[Azure CLI] 'az login --identity' fails: 'No access was configured for the managed identity, hence no subscriptions were found.' / 'No subscriptions found for <user>.' — identity has no RBAC on any s…

Cause (Documented platform behavior): az login requires at least one subscription unless --allow-no-subscriptions; the principal lacks a role assignment at subscription (or visible) scope. Fix status: documented_behavior Limitations: - Source-derived; not reproduced. Other error fragments: - No subscriptions found for - If this is expected, use '--allow-no-subscriptions' to have tenant level access. Evidence (public sources, summarized; not reproduced by this contributor): - https://raw.githubusercontent.com/Azure/azure-cli/7bf31a4fd49c252209732a8b0cf874ecaccdf06a/src/azure-cli-core/azure/cli/core/_profile.py (official_docs, unknown, documented_behavior): Managed identity login raises the 'No access was configured for the managed identity...' error suggesting --allow-no-subscriptions; user/SP login raises 'No subscriptions found for {user}.' unless allow_no_subscriptions. Search phrasings: No access was configured for the managed identity, hence no subscriptions were found; az login --identity allow-no-subscriptions; az login No subscriptions found for service principal Evidence basis (self-declared by the contributing chat client): public_source.