New user created doesn't have access to the subscription and the resources under the subscription.

Gopalakrishnan Kalan 21 Reputation points
2021-06-29T08:10:36.433+00:00

I am using the free access subscription for trying and learning purposes. Have created a new user in AAD and assigned the global administrator role.
But when I login with this new user, the user doesn't have access to the resources of the free subscription where this user is created.
This user is treated with no subscription and prompting to get a new subscription.

My expectation was that , this new user must able to perform any operation as the original user who created this user id.

Please advise and correct me if there is any wrong in my understanding and guide me.

Thanks & Regards,
Gopal

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,629 questions
0 comments No comments
{count} votes

Accepted answer
  1. Andreas Baumgarten 104K Reputation points MVP
    2021-06-29T08:23:58.413+00:00

    Hi @Gopalakrishnan Kalan ,

    assigning the Global Administrator role to a user means: The user get's full access in the Azure Active Directory.
    The Global Adminstrator doesn't have any permissions in an Azure Subscription.

    To grant permission in an Azure Subscription the user needs to be added in the Subscription with the approbiate role:
    For Subscription:
    https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal-subscription-admin
    For a Resource Group:
    https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal?tabs=current

    ----------

    (If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

    Regards
    Andreas Baumgarten


0 additional answers

Sort by: Most helpful