I need to elevate the privilege of my alternate user ******@xxxxxxxx.org to Global Administrator

Question

we have a problem with our on premise AD and I need to elevate the privilege of my alternate user ******@xxxxxxx.org to Global Administrator what should I do ?

Answer 1

Hello Max Brassart Keptos Org,

Based upon your query need to elevate the privilege of my alternate user ******@xxxxxxxx.org to Global Administrator.

First, sign in to the Azure portal using an account that already has Global Administrator rights. If your organization uses Microsoft Entra Privileged Identity Management (PIM), make sure to activate your Global Admin role first.

Then, go to Microsoft Entra ID > Properties. Look for the option called “Access management for Azure resources” and turn the toggle to Yes.

This gives your account extra permissions (called User Access Administrator) that let you manage roles across all Azure subscriptions and management groups in your tenant. Don’t forget to click Save, then sign out and sign back in to refresh your access. This setting only affects your account and no other Global Admins.

Once done, you’ll be able to manage access and assign roles across the whole Azure environment.

Please refer the below doc:

https://learn.microsoft.com/en-us/azure/role-based-access-control/elevate-access-global-admin?tabs=azure-portal%2Centra-audit-logs#step-1-elevate-access-for-a-global-administrator

Let me know if that still doesn't work—we can connect offline and check the behavior together.