Immediate action required: Convert Azure classic administrator roles to Azure RBAC roles

Question

I just received this email - Immediate action required: Convert Azure classic administrator roles to Azure RBAC roles - I tried to log on as the service admin and I cannot access my account the way it used to be. I need help ASAP

Answer 1

Hello Samuel Hagopian,

The reason behind receiving an email is starting on April 30, 2025, any Co-Administrator or Service Administrator role assignments will lose access. If you currently have any active Co-Administrator or Service Administrator role assignments, it is crucial to convert these to Azure RBAC roles immediately to ensure continued access.

To assist you with this transition, please refer to the detailed steps provided in the Microsoft documentation on converting a Service Administrator to an Owner role.

You can find the guide here:- https://learn.microsoft.com/en-us/azure/role-based-access-control/classic-administrators?tabs=azure-portal#service-administrator-retirement

Hope this helps!

let us know if you have any further queries. I’m happy to assist you further.  

Please provide your valuable comment
Please do not forget to "Accept the answer” and “upvote it” wherever the information provided helps you, this can be beneficial to other community members.it would be greatly appreciated and helpful to others

Thanks

Answer 2

Hello Samuel Hagopian,

Since you tried to log on as the service admin but cannot access the account the way you used to be, check with Account Administrator or Co-Administrator who's having these roles and ask them to assign the Owner access for you.

If you failed despite trying with them also, follow the below steps and assign the Owner role at subscription scope.

What should I do if I lose access to a subscription?

• If you lost your classic administrators without having at least one Owner role assignment for a subscription, you will lose access to the subscription and the subscription will be orphaned. To regain access to a subscription, you can do the following:
  • Follow steps to elevate access to manage all subscriptions in a tenant. Link: https://learn.microsoft.com/en-us/azure/role-based-access-control/elevate-access-global-admin?tabs=azure-portal%2Centra-audit-logs
  • Then assign the Owner role at subscription scope for a user.
  • Remove elevated access.

Note: You can elevate the access only by having the Global Administrator role in Microsoft Entra ID.

So, please connect with your Global Administrator who has that privilege and ask them to follow the above steps and grant the Owner access for users.

following this method, you can access to your account and able to grant the owner access.

Reference solutions to grant Owner access: https://learn.microsoft.com/en-us/answers/questions/1617814/how-to-convert-transition-classic-admin-roles-to-a

Hope this helps!

If you have any concerns or queries, please let us know we will help you promptly.  

Please provide your valuable comments.

Please do not forget to "Accept the answer” and “upvote it” wherever the information provided helps you, this can be beneficial to other community members.it would be greatly appreciated and helpful to others.

Thanks