Creating Azure Admin Account

Question

I want to create an Administrative Account for my Azure Environment, but I'm unsure how to do that to ensure the account has needed rights.

Can anyone provide instructions to accomplish this?

Thanks

Answer 1

Hi Robert,

It depends on the access the Administrator needs.

We recommend always using the least privilege required.

Here's a list of the built-in roles.

https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference

The Azure AD roles include:
Global administrator – the highest level of access, including the ability to grant administrator access to other users and to reset other administrator’s passwords.
User administrator – can create and manage users and groups, and can reset passwords for users, Helpdesk administrators and User administrators.
Helpdesk administrator – can change the password for users who don’t have an administrator role and they can invalidate refresh tokens, which forces users to sign back in again.
Billing Administrator – can make purchases and manage subscriptions.