\> How do I assign permission for the new Windows app in Azure?

The error you encountered indicates that the user is not part of the **Desktop Application Group** in Azure Virtual Desktop.

To resolve this issue, **users must be assigned to the application group** for the resources to appear in the Windows app. Follow the official guide: [Deploy Azure Virtual Desktop](https://learn.microsoft.com/en-us/azure/virtual-desktop/deploy-azure-virtual-desktop?tabs=portal-session-host-configuration%2Cportal-standard%2Cportal&pivots=host-pool-standard).

To assign users to the application group, you also need the `Microsoft.Authorization/roleAssignments/write` permission on the application group. Built-in RBAC roles that include this permission are [User Access Administrator](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#user-access-administrator) and [Owner](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#owner).

If you have not created any host hostpool, you need to first create and configure a host pool. Follow the link: https://learn.microsoft.com/en-us/azure/virtual-desktop/configure-host-pool-personal-desktop-assignment-type?tabs=azure%2Cazure2#configure-direct-assignment for more details.

If the user is not part of the group, they will see the error:

**"Your system administrator hasn't set up any resources for you yet."**