Assign a user as an administrator of an Azure subscription

To make a user an administrator of an Azure subscription, assign them the Owner role at the subscription scope. The Owner role gives the user full access to all resources in the subscription, including the permission to grant access to others. These steps are the same as any other role assignment.


To assign Azure roles, you must have:

Step 1: Open the subscription

  1. Sign in to the Azure portal.

  2. In the Search box at the top, search for subscriptions.

  3. Click the subscription you want to use.

    The following shows an example subscription.

    Screenshot of Subscriptions overview

Step 2: Open the Add role assignment page

Access control (IAM) is the page that you typically use to assign roles to grant access to Azure resources. It's also known as identity and access management (IAM) and appears in several locations in the Azure portal.

  1. Click Access control (IAM).

    The following shows an example of the Access control (IAM) page for a subscription.

    Screenshot of Access control (IAM) page for a subscription.

  2. Click the Role assignments tab to view the role assignments at this scope.

  3. Click Add > Add role assignment.

    If you don't have permissions to assign roles, the Add role assignment option will be disabled.

    Screenshot of Add > Add role assignment menu.

    The Add role assignment page opens.

Step 3: Select the Owner role

The Owner role grant full access to manage all resources, including the ability to assign roles in Azure RBAC. You should have a maximum of 3 subscription owners to reduce the potential for breach by a compromised owner.

  1. On the Role tab, select the Privileged administrator roles tab.

    Screenshot of Add role assignment page with Privileged administrator roles tab selected.

  2. Select the Owner role.

  3. Click Next.

Step 4: Select who needs access

  1. On the Members tab, select User, group, or service principal.

    Screenshot of Add role assignment page with Add members tab.

  2. Click Select members.

  3. Find and select the user.

    You can type in the Select box to search the directory for display name or email address.

    Screenshot of Select members pane.

  4. Click Save to add the user to the Members list.

  5. In the Description box enter an optional description for this role assignment.

    Later you can show this description in the role assignments list.

  6. Click Next.

Step 5: Assign role

  1. On the Review + assign tab, review the role assignment settings.

  2. Click Review + assign to assign the role.

    After a few moments, the user is assigned the Owner role for the subscription.

    Screenshot of role assignment list after assigning role.

Next steps