Problem: When I try to access the RMS console, I get a message in the page: "Forbidden"

Solution: You must login using a user identity that is a member, not guest, of the Azure Entra directory for your tenant.

The RMS console is the web UI where you can manage some of the features of RMS and run the automated AMS migration process. It uses Azure Entra (Azure AAD) for authentication. If you try to login and receive the message "Forbidden", this means that your user identity is not a member of the Azure Entra directory for the tenant.

The Azure Entra user can be a member or guest user. The RMS console authentication works only with members. If your user identity is listed in Azure Entra as guest, you will not be able to login.