Can you restrict global admin from access over an Azure subscription and resources?

Dramatic Donut © 20 Reputation points
2024-10-08T02:19:57.08+00:00

Hello,

Is there any way to restrict another global account from being able to self-elevate his permissions to "User Access Administrator" role and get access to Azure subscription and its resources? I am trying to restrict a third-party vendor (with soon to be given GA access) from being able to snoop around and be able to access infrastructure resources for one of our clients. Thank you in advance!

Max

Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
5,176 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,069 questions
0 comments No comments
{count} votes

Accepted answer
  1. Navya 11,790 Reputation points Microsoft Vendor
    2024-10-09T06:11:37.8966667+00:00

    Hi @Dramatic Donut ©

    Thank you for posting this in Microsoft Q&A.

    I understand that your concerned about restricting a third-party vendor with Global Administrator (GA) access from self-elevating their permissions to "User Access Administrator" role, which would grant them access to Azure subscription and its resources.

    Unfortunately, there is no way to restrict global administrator account from being able to self-elevate his permissions to "User Access Administrator" role and get access to Azure subscription and its resources.

    Hope this helps. Do let us know if you any further queries.

    Thanks,

    Navya.

    If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.


0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.