Cannot delete Access to Azure Active directory subscription

Question

Cannot delete Access to Azure Active directory subscription

Anonymous

Get this error when I try to delete

User's image

JamesTran-MSFT 36,906 Reputation points Microsoft Employee Moderator

2024-01-05T20:25:15.8933333+00:00

@Jenn Bertolani

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.
SadiqhAhmed-MSFT 49,326 Reputation points Microsoft Employee Moderator

2024-01-12T20:52:29.1433333+00:00

Hello @Jenn Bertolani We noticed your recent experience on the Q&A community platform was rated "Low". Thank you for taking time to share your feedback. We are eager to know what could have been done better to evolve your experience to a "High" rating. Your candid feedback is very important to us. Looking forward to your reply. Just adding my 2 cents here:

Global Admin (GA) access is a directory level permission. Whereas Owner, Contributor, Account Admin or service admin are subscription level access roles. With just GA access you would not be able to cancel an Azure subscription. As mentioned by Dillon earlier, you need combination of roles/access to perform subscription cancellation task.

In some cases, where you have been granted access as Global Admin in an external directory/tenant but that doesn't mean you have access to their subscription.

To fix this issue, I strongly recommend you reach out to Azure billing and subscription management team by raising a support request. The ticket enables you to work closely with the support engineers and get a quick resolution to your issue. Here is the link - https://docs.microsoft.com/en-us/azure/azure-portal/supportability/how-to-create-azure-support-request to create support case. FYI: Azure Billing and Subscription Management support is included in the Basic Support Plan without any charge. https://azure.microsoft.com/en-us/support/plans/ Let us know how it goes. And please write back to us if there are any challenges.

Hope this helps!
SadiqhAhmed-MSFT 49,326 Reputation points Microsoft Employee Moderator

2024-01-15T16:34:11.6466667+00:00

@Jenn Bertolani Checking in to see if the previous answer helped. If yes, please do "Accept Answer" and Up-Vote it. Let us know if there are still any additional issues we can he with. IMPORTANT: Appreciate if you could share more details about "What went wrong" or "What caused dissatisfaction" that forced you to rate your overall experience as "Low". Thanks!
SadiqhAhmed-MSFT 49,326 Reputation points Microsoft Employee Moderator

2024-01-24T08:04:45.6566667+00:00

@Jenn Bertolani We haven't heard back from you. Please reply if you have any questions in this matter and we will gladly continue the discussion.
Greg Olson 0 Reputation points

2024-04-03T21:31:59.6766667+00:00

Unfortunately, all the above answers are correct for a normal subscription, but don't work for these old legacy subscriptions. These are old pre-portal subscriptions that have been deprecated by MS and the only way to remove them is by opening a support ticket for MS to remove. You can find more info here:

https://www.jasonfritts.me/2020/04/07/what-is-the-access-to-azure-active-directory-subscription-for/
SadiqhAhmed-MSFT 49,326 Reputation points Microsoft Employee Moderator

2024-04-04T14:36:19.9533333+00:00

@Greg Olson Thanks for sharing the solution.

2 answers

Your answer

JamesTran-MSFT 36,906 Reputation points Microsoft Employee Moderator

2024-01-05T20:25:15.8933333+00:00

@Jenn Bertolani

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.
SadiqhAhmed-MSFT 49,326 Reputation points Microsoft Employee Moderator

2024-01-12T20:52:29.1433333+00:00

Hello @Jenn Bertolani We noticed your recent experience on the Q&A community platform was rated "Low". Thank you for taking time to share your feedback. We are eager to know what could have been done better to evolve your experience to a "High" rating. Your candid feedback is very important to us. Looking forward to your reply. Just adding my 2 cents here:

Global Admin (GA) access is a directory level permission. Whereas Owner, Contributor, Account Admin or service admin are subscription level access roles. With just GA access you would not be able to cancel an Azure subscription. As mentioned by Dillon earlier, you need combination of roles/access to perform subscription cancellation task.

In some cases, where you have been granted access as Global Admin in an external directory/tenant but that doesn't mean you have access to their subscription.

To fix this issue, I strongly recommend you reach out to Azure billing and subscription management team by raising a support request. The ticket enables you to work closely with the support engineers and get a quick resolution to your issue. Here is the link - https://docs.microsoft.com/en-us/azure/azure-portal/supportability/how-to-create-azure-support-request to create support case. FYI: Azure Billing and Subscription Management support is included in the Basic Support Plan without any charge. https://azure.microsoft.com/en-us/support/plans/ Let us know how it goes. And please write back to us if there are any challenges.

Hope this helps!
SadiqhAhmed-MSFT 49,326 Reputation points Microsoft Employee Moderator

2024-01-15T16:34:11.6466667+00:00

@Jenn Bertolani Checking in to see if the previous answer helped. If yes, please do "Accept Answer" and Up-Vote it. Let us know if there are still any additional issues we can he with. IMPORTANT: Appreciate if you could share more details about "What went wrong" or "What caused dissatisfaction" that forced you to rate your overall experience as "Low". Thanks!
SadiqhAhmed-MSFT 49,326 Reputation points Microsoft Employee Moderator

2024-01-24T08:04:45.6566667+00:00

@Jenn Bertolani We haven't heard back from you. Please reply if you have any questions in this matter and we will gladly continue the discussion.
Greg Olson 0 Reputation points

2024-04-03T21:31:59.6766667+00:00

Unfortunately, all the above answers are correct for a normal subscription, but don't work for these old legacy subscriptions. These are old pre-portal subscriptions that have been deprecated by MS and the only way to remove them is by opening a support ticket for MS to remove. You can find more info here:

https://www.jasonfritts.me/2020/04/07/what-is-the-access-to-azure-active-directory-subscription-for/
SadiqhAhmed-MSFT 49,326 Reputation points Microsoft Employee Moderator

2024-04-04T14:36:19.9533333+00:00

@Greg Olson Thanks for sharing the solution.

Answer 1

Paul Promise Dzahini 200

Hi Jenn, to be able to delete a subscription you must be the owner of the subscription, and the error you are getting means you don't have the right previlages to perform that actions.
to be able to delete your subscription you should elevate your permission

you can follow the below link for details

https://learn.microsoft.com/en-us/azure/role-based-access-control/elevate-access-global-admin

https://learn.microsoft.com/en-us/azure/cost-management-billing/manage/cancel-azure-subscription

"Please mark as accepted to help others"

Anonymous

2024-01-04T16:00:06.1633333+00:00

Thanks @Paul Promise Dzahini I checked my permissions and have Owner access to Azure management for Azure resources. I had logged out/back in and tried to cancel the subscription but get this error:
Paul Promise Dzahini 200 Reputation points

2024-01-04T16:49:54.7866667+00:00

Hi it seems you are not in the right directory if you have all the permissions please check if are in the right directory if not click on the switch directory link"Please mark as accepted if it helps"
Anonymous

2024-01-04T19:41:40.8633333+00:00

Hello @Paul Promise Dzahini It only shows one directory when I follow the steps
Paul Promise Dzahini 200 Reputation points

2024-01-04T19:51:03.4833333+00:00

Hello @Jenn Bertolani you should review your permission level on the subscription to be able to delete the tenant and subscription

Please review the link below

https://learn.microsoft.com/en-us/azure/cost-management-billing/manage/cancel-azure-subscription#who-can-cancel-a-subscription

"Mark as accepted if it helps"
Anonymous

2024-01-04T20:17:32.54+00:00

Hello @Paul Promise Dzahini Still no luck. Tried to add a co-administrator, under IAM access control option under active Directory and get this error:
Paul Promise Dzahini 200 Reputation points

2024-01-04T20:28:40.8833333+00:00

Did you go through all the documents links shared?

Please All errors you are sharing seem to be permission level I will recommend you review the privileges you have on the tenant to be able to delete or counsel the subscription

https://learn.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles

"Please Don't forget to mark the answer as accepted"
Anonymous

2024-01-04T20:40:09.8+00:00

Hello @Paul Promise Dzahini I did go through the other documents. I will review the one you just sent right now. I really appreciate all of your help!
Anonymous

2024-01-04T20:50:59.38+00:00

Hello @Paul Promise Dzahini Still looking through document on permissions. I am the admin of all the Groups / resources. Just looked at this. Should it be linked?
Paul Promise Dzahini 200 Reputation points

2024-01-04T20:51:37.2866667+00:00

I will be grateful you will mark as accepted if you find this helpful
Paul Promise Dzahini 200 Reputation points

2024-01-04T21:09:02+00:00

Hi @Jenn Bertolani looking at the screenshot you shared you are managing a linked tenant through Azure cross tenant and it is also showing not liked which means the relationship between your tenant and the external organization has been disassociated.

Secondly, you must log in to the external tenant with the right privileges to be able to delete or counsel the tenant

am sorry it looks like you don't have the right privilege to perform the actions you are trying to perform.

Please you can go ahead and seek the right privileges to perform the required actions.

"Please Mark answer as accepted if it helps"
Anonymous

2024-01-05T17:09:38.42+00:00

Hello @Paul Promise Dzahini . Should I relink the subscription. How should I request the correct access? Thank you.
Paul Promise Dzahini 200 Reputation points

2024-01-06T22:07:20.9566667+00:00
Hi @Jenn Bertolani You don't need to relink the tenant, What you have to do is login to the tenant you want to delete with the right privilege in other to perform the actions.

To delete an Azure tenant, you can follow these steps:

Sign in to the Azure portal with a global administrator or subscription administrator role.

Select the Azure Active Directory (AAD) page in the Azure Portal and click the “Manage Tenants” button.

Check the checkmark for the tenant you want to delete and click “Delete”.

Follow the instructions and delete all the required objects

Please "Mark the answer as Accepted" if it is helpful.

Answer 2

Hello Jenn,

You will need one of the following roles to cancel a subscription (Service administrator or Subscription owner):

Who can cancel a subscription?

https://learn.microsoft.com/en-us/azure/cost-management-billing/manage/cancel-azure-subscription#who-can-cancel-a-subscription

The following table describes the permission required to cancel a subscription.

Expand table


Subscriptions created when you sign up for Azure through the Azure website. For example, when you sign up for an Azure Free Account, account with pay-as-you-go rates or as a Visual studio subscriber.	Service administrator and subscription owner
Microsoft Enterprise Agreement and Enterprise Dev/Test	Service administrator and subscription owner
Azure plan and Azure plan for DevTest	Subscription owners

An account administrator without the service administrator or subscription owner role can’t cancel an Azure subscription. However, an account administrator can make themself the service administrator and then they can cancel a subscription. For more information, see Change the Service Administrator.

If this is helpful please accept answer.

Anonymous

2024-01-08T14:31:19.3033333+00:00

Hello @Dillon Silzer Thank you for the response. I am the Global Admin but having issues finding a way to assign myself as a a service admin. It is greyed out:

Share via

Cannot delete Access to Azure Active directory subscription

2 answers

Your answer