret, that our domain name is, and that is the domain in our accounts are all set up in. Our DEV lab has its own Azure Directory which is When I was logging into the portal, I was using my account and even though I had global admin rights, and was an owner of the subscription, I ran into issues.

Here below you can see the account I was using was a “guest”, which should have been a red flag, but I still had all of the proper rights, so I just overlooked it.

I was the Owner of the Subscription
I was a Global Admin

But the issue was, when I was in the CM Console trying to run the setup, I kept getting errors on logon attempts.

While configuring the Cloud Management Gateway (CMG) at different client sites, we stumbled on an issue ‘Failed to sign in to Azure‘ to create the Azure web applications. When I googled, I found this blog post by Jonathan Lefebvre (@JLefebvreGloben) which was very interesting and helped me understand what was going on behind the scenes, so while it wasn’t the resolution I needed, it was very helpful in my understanding of what the CM Console creates on the backend.

Troubleshooting… Call my Friend Adam Gross (@AdamGrossTX) who is a Cloud Expect and ask for help. We confirmed my account had the rights and that Azure was set up. But still, nothing was working. Then he tried using his Azure Subscription on in my lab, and it worked fine, so we knew it was not my local lab servers, but an issue on the Azure side. He then noticed the “guest” associated with my name and suggested I make a new account. That was the key to this.

I created a new account and gave it all the same rights. [MS Docs, difference between Members & Guests]

Account: Gary Blok Dev (garyb@dev.recastsoftwarecom) then:

  • Then made it a Global Admin in the dev.recastsoftwarecom site. [MS Docs]
  • Made it an owner on the Subscription [MS Docs]
  • Made it a Co-Administrator on the Subscription [MS Docs]

After that, I was able to follow the process as described in the Docs & in the Youtube Video Justin created.

Images to help clear anything up:

My User = Member
My User = Global Administrator
My Account is an Owner of the Subscription
My Account is a “Co-administrator” on the subscription.

Once you have the rights to the account setup that you’ll use in the CM Console to create the Azure Services, you’ll be ready to move on to the next step.

Related Blog Posts:

Cloud Management Gateway (CMG) – Certs PreReq [13]

Cloud Management Gateway (CMG) – Azure Services Connection[15]

Cloud Management Gateway (CMG) – Setting up CMG in the Console [16]

Cloud Management Gateway (CMG) – Post CMG Config [17]

Cloud Management Gateway (CMG) – Client CMG Endpoints [18]


  • This field is for validation purposes and should be left unchanged.


  • This field is for validation purposes and should be left unchanged.

By submitting this form, you understand that Recast Software may process your data as described in the Recast Software Privacy Policy.