Move Subscription to Management Group

Question

Hi Team,

We have created management groups (have Owner access) and have a few subscriptions with Owner access. When we try to move the subscriptions to the management groups from portal , getting error as below

Add subscription failed. An error occurred. {"code":"BadRequest","message":"Permission to write and delete on resources of type 'Microsoft.Authorization/roleAssignments' is required on the subscription or its ancestors.

Tried using Azure CLI and getting the same error:

Message: Permission to write and delete on resources of type 'Microsoft.Authorization/roleAssignments' is required on the subscription or its ancestors.

Person with Global Admin access also tried the same and getting this error.

As per my understanding Owner access has roleAssignment permission in it. What else need to be completed in-order to move the subscription to management group?

Answer 1

Have the person with the Global Admin role step through the following procedure first:

https://learn.microsoft.com/en-us/azure/role-based-access-control/elevate-access-global-admin?tabs=azure-portal

and then try again

---

hth

Marcin