How to assign roles to an azure user from azure active directory?

Question

Hi All,

I have a user on Azure. I have assigned different roles to that user like Global Administrator, Global Reader, Power Platform Administrator, Dynamics 365 Administrator and Application developer. But the user doesn't have access to any resources on Azure like storage accounts and Function Apps. I assigned the roles using an Global Administrator account.
Is there any other thing I need to enable to provide access to this Azure user?

Any kind of help is appreciated.
Thanks.

Answer 1

Hi @ABDUL-SHAHIED SHAHID

Thank you for posting your query on Microsoft Q&A.

The roles you have assigned already are Azure AD roles i.e Global Administrator. But the roles required to access Azure Resources are slightly different. We have a comparison here - https://learn.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles#differences-between-azure-roles-and-azure-ad-roles

To provide roles which grant access to Azure Resources you would do this at the subscription level. First navigate to the subscription you wish to assign the user access too, then click on "Access Control" - +Add

You can grant the user an RBAC role from here which will allow them to access the Storage accounts etc..

For reference here is a list of the possible roles you can grant -https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

Let me know if you have any further queries and I would be happy to help.

Kind Regards,

Donal