Assign RBAC role action gave error fail to remove classic administrator

Question

Assign RBAC role action gave error fail to remove classic administrator

Arcand 0

So i navigated to the azure subscription to check the existing classic administrators. I have one service administrator. I click the remediation link "assign RBAC role". I receive the green check marks that the user now has eligible timebound assignment for Owner roles.

But, i also get an error: "failed to remove [USER NAME] as classic administrator: Call GSM to delete service admin on subscription [Subscription number]. Failed. Exception: subscription [Subscription number] has no owner.

Tried to open a support but i am pushed to Q&A.

1 answer

Your answer

Answer 1

Divyesh Govaerdhanan 6,400

Hello,

Welcome to Microsoft Q&A,

Eligible role assignments provide just-in-time access to a role for a limited period. You need to add the user account to owner role and then remove the classic administrator. Please follow the steps to create the user account as owner instead of eligible timebound assignment.
https://learn.microsoft.com/en-us/azure/role-based-access-control/classic-administrators?tabs=azure-portal
*
Please Upvote and Accept the answer if it helps!!*

Bandela Siri Chandana 3,055 Reputation points Microsoft External Staff Moderator

2025-03-20T06:14:57.97+00:00

Hi @Arcand
I hope answer provided by @Divyesh Govaerdhanan was helpful. In Addition,

As you are encountering error to remove [USERNAME] as classic administrator because subscription [Subscription number] has no owner. This is because before you remove the Service Administrator, you must have at least one user who is assigned the Owner role at subscription scope without conditions to avoid orphaning the subscription. A subscription Owner has the same access as the Service Administrator.

So, Convert Service Administrator to Owner role by following the above document.

Hope this helps. Do let us know if you have any further queries.
Bandela Siri Chandana 3,055 Reputation points Microsoft External Staff Moderator

2025-03-21T05:08:56.4333333+00:00

Hi @Arcand
Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.
Bandela Siri Chandana 3,055 Reputation points Microsoft External Staff Moderator

2025-03-24T02:58:02.02+00:00

Hi @Arcand
Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.
Arcand 0 Reputation points

2025-03-26T20:12:07.5633333+00:00

Hi Bandela,

I have my user as an owner in the Eligible time-bound assignment. It is not activated and i believe should only be done when needed. Am i understanding the process correctly? Should i have my user as an active permanent assignments as owner?

thanks
Bandela Siri Chandana 3,055 Reputation points Microsoft External Staff Moderator

2025-03-27T09:45:35.74+00:00

Hi @Arcand
Yes, you are in the correct path you need to have an active permanent assignment as owner. If you have Eligible time-bound assignment you cannot perform respective actions.

Hope this helps. Do let us know if you have any further queries.

Share via

Assign RBAC role action gave error fail to remove classic administrator

1 answer

Your answer