Convert to Azure role-based access control (RBAC)

Question

We got an email with subject "Immediate action required: Convert Azure classic administrator roles to Azure RBAC roles" but we can't do it, Azure portal shows an error.

Any idea on how to solve this?

azure-2.png

Answer 1

Dear Arnoldo Rodriguez Barragan, thank you for reaching out to Microsoft Q&A! Let's address your issue.

Problem what i can see u are received an email requiring the conversion of Azure classic administrator roles to Azure RBAC roles, but when attempting to perform this action in the Azure portal, an error occurs. Hope I right. So let's try to figure it out.

1. Check Current Classic Roles: Navigate to the "Classic administrators" section in the Azure portal. Ensure that you have "Co-Administrator" or "Service Administrator" roles that require conversion.

Determine Equivalent RBAC Roles:

• The "Service Administrator" role can be converted to the "Owner" role in RBAC.

The "Co-Administrator" role can be converted to the "Contributor" role or another appropriate role.

Assign RBAC Roles:

• Go to the "Access control (IAM)" section for your subscription or resource group.

Click "Add" -> "Add role assignment".

Select the appropriate RBAC role and assign it to the user.

Remove Classic Roles:

  After successfully assigning RBAC roles, remove the classic roles from the "Classic administrators" section.
  
  Verify Access:
  
     Ensure that users have the necessary access permissions after the conversion.
     

If the error persists you can check Permissions and Ensure you have "Owner" or equivalent permissions to perform these actions. Clear Cache. Try clearing your browser cache or using a different browser. Use Azure CLI or PowerShell: If the portal is not working, try using the command line:

az role assignment create 

Hope that will help. Bellow some doc's for official MSFT resources.

Migrate Azure classic administrator roles to Azure RBAC:

• Migrate classic subscription administrator roles, Azure roles, and Azure AD roles
• This guide provides detailed steps on how to migrate classic roles to Azure RBAC.

Understand Azure classic subscription administrator roles:

• Azure classic subscription administrator roles, Azure roles, and Azure AD roles
• This document explains the differences between classic roles and Azure

Best regards,

Alex

P.S. If my answer help to you, please Accept my answer