Can you restrict global admin from access over an Azure subscription and resources?

Question

Hello,

Is there any way to restrict another global account from being able to self-elevate his permissions to "User Access Administrator" role and get access to Azure subscription and its resources? I am trying to restrict a third-party vendor (with soon to be given GA access) from being able to snoop around and be able to access infrastructure resources for one of our clients. Thank you in advance!

Max

Answer 1

Hi @Dramatic Donut ©

Thank you for posting this in Microsoft Q&A.

I understand that your concerned about restricting a third-party vendor with Global Administrator (GA) access from self-elevating their permissions to "User Access Administrator" role, which would grant them access to Azure subscription and its resources.

Unfortunately, there is no way to restrict global administrator account from being able to self-elevate his permissions to "User Access Administrator" role and get access to Azure subscription and its resources.

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.