help
Support & FAQ
How to use Azure Helper, common error messages, and how to fix them. Still stuck? Jump to
contact at the bottom.
1. Getting started
- Sign in. Enter your email on the launch screen and click "Send magic link". Check your inbox for an
email from Azure Helper and click the link — this opens the app already signed in. Magic links expire after a
short time, so request a fresh one if it doesn't work.
- Subscribe. Once signed in, choose Azure Helper Pro or Azure Helper Partner. If billing isn't enabled
yet for your account, you can join the waitlist instead — we'll email you when checkout is ready.
- Connect your Microsoft tenant. Open Connection in the top bar and click
"Connect Entra delegated login". Sign in with your Microsoft work account — this lets Azure Helper discover
which Entra tenant(s) you belong to.
- Grant data access (admin consent). The first time you connect a tenant, a Global Administrator of that
tenant must click "Grant data access" once. This is a separate, read-only permission grant — Azure Helper never
requests write/delete permissions.
- Explore. Use Home for a live snapshot of your tenant, Guide
for an AI-assisted walkthrough, Graph Explorer to run real (read-only) Microsoft Graph
queries, and Learn for structured lessons and a glossary.
2. Tenants & switching
- Switching the active tenant — use the tenant dropdown in the brand bar, or "Active tenant" in the
Connection panel. The Home dashboard, Graph Explorer, and Guide context all follow the active tenant.
- "Other tenants you can access" — Azure Helper can discover every Entra tenant you're a member or guest
of (the same way the Azure Portal directory switcher does) and lets you connect them with one click.
- Azure Helper Pro supports one connected tenant. Azure Helper Partner supports multiple connected
tenants with the switcher above.
- Disconnecting a tenant removes its stored connection details from Azure Helper. It does not remove or
change anything in the tenant itself, and does not revoke admin consent (do that from the Microsoft Entra admin
center if needed).
3. Guide, Graph Explorer & Learn
- Guide is an AI assistant that answers questions about your tenant using live, read-only data, and
always shows you three ways to act: Portal steps, a Graph request, and a PowerShell command — for you to run
yourself.
- Graph Explorer runs a curated catalog of read-only Microsoft Graph queries (users, groups, roles,
conditional access, sign-ins, service health, etc.) against your connected tenant and explains the result.
- Learn contains structured learning paths, quick explainers, a glossary, and a quiz — useful whether or
not a tenant is connected.
- PowerShell commands shown in the app are not executed for you. They're sample/illustrative output —
copy them and run them yourself in your own PowerShell session, under your own credentials.
The Azure Helper browser extension includes two surfaces: the normal side panel/sidebar and a DevTools capture
workbench. The capture workbench is for learning from the real network calls Microsoft admin portals make behind
the scenes. It is designed for Microsoft portals such as entra.microsoft.com,
admin.microsoft.com, portal.azure.com,
security.microsoft.com, and related Microsoft Graph/admin API hosts.
If you open it on a normal website, it may show an empty list. That is expected: Azure Helper filters capture to
Microsoft Graph and selected Microsoft admin portal APIs so it does not become a general web traffic recorder.
How to open the capture workbench
- Open a Microsoft admin portal page in Chrome, Edge, or Firefox. For example, open
https://entra.microsoft.com and navigate to the blade you want to inspect.
- Open browser Developer Tools for that portal tab:
- Chrome / Edge: press F12, or Ctrl+Shift+I.
- Firefox: press F12, or Ctrl+Shift+I.
- Select the Azure Helper tab inside Developer Tools.
- Use the Microsoft portal normally: open a blade, click refresh, change filters, or navigate to another page.
Captured calls appear in the Azure Helper DevTools panel.
- Keep the Azure Helper side panel open if you want captured calls to appear inside Graph Explorer under
captured portal calls.
What gets captured
- Current network history: when the DevTools panel opens, it imports the tab's current HAR history when
the browser exposes it.
- Live portal calls: while the DevTools panel stays open, Azure Helper watches new Microsoft Graph and
Microsoft admin portal API calls from that inspected tab.
- Graph batch calls: Graph $batch requests are shown as the parent batch request
plus individual child Graph requests when the request body is available.
- Preflight noise: browser OPTIONS preflight requests are filtered out so the
list focuses on useful calls.
What you can do with captured calls
- Filter: use URL, method, and resource chips to narrow the list.
- Switch output language: generate REST, PowerShell, Azure CLI, or JavaScript fetch snippets.
- Export: copy a single snippet, copy the current script, save the current script, or export JSON.
- Send to the side panel: captured calls are stored in browser extension storage and forwarded into the
hosted Azure Helper side panel so Graph Explorer and Guide can explain them.
Safety boundaries
- The DevTools workbench observes network requests from the current Microsoft portal tab. It does not click
buttons, scrape the page DOM, or automate the portal.
- Azure Helper only runs approved read-only Graph catalog requests from its backend. Unknown captures can be
loaded, exported, or sent to Guide, but they are not automatically executed.
- Write-looking requests, POST bodies, and non-Graph portal API calls are treated as explanation/export material.
You decide what to run outside Azure Helper under your own credentials.
- Captured calls are kept in browser extension storage for handoff between the DevTools panel and the side
panel. Your Azure Helper subscription and tenant permissions still come from the hosted app.
No calls captured
The DevTools panel is open, but the list is empty
- Make sure Developer Tools is opened for the Microsoft portal tab itself, not for the Azure Helper side
panel, a new tab page, or another website.
- Refresh the Microsoft portal page after opening the Azure Helper DevTools tab.
- Navigate inside the portal or click the portal's own refresh button to trigger new network calls.
- Confirm the page is a supported Microsoft admin portal or Microsoft Graph/admin API flow.
5. Common errors and fixes
"Too many requests" / RATE_LIMITED (429)
You hit a temporary rate limit
This protects the service from abuse and resets automatically within a minute. It can happen during a busy
sign-in + tenant-connect + tenant-discovery sequence.
fixWait about 60 seconds and try again. If it
keeps happening on normal use, contact support — it may need a higher limit for your account.
TENANT_CONSENT_REQUIRED / AADSTS7000229
"This tenant hasn't completed admin consent yet"
The Home dashboard (or another live data view) shows this when Azure Helper's app registration hasn't been
consented to in the connected tenant yet.
fixOpen Connection →
find the tenant → click "Grant data access". A Global Administrator of that tenant needs to approve the
read-only permissions popup. Live data appears immediately after.
ENTRA_RELINK_REQUIRED
"Reconnect Entra sign-in to discover tenants"
Tenant discovery (the "other tenants you can access" list) needs an extra delegated permission. If your
account linked Entra before this was added, it needs a one-time refresh.
fixClick "Reconnect Entra sign-in" in the
Connection panel and complete the Microsoft sign-in popup once. After that, tenant discovery works
automatically.
AADSTS1003031 — "Misconfigured required resource access"
Admin-consent popup shows a Microsoft configuration error
This is an app-registration configuration issue (duplicate or invalid permission entries), not something the
person granting consent can fix on their side.
fixContact support with the tenant domain you
were trying to connect — this needs to be fixed on the Azure Helper app registration, then you can retry the
"Grant data access" link.
MULTITENANT_PLAN_REQUIRED (402)
"Partner plan unlocks more tenants"
Azure Helper Pro supports one connected tenant. This appears when a Pro account tries to connect a second
tenant.
fixUpgrade to Azure Helper Partner from
pricing, or disconnect the current tenant before connecting a different
one.
Conditional Access policy count shows "—"
Dashboard tile can't read CA policies
This tile needs the Policy.Read.All permission, granted as part of "Grant data
access". If it's still showing "—" after consent, the permission may not have propagated yet.
fixRe-run "Grant data access" for the tenant,
wait a few minutes, and reload. If it's still missing, contact support.
Magic link email never arrives
Sign-in email not received
- Check spam/junk folders — first-time senders are sometimes filtered.
- Make sure you typed your email correctly (no typos, no extra spaces).
- Magic links expire after a short window — request a new one rather than reusing an old email.
fixStill nothing after a few minutes and a
spam-folder check? Contact support from a different email address so we can investigate delivery.
6. Billing & plans
- Azure Helper Pro — €19/mo: one administrator account, one connected Microsoft Entra tenant.
- Azure Helper Partner — €39/mo: one administrator account, multiple connected tenants, with the active
tenant switcher and tenant discovery described above.
- Subscriptions are billed and managed through Stripe. You can cancel at any time; access continues until the
end of the current billing period.
- If checkout isn't available yet for your account, you can join the waitlist from the sign-in screen — we'll
email you when it opens.
- For invoices, plan changes, or billing questions, contact support — see below.
7. Privacy & security
- Azure Helper is read-only — it cannot create, modify, or delete anything in your tenant or
subscription. See the full Privacy Policy and Terms of
Service.
- Refresh tokens are encrypted at rest and never exposed to the browser.
- You can disconnect a tenant or request account deletion at any time — see contact.
For account, billing, tenant-connection, or bug reports, reach the Azure Helper team using the address below.
It's shown as an image to keep it off spam-bot mailing lists — type it into your email client manually.
Please include the email address your Azure Helper account uses, the tenant domain (if relevant), and what you
were trying to do — this helps us respond faster.