Can't edit blocks of resource groups

Question

Hi, I am trying to add a block on my resource group, but I get this error:

"You are not authorized to modify the blocks"

Can someone tell me how can I solve this? My boss gave me Global Admin Permissions but I still can't edit this...

Thanks,

Regards,

Salvatore

Answer 1

Hi @Salvatore Bello ,

you need Contributor role member role on Azure resources to modify/edit the resource.

The Global Admin role is related to Microsoft Entra ID not to Azure resources.

Source: https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#all-roles

Source: https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#general

---

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards

Andreas Baumgarten

Answer 2

Please find the way to remove the lock here https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources?tabs=json

kind regards,

Fabian

Answer 3

Hi @Salvatore Bello

Thank you for posting this in Microsoft Q&A.

Global Administrator role is a Directory level role, in order to work with resources within subscription need RBAC roles. Both RBAC and Entra roles are different. However Global Admin have a privilege to elevate their access to Azure subscription and deployed resources.

For your reference: Elevate access to manage all Azure subscriptions and management groups

To create or delete management locks, you must have the Owner role or the User Access Administrator role, as they possess the necessary permissions.

For your reference: create or delete locks

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.