title: Azure Resource Manager API Permissions for Subscription Co-Admin
body: <p>I am trying to create a asp.net core based solution using the Azure Resource Manager API libraries to manage resources on a single subscription.</p>
  
  <p>When I try to authenticate using an subscription co-administrator account I receive permissions errors. Below is the steps I have tried.</p>
  
  <p><strong>Created a project based on following examples:</strong>
  <a href="https://github.com/pratapbhaskar/azure-resource-manager-active-directory" rel="nofollow noreferrer">https://github.com/pratapbhaskar/azure-resource-manager-active-directory</a>
  <a href="https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-api-authentication" rel="nofollow noreferrer">https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-api-authentication</a></p>
  
  <p><strong>In management portal:</strong></p>
  
  <ol>
  <li>Created active directory app entry.</li>
  <li>Set AD app entry Multi-tenanted to True.</li>
  <li>Give AD app entry Azure Active Directory read profile permissions.</li>
  </ol>
  
  <p><strong>Tried logging in to application using subscription co-admin account and received the following error:</strong></p>
  
  <blockquote>
    <p>AADSTS65005: The client application has requested access to resource
    '<a href="https://management.core.windows.net/" rel="nofollow noreferrer">https://management.core.windows.net/</a>'. This request has failed
    because the client has not specified this resource in its
    requiredResourceAccess list.</p>
  </blockquote>
  
  <p><strong>Attempted fix:</strong></p>
  
  <ol>
  <li>Open AD app and add permissions for: "Windows Azure Service Management API"</li>
  <li>Add delegated permissions "Access Azure Service Management as organization users (preview)"</li>
  </ol>
  
  <p><strong>Tried logging in to application using subscription co-admin account and received the following error:</strong></p>
  
  <blockquote>
    <p>AADSTS90093: This application requires application permissions to another application. Consent for application permissions can only be
    performed by an administrator. Sign out and sign in as an
    administrator or contact one of your organization's administrators.</p>
  </blockquote>