# Check resource-level authority when an Azure Advisor dismissal fails

> A visible recommendation action can still fail its permission check.

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260917-130-check-resource-level-authority-when-an-azure-advisor-dismissal-fails/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-17T16:32:50+00:00
- Modified: 2026-09-17T16:42:36+00:00
- Last reviewed by DSE: 2026-09-17
- Resource type: Guide
- DSE priority: Information
- Topics: Cybersecurity, IT
- Reading time: 1 minutes

## What you need to know

A visible recommendation action can still fail its permission check.

## Potentially affected

Use this review for a specific Advisor recommendation that the operator is authorized to manage. Identify its associated resource and the reason for the proposed disposition. Access to a recommendation screen should not be used as evidence that every action on every resource is authorized.

## DSE recommendation

DSE recommends asking the resource owner to review both the requested disposition and the required action permission.

## Article

## Source facts

Microsoft’s Advisor permission guide says an error when postponing or dismissing a recommendation can indicate insufficient permission. Its prescribed check is the permission level on the resource associated with that recommendation, including whether the operator has Contributor or higher access there. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/advisor/permissions).

## Applicability

Use this review for a specific Advisor recommendation that the operator is authorized to manage. Identify its associated resource and the reason for the proposed disposition. Access to a recommendation screen should not be used as evidence that every action on every resource is authorized.

## DSE recommendation

DSE recommends asking the resource owner to review both the requested disposition and the required action permission. Prefer having an already authorized owner perform the approved action where appropriate, rather than granting broad additional access for convenience. Preserve the recommendation identifier, original status and rationale in the work record before changing it.

## Verification

Inspect effective permissions at the associated resource and document the authorized route chosen. After the approved action, confirm the recommendation’s resulting state and ensure that the rationale remains accessible to the responsible team. Record any unresolved permission error without treating the attempted dismissal as complete. Include the recommendation in the owner’s ordinary review process.

## Official references

[Microsoft Learn: Roles and permissions](https://learn.microsoft.com/en-us/azure/advisor/permissions).

## Primary reference

- Name: Roles and permissions - Azure Advisor | Microsoft Learn
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/azure/advisor/permissions
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Check resource-level authority when an Azure Advisor dismissal fails,” DSE Security, https://update.dsesecurity.com/updates/dse-20260917-130-check-resource-level-authority-when-an-azure-advisor-dismissal-fails/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.