Immediate action required: Convert Azure classic administrator roles to Azure RBAC roles

Question

I have received the following email:

Convert to Azure role-based access control (RBAC) You're receiving this additional notice because you use Azure classic administrator roles. Azure classic administrator roles were retired on 31 August 2024 and are no longer supported. If you still have active Co-Administrator or Service Administrator role assignments, convert these roles to Azure RBAC immediately. Required action To avoid service disruptions, convert classic admin roles that still need access to your subscription to Azure RBAC roles immediately. If you do not take action, your subscription may become ownerless and you could lose access to it.

I don't understand how to check who in my organisation is using "classic administrator roles". I have tried following the docs https://learn.microsoft.com/en-gb/azure/role-based-access-control/classic-administrators?tabs=azure-portal#list-classic-administrators but the Resource Graph query returns no results, yet the email claims that my organisation is using these roles. Can anybody help please? The process is extremely confusing and, as always, Microsoft do absolutely nothing to make it user friendly.

Answer 1

Hi @Antonio Riccelli

I understand that you received an email about converting Azure classic administrator roles to Azure RBAC roles, but after following the provided instructions, you found no results.

Microsoft sends this email to all organizations as a proactive measure to ensure no users unexpectedly lose access to their subscriptions.

To verify whether your organization has any classic administrator roles, you can check using both the Azure portal and Microsoft Resource Graph. Since you've already checked via Resource Graph, I recommend cross-checking in the Azure portal as well. If no classic administrator roles are found, you can safely ignore this email.

Steps to Check in Azure Portal:

1.Navigate to Azure Portal → Subscriptions

2.Select your subscription → Go to Classic Administrators tab

3.If no users are listed, it confirms that your subscription has no classic administrator roles

4.If you manage multiple subscriptions, repeat the same steps for each.

Hope this helps. Do let us know if you any further queries.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.