title: Azure Data Explorer Cluster - Details: "Access to the resource is forbidden."
body: <p>I went through the steps here. </p>
  
  <p><a href="https://docs.microsoft.com/en-us/azure/data-explorer/create-cluster-database-portal" rel="nofollow noreferrer">https://docs.microsoft.com/en-us/azure/data-explorer/create-cluster-database-portal</a></p>
  
  <p>Created the cluster just fine. Created a database that connects to the cluster. Also set. </p>
  
  <p>Next, I was able to ingest data (using the web query tool - <a href="https://docs.microsoft.com/en-us/azure/data-explorer/web-query-data" rel="nofollow noreferrer">https://docs.microsoft.com/en-us/azure/data-explorer/web-query-data</a> ) as well. So, I definitely have access with the account that created the cluster. Able to run kusto queries and all that. </p>
  
  <p>Then, I found out that Azure Data Explorer works fine with Excel and Kusto desktop tool (available here - <a href="https://docs.microsoft.com/en-us/azure/kusto/tools/kusto-explorer" rel="nofollow noreferrer">https://docs.microsoft.com/en-us/azure/kusto/tools/kusto-explorer</a> )</p>
  
  <p>I tried connecting from the desktop with the Kusto tool.</p>
  
  <p>Then, I tried connecting via Excel. </p>
  
  <p>In both cases, I am getting the exact same error </p>
  
  <p><em>Details: "Access to the resource is forbidden."</em></p>
  
  <p>In both kusto and Excel, I get the same login flow (the standard Microsoft account login widow with 2 factor enabled) and I am able to sign in, as I always do with any Microsoft service. </p>
  
  <p>So, why am I getting the error? </p>
  
  <hr>
  
  <p>detailed error from kusto as follows</p>
  
  <pre><code>    "code": "Forbidden",
      "message": "Caller is not authorized to perform this action",
      "@type": "Kusto.Common.Svc.Exceptions.UnauthorizedOperationException",
      "@message": "Principal 'msauser=xxx@live.com' is not authorized to perform operation 'DiagnosticsShowCommand' on 'https://xxx.southindia.kusto.windows.net:443/'.",
  </code></pre>
  
  <hr>
  
  <p>Update</p>
  
  <p>Adding on to the solution provided below, note for other users. If the web query tool also fails (and gives permission error), under your cluster resource in azure portal (after Overview, but in the same section), you have the option to directly run queries. (Select the option 'Query')</p>