When setting up a Cloud Management Gateway (CMG) in SCCM/Configuration Manager, you may encounter an issue where the Subscription ID drop‑down list remains blank even after a successful Azure sign‑in. While the dialog correctly displays the Azure AD app and tenant names, the Subscription ID field shows a red exclamation mark and fails to populate. This problem is typically caused by missing Azure subscription owner permissions, even if the user has Global Administrator rights. In this guide, we’ll explain the cause, show how to verify permissions, and provide the steps to resolve the issue.
Symptoms – Subscription ID Drop‑Down Blank in SCCM CMG Setup
When configuring the Cloud Management Gateway (CMG) in SCCM/Configuration Manager, the Subscription ID drop‑down list remains blank even after a successful Azure sign‑in. The setup wizard correctly displays the Azure AD app and tenant names, but the Subscription ID field stays empty and shows a red exclamation mark.
This issue can occur even if the user has Global Administrator permissions in the Microsoft Azure tenant, highlighting that Global Admin rights alone are not sufficient for CMG setup.

Root Cause – Missing Azure Subscription Owner Permission
To make changes to an Azure subscription, the user must have Subscription Owner permissions. In this scenario, although the user had Global Administrator rights, the Subscription Owner role was not assigned, which prevented the CMG setup from completing successfully.
Solution – Assign Azure Subscription Owner Role
The user must be assigned Azure Subscription Owner permissions to make changes at the subscription level. An existing administrator can grant the Owner role (an Azure RBAC role) at the subscription scope. For detailed steps, refer to the official Microsoft documentation on assigning the Subscription Owner role.

Related Posts:
- SCCM Application Deployment Failed with Error 0x87d01106 | ConfigMgr
- SCCM Client Installation Failed With Error Code 0x87d00215
- PXE-E99: Unexpected network error – SCCM OSD
- Configuration Manager OSD task sequence fails with error code 0x80004005
- MECM OSD Task Sequence Failed with Error 0x80072EE7
- SCCM Client Push Installation Failed with Error 0x800706ba
- Failed to Add Update Source for WUAgent of type (2) and id ({ID). Error = 0x80004005
- SCCM OSD – Domain Join Failed with Error code 0x54b on HP Elitebook 840 G8
- ccmsetup failed with error code 0x87d00227
- Fix Application Deployment error 0x87d00213 in ConfigMgr
- CMG Connection Point Status Disconnected | SCCM | ConfigMgr
- CMG Setup – Subscription ID drop down not populating
- CMG Setup – Error when granting Contributor permission to the Azure AD app
- Failed to connect with DP – Error Code 0x8004100e | ConfigMgr | SCCM
- SCCM Client Installation Failed with error 0x87d0027e
- ConfigMgr OSD – PXE Troubleshooting
- SCCM WSUS sync error – Sync Failed – WSUS server not configured
- SCCM Software Distribution Troubleshooting
Subscribe to Techuisitive Newsletter
Be the first to know about our new blog posts. Get our newsletters directly in your inbox and stay up to date about Modern Desktop Management technologies & news.