Changed Roles to RBAC as notified but it still shows the Alarm Icon

James Emery 20 Reputation points
2025-03-18T19:18:43.35+00:00

I updated the roles as requested from an email notice. However, it still shows an Alarm Icon. Since there are no more 'Classic Administrators' shouldn't this be resolved? Screenshot 2025-03-18 131536.png Thank you.

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
975 questions
0 comments No comments
{count} votes

Accepted answer
  1. Sanoop M 4,310 Reputation points Moderator
    2025-03-18T23:29:05.05+00:00

    Hello @James Emery,

    Thank you for posting your query on Microsoft Q&A.

    When I reviewed the Screenshot which you have attached, I can see that there are two Action Required statements.

    Please note that regarding the First Action Required statement which is attached below, it is a general Warning statement which is shown in all the Microsoft Entra tenants as a Precautionary measure that As of August 31, 2024, Azure classic administrator roles (along with Azure classic resources, Azure Service Manager) are retired and are no longer supported.

    Please note that even though if you don't have any Classic Administrator role assignments(Co-Administrator and Service Administrator roles) in your tenant, and you have converted those roles to Azure RBAC, the first Action Required statement which is attached below would still be visible in all the Microsoft Entra tenants.

    User's image

    Regarding the second Action Required statement, it is stating that 1 user in your tenant has elevated access. Please select Role assignments tab as highlighted in the below Screenshot or Select the View role assignments link to view a list of users with elevated access and remove all the role assignments with elevated access.

    User's image

    Remove elevated access for users

    If you have users with elevated access, you should take immediate action and remove that access. To remove these role assignments, you must also have elevated access. This section describes how to remove elevated access for users in your tenant using the Azure portal. This capability is being deployed in stages, so it might not be available yet in your tenant.

    1. Sign in to the Azure portal as a Global Administrator.
    2. Browse to Microsoft Entra ID > Manage > Properties.
    3. Under Access management for Azure resources, set the toggle to Yes as described earlier in Step 1: Elevate access for a Global Administrator.
    4. Select the Manage elevated access users link. The Users with elevated access appears pane appears with a list of users with elevated access in your tenant. Screenshot of Users with elevated access pane that lists users with elevated access.
    5. To remove elevated access for users, add a check mark next to the user and select Remove.

    For additional details regarding both the Action Required Statements, please refer to the below documents for your reference.

    Azure classic subscription administrators | Microsoft Learn

    Elevate access to manage all Azure subscriptions and management groups | Microsoft Learn

    I hope this above information provided is helpful. Please feel free to reach out if you have any further questions.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
  1. Divyesh Govaerdhanan 6,400 Reputation points
    2025-03-18T23:29:50.1133333+00:00

    Hello,

    Welcome to Microsoft Q&A,

    Yes, the alarm icon in the Classic Administrators tab will still be displayed even if there are no active users listed. This icon serves as an indicator that the Classic Administrators tab is deprecated and should no longer be used for assigning roles. Microsoft will eventually remove the Classic Administrators tab entirely, but until then, the alarm icon remains as a reminder to use RBAC roles instead. No action is required if all Classic Administrators have been removed and roles are migrated to Azure RBAC.

    Please Upvote and Accept the Answer if it helps!!

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.