Tag not monitored by Microsoft.
Hello Greg Kissell
This is not a credential issue and not a Global Administrator problem.
In Azure, Microsoft Entra ID (Azure AD) roles and Azure subscription/billing roles are separate systems. Being a Global Administrator does not automatically grant permission to:
- Access a subscription
- View billing data
- Cancel or delete a subscription
The subscription appears but shows Unauthorized because:
A subscription can appear in the tenant even if you are not its owner, when it is:
- Associated with the tenant, but
- Owned by a different billing account, billing profile, CSP partner, or account owner
In this situation, the Azure portal will list the subscription, but all actions fail with Unauthorized, including access, cancellation, or deletion — even for Global Administrators.
Only the subscription owner or billing owner can cancel a subscription, not Entra ID admins.
Reference: Who can cancel an Azure subscription https://learn.microsoft.com/azure/cost-management-billing/manage/cancel-azure-subscription
Microsoft supports only these owners for cancellation:
- Pay‑As‑You‑Go / Trial / Azure Plan → Subscription Owner
- Microsoft Customer Agreement (MCA) → Billing Profile Owner
- Enterprise Agreement (EA) → EA Account Owner
- CSP subscriptions → CSP Partner only
If your account does not hold the billing ownership, Azure will block cancellation with Unauthorized — even if billing is occurring.
The following will not work if you are not the billing owner:
- Being Global Administrator
- Elevating access in Entra ID
- Assigning Azure RBAC roles
- Clearing cache or switching browsers
- Re‑logging into the portal
Microsoft confirms that billing ownership cannot be overridden by directory roles.
The only supported resolution is to contact Azure Billing & Subscription Management Support. Billing support involvement when:
- A subscription is visible
- Access returns Unauthorized
- Charges are occurring
- The user is not the billing owner
Billing support is free and does not require subscription access.
Create an Azure support request (Billing) https://learn.microsoft.com/azure/azure-portal/supportability/how-to-create-azure-support-request
Billing support will:
- Identify the actual billing owner
- Validate whether the subscription was incorrectly created or orphaned
- Cancel or detach the subscription
- Stop future charges and address incorrect billing if applicable
If the answer is helpful, could you please click "upvote" it .
If you’re still experiencing the problem or need further clarification, please feel free to share additional information so we can continue investigating and assist you further.
Thanks,
Suchitra.