Privileged Roles not Available for Assignment in Azure Portal

Question

The requirement is to assign the Contributor + Role Based Access Control Administrator or the Owner role on a resource group to service principal. When selecting the IAM blade of the resource group and searching for the roles, only 2 privileged roles are displayed, as opposed to 4 roles, as noted in this article - https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments-steps. Attaching a screenshot of the 2 roles available. I can assign the Contributor role, but cannot see the other roles at all. I have Owner permission on this specific resource group, inherited from the subscription. So, technically, I should be able to manage all aspects of the RG.

Another piece of information - This does not seem like an IAM issue, because I have been able to assign Role Based Access Control Administrator through Azure CLI on the same RG. The issue appears to be on the presentation/availability of roles in the UI.
Any ideas on what might be causing this behaviour?

Thanks in advance.

Answer 1

Hi @Amal Antony

I understand you are unable to see all the privileged roles when trying to assign roles on a resource group to a service principal in the Azure portal.

There may be restrictions on the role assignments you receive. View the roles assigned to you and Check if there is a condition that constrains the role assignments.

To resolve this problem, please follow the instructions in this document: https://learn.microsoft.com/en-us/azure/role-based-access-control/troubleshooting?tabs=bicep#symptom---roles-or-principals-are-not-listed

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.