Transition to role-based access control (RBAC) in Azure by 31 August 2024

Question

Hello, there's a service administrator under classic admin on many of our subscriptions. It was automatically put there using the old ea.azure.com portal when we used setup service account for these subscriptions. If we remove this service account under classic admin, will there be any issues? We have other subscription owners already assigned.

Answer 1

Hi @OZesatiSA ,

You'll need to transition the service account to an Owner role.

As a safety measure, I would suggest adding an extra Owner role. The Owner role has the same access as the Service Administrator.

To remove the Service Administrator, you need to have a user who is assigned the Owner role at subscription scope without conditions to avoid orphaning the subscription. A subscription Owner has the same access as the Service Administrator. You can remove the Service Administrator role under Access control (IAM) > Classic aministrators

If the information helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar questions.